Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/b6ec4c-91a9-45ef-b807-9270b9630aee/1/X7rqX2J8-x6WRJ_n-Mf3jT6296c.roa
File: X7rqX2J8-x6WRJ_n-Mf3jT6296c.roa (raw, json)
Hash identifier: mGZwsMpiz+cTg4Xf6povXiYHjhHFV0bZmdYBf6rUfcM=
Subject key identifier: 5F:BA:EA:5F:62:7C:FB:1E:96:44:9F:E7:F8:C7:F7:8D:3E:B6:F7:A7
Certificate issuer: /CN=0f36de46630b5000133b772c8510510fc3ba51c2
Certificate serial: 01A179DEC65D278C72392E42C84439157D18
Authority key identifier: 0F:36:DE:46:63:0B:50:00:13:3B:77:2C:85:10:51:0F:C3:BA:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzbeRmMLUAATO3cshRBRD8O6UcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/b6ec4c-91a9-45ef-b807-9270b9630aee/1/X7rqX2J8-x6WRJ_n-Mf3jT6296c.roa
Signing time: Mon 26 Oct 2026 20:20:05 +0000
ROA not before: Mon 26 Oct 2026 20:20:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215771
IP address blocks: 193.84.95.0/24 maxlen: 24
2a14:f200:dea::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/b6ec4c-91a9-45ef-b807-9270b9630aee/1/DzbeRmMLUAATO3cshRBRD8O6UcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/b6ec4c-91a9-45ef-b807-9270b9630aee/1/DzbeRmMLUAATO3cshRBRD8O6UcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzbeRmMLUAATO3cshRBRD8O6UcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:de:c6:5d:27:8c:72:39:2e:42:c8:44:39:15:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f36de46630b5000133b772c8510510fc3ba51c2
Validity
Not Before: Oct 26 20:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fbaea5f627cfb1e96449fe7f8c7f78d3eb6f7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:9f:9b:14:36:72:c6:31:9c:ec:4c:5c:63:
98:68:bc:23:b7:9a:40:9b:ae:40:73:2f:7c:f5:e8:
dc:15:57:af:60:e6:2f:a4:97:42:af:6f:1d:69:28:
cb:2a:3a:1a:8e:e9:2d:2c:54:a4:3c:42:78:ac:14:
e4:29:c9:b9:30:0e:69:6e:c0:58:c2:a8:1d:b3:62:
dd:80:08:8d:84:3f:a3:8d:ba:38:76:0f:37:a6:20:
f6:07:de:c6:55:7b:89:57:cb:a3:91:f1:a5:32:ad:
4a:0c:84:fa:57:06:32:f3:5d:1f:50:67:b6:84:d6:
82:80:92:3e:f8:3f:3a:62:51:f4:ab:f0:cf:51:72:
ba:fc:d9:52:54:dc:11:c3:03:74:60:45:ba:79:c0:
82:5f:ff:b5:7b:dd:4c:63:dc:e6:7d:6b:1e:5a:d4:
f0:2b:64:a8:ed:e6:5d:ff:78:78:6c:8c:bb:49:a7:
c7:cb:98:a8:51:68:1a:37:61:29:7a:61:13:61:db:
09:5b:29:e8:74:64:5c:62:6b:11:f7:a0:c6:88:b2:
e5:60:91:44:94:34:19:7c:d7:15:a9:df:ac:2f:b8:
97:92:be:bc:93:af:79:24:29:07:7a:81:51:9a:64:
e4:dd:e7:45:ca:10:3e:d1:e8:d2:43:51:c3:d7:78:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:EA:5F:62:7C:FB:1E:96:44:9F:E7:F8:C7:F7:8D:3E:B6:F7:A7
X509v3 Authority Key Identifier:
keyid:0F:36:DE:46:63:0B:50:00:13:3B:77:2C:85:10:51:0F:C3:BA:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzbeRmMLUAATO3cshRBRD8O6UcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/b6ec4c-91a9-45ef-b807-9270b9630aee/1/X7rqX2J8-x6WRJ_n-Mf3jT6296c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/b6ec4c-91a9-45ef-b807-9270b9630aee/1/DzbeRmMLUAATO3cshRBRD8O6UcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.95.0/24
IPv6:
2a14:f200:dea::/48
Signature Algorithm: sha256WithRSAEncryption
48:7f:4f:4e:b3:54:80:06:c2:5b:1b:87:39:bd:ec:a5:2c:fe:
9b:22:84:0b:20:ee:1a:3e:34:04:2a:54:75:c6:60:5e:7b:95:
70:d0:e2:b0:24:b9:a7:b4:67:f6:65:17:d4:1a:4c:98:69:25:
5b:51:4e:c6:a8:3e:67:2f:62:f5:4b:96:46:aa:e2:4f:b1:9e:
29:5b:11:0d:94:e7:ab:c6:ab:00:ea:dc:42:ad:89:25:bb:58:
42:08:9e:0d:44:34:66:a6:85:03:21:59:1d:13:1f:b8:f9:97:
59:29:af:65:6a:17:39:07:62:0e:4a:b1:c5:d8:a0:fe:02:5a:
4e:a8:05:4b:e6:22:28:0d:17:5e:2c:1d:5d:da:08:5a:c9:be:
c2:6a:bc:7e:2f:47:74:f5:fe:19:07:77:d3:ab:45:4d:19:15:
4b:52:4d:fc:57:94:c6:be:be:da:96:a2:54:32:13:40:48:0e:
67:f1:a7:e2:61:4a:85:63:63:e4:a1:9d:e8:f4:a7:db:4e:29:
52:fe:54:40:60:de:6c:62:c0:e1:6f:4a:fb:c3:69:5d:5d:d6:
1c:3f:51:5c:ca:3e:f0:9b:fd:e4:aa:2a:c0:65:a3:e3:64:58:
84:e1:1b:4a:0c:f5:ad:7c:36:2b:7b:2c:db:02:6f:65:22:d0:
25:2c:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:09 2026 by rpki-client