Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/xlhY8tX9lBwHVp8VuomicH6lW4o.roa
File: xlhY8tX9lBwHVp8VuomicH6lW4o.roa (raw, json)
Hash identifier: aR0n4UA9z3cBX9/a0HFsNmvZi8ea7RGY46C+J9dNC0I=
Subject key identifier: C6:58:58:F2:D5:FD:94:1C:07:56:9F:15:BA:89:A2:70:7E:A5:5B:8A
Certificate issuer: /CN=92eed60b119c263dd0d40cefe9fbd6548935ae5f
Certificate serial: 019F23689BBC310FA46E84C51924596A7757
Authority key identifier: 92:EE:D6:0B:11:9C:26:3D:D0:D4:0C:EF:E9:FB:D6:54:89:35:AE:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/xlhY8tX9lBwHVp8VuomicH6lW4o.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 134.94.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9b:bc:31:0f:a4:6e:84:c5:19:24:59:6a:77:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eed60b119c263dd0d40cefe9fbd6548935ae5f
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c65858f2d5fd941c07569f15ba89a2707ea55b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:a3:40:d6:a7:86:50:47:3d:9b:22:30:74:
d6:f8:ff:55:52:05:8a:96:c0:45:1a:07:85:d9:5b:
25:50:1f:74:35:01:9f:f2:9e:79:51:ec:1f:de:7e:
eb:fe:fa:d4:90:6e:0d:ee:93:6a:a9:98:25:68:b0:
7c:57:4b:bf:b0:c3:7a:2d:78:84:59:17:94:6c:09:
f3:a9:51:5a:2a:ec:21:82:a3:f4:52:cb:bb:c1:63:
11:4a:94:8b:5f:2c:c9:6c:d1:af:fe:5f:08:f3:a6:
24:db:f1:d7:cf:aa:03:ec:27:4b:04:f6:2e:31:a0:
2c:1a:a8:5f:51:5e:23:b7:f3:fa:73:bb:00:f9:3f:
62:66:b8:79:79:b2:28:a5:f6:96:3a:1e:ba:26:d9:
ed:e6:fa:9c:2c:eb:0e:8c:9d:59:f7:5d:b4:e7:31:
1b:e8:3d:45:09:b7:f6:e6:a4:ea:73:cc:75:ec:24:
01:b6:ed:da:bf:bb:cb:04:fd:9a:13:73:9e:a6:47:
91:be:c2:c9:80:cf:8a:66:21:69:25:01:ec:5a:e7:
51:96:71:36:e2:69:d2:8e:ab:ff:d5:2f:61:f3:c7:
97:80:6f:84:86:86:90:55:fb:6d:d1:1f:98:26:ad:
1e:b6:36:51:be:b4:c6:26:cf:e6:3d:4d:1d:1f:02:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:58:F2:D5:FD:94:1C:07:56:9F:15:BA:89:A2:70:7E:A5:5B:8A
X509v3 Authority Key Identifier:
keyid:92:EE:D6:0B:11:9C:26:3D:D0:D4:0C:EF:E9:FB:D6:54:89:35:AE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/xlhY8tX9lBwHVp8VuomicH6lW4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:cb:c7:45:e7:a2:42:f9:fa:4d:8a:11:3f:cb:06:30:aa:85:
f4:3b:66:09:d6:db:7d:ad:04:4f:ca:c6:c3:87:cc:4d:b0:40:
69:47:91:3b:bb:85:f8:15:ce:9e:ca:49:53:f0:cd:b5:b9:8f:
65:d0:32:d7:cf:e9:7a:95:77:29:6f:5a:e5:ca:78:8d:03:14:
49:10:4e:7b:f5:dc:28:cb:fc:31:09:cc:a4:2c:59:ba:4a:14:
09:75:53:2e:ef:8e:17:f9:c6:04:a8:22:8f:18:6a:05:d2:2c:
07:0a:71:08:0c:0d:2e:a8:d4:bc:6e:fd:48:7f:b7:2f:2e:48:
92:0e:76:cf:c7:20:2a:dd:bf:ba:da:a8:2d:06:cd:fc:56:d3:
f3:24:19:ab:37:5e:d2:2c:37:ae:d3:74:8a:dd:08:b6:41:ff:
10:13:23:de:9a:fd:aa:15:2a:05:16:85:4d:22:71:f6:09:f9:
e4:f3:f2:c5:b5:94:1c:90:30:2b:e0:ec:b8:64:0a:63:20:7e:
2c:39:05:12:9b:96:ce:8e:a4:bf:a2:54:50:ca:d5:97:c0:f7:
30:a2:0b:2d:2c:aa:e2:37:be:28:ef:21:3f:15:5d:d3:2a:e6:
b4:5f:2f:d2:64:ad:b2:3c:50:ee:f0:68:1f:38:29:88:da:76:
27:eb:e7:2a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ8jaJu8MQ+kboTFGSRZandXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWVkNjBiMTE5YzI2M2RkMGQ0MGNlZmU5ZmJkNjU0ODkz
NWFlNWYwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjU4NThmMmQ1ZmQ5NDFjMDc1NjlmMTViYTg5YTI3MDdlYTU1YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt66jQNanhlBHPZsiMHTW+P9VUgWK
lsBFGgeF2VslUB90NQGf8p55Uewf3n7r/vrUkG4N7pNqqZglaLB8V0u/sMN6LXiE
WReUbAnzqVFaKuwhgqP0Usu7wWMRSpSLXyzJbNGv/l8I86Yk2/HXz6oD7CdLBPYu
MaAsGqhfUV4jt/P6c7sA+T9iZrh5ebIopfaWOh66Jtnt5vqcLOsOjJ1Z91205zEb
6D1FCbf25qTqc8x17CQBtu3av7vLBP2aE3OepkeRvsLJgM+KZiFpJQHsWudRlnE2
4mnSjqv/1S9h88eXgG+EhoaQVftt0R+YJq0etjZRvrTGJs/mPU0dHwLyvwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMZYWPLV/ZQcB1afFbqJonB+pVuKMB8GA1UdIwQY
MBaAFJLu1gsRnCY90NQM7+n71lSJNa5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3U3V0N4R2NKajNRMUF6djZmdldWSWsxcmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YjMxZWUtMjRmYi00YzAzLWJlMmUt
Mzc3NmZkNDdkYzY1LzEveGxoWTh0WDlsQndIVnA4VnVvbWljSDZsVzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82YjMxZWUtMjRmYi00YzAzLWJlMmUtMzc3NmZkNDdkYzY1
LzEva3U3V0N4R2NKajNRMUF6djZmdldWSWsxcmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhl4wDQYJ
KoZIhvcNAQELBQADggEBAF/Lx0XnokL5+k2KET/LBjCqhfQ7ZgnW232tBE/KxsOH
zE2wQGlHkTu7hfgVzp7KSVPwzbW5j2XQMtfP6XqVdylvWuXKeI0DFEkQTnv13CjL
/DEJzKQsWbpKFAl1Uy7vjhf5xgSoIo8YagXSLAcKcQgMDS6o1Lxu/Uh/ty8uSJIO
ds/HICrdv7raqC0GzfxW0/MkGas3XtIsN67TdIrdCLZB/xATI96a/aoVKgUWhU0i
cfYJ+eTz8sW1lByQMCvg7LhkCmMgfiw5BRKbls6OpL+iVFDK1ZfA9zCiCy0squI3
vijvIT8VXdMq5rRfL9JkrbI8UO7waB84KYjadifr5yo=
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:01:01 2026 by rpki-client