Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa
File: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (raw, json)
Hash identifier: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=
Subject key identifier: C5:0D:21:C5:4E:61:E9:A0:AA:2A:80:68:CE:AD:E5:73:E3:99:BD:2D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019CD87EBF214BF544EF4BE4FB5B6DFBEE7F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa
Signing time: Tue 10 Mar 2026 16:05:10 +0000
ROA not before: Tue 10 Mar 2026 16:05:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39281
IP address blocks: 194.35.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:7e:bf:21:4b:f5:44:ef:4b:e4:fb:5b:6d:fb:ee:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 10 16:05:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c50d21c54e61e9a0aa2a8068ceade573e399bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:36:68:97:da:71:bf:db:2d:c0:a8:4a:60:
75:36:ca:87:65:fe:fd:8f:e3:62:2e:94:4d:be:74:
ae:08:0a:05:e8:5b:76:98:86:c4:a9:d2:07:76:c8:
7c:04:63:20:30:40:ba:27:f7:71:c9:3f:3c:ee:64:
d0:48:ff:cc:cf:f9:a4:a6:c6:a6:ee:70:38:ec:1a:
e0:d3:9d:75:a7:8f:e6:a6:33:ce:87:0e:e2:f9:fb:
97:f0:c4:80:58:84:a3:d1:30:5b:af:a7:a5:a7:52:
71:b0:86:68:27:a0:e4:07:2f:60:52:18:b6:77:be:
e4:93:46:45:a1:45:d0:a1:63:29:9e:2b:2b:c6:44:
ba:7d:9b:fb:89:dc:53:fe:c1:90:73:62:94:a4:37:
f0:63:fa:37:90:b6:3f:52:06:4d:4d:7f:e3:4e:03:
17:7f:a1:4a:c2:b0:3e:b2:53:c1:77:dd:35:f1:0f:
a2:93:62:80:dc:09:f6:42:96:dd:75:bc:04:67:60:
0d:16:e6:97:51:26:9b:10:4c:4d:58:6c:1c:29:c9:
24:89:34:70:9b:5b:42:6f:44:b9:7c:25:ef:3b:c0:
bb:98:9c:25:3f:e0:57:ef:5d:32:d1:a0:20:1d:f6:
6e:e6:93:0a:f0:36:0d:49:72:bf:e8:e0:94:3f:15:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:21:C5:4E:61:E9:A0:AA:2A:80:68:CE:AD:E5:73:E3:99:BD:2D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.91.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:08:72:49:d9:0b:68:bd:56:7c:24:37:91:eb:b6:3a:1a:
e6:45:35:14:af:d9:04:1b:d0:30:ae:73:47:69:63:73:a8:04:
4b:c6:d3:5b:07:56:26:3b:8d:46:77:de:af:25:72:a9:41:75:
27:35:9a:3c:c8:7d:68:ec:4a:32:c6:57:74:c1:e8:53:7a:d4:
b0:41:de:f2:89:55:30:da:d5:6b:7b:9b:0b:76:60:4a:7d:bb:
4d:96:8c:4c:34:bb:7b:ba:d4:12:39:ed:3a:16:15:cd:65:49:
f6:65:9d:e6:5e:2f:ca:87:f1:75:b2:db:9b:db:43:b7:65:c8:
cc:30:e1:eb:d9:5c:94:ee:4d:46:e1:ba:6c:81:ed:f7:11:3d:
1a:2b:18:98:3b:26:18:1c:f9:5c:2f:54:d6:08:69:55:1e:a8:
ad:1e:7d:63:76:86:3e:da:c1:7d:0b:34:f4:83:d2:b3:f7:fc:
be:00:89:43:c0:be:0f:a5:f9:58:2a:22:76:fb:03:30:9f:97:
8c:7b:07:81:eb:e7:7a:ee:28:27:ce:37:ba:da:92:e9:12:33:
fe:b8:79:da:92:31:8c:37:f8:8c:52:e9:e0:f0:a5:94:5e:ed:
9f:d9:7d:6b:01:32:8a:15:a5:2a:a6:43:ba:76:24:a7:dc:f4:
e5:ea:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:28:42 2026 by rpki-client