Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xpj3PmbX54dTSWlvcFAhmPAw4us.roa
File: Xpj3PmbX54dTSWlvcFAhmPAw4us.roa (raw, json)
Hash identifier: FjQRU1npNCtAj9umcUCfOp3zddInsTY3Mzrwd9Oob0E=
Subject key identifier: 5E:98:F7:3E:66:D7:E7:87:53:49:69:6F:70:50:21:98:F0:30:E2:EB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FF4FC20CDFE929A8B443BAEAC720C4F8D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xpj3PmbX54dTSWlvcFAhmPAw4us.roa
Signing time: Wed 12 Aug 2026 07:59:51 +0000
ROA not before: Wed 12 Aug 2026 07:59:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 193.8.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:fc:20:cd:fe:92:9a:8b:44:3b:ae:ac:72:0c:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 12 07:59:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e98f73e66d7e7875349696f70502198f030e2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:b6:22:fd:e5:4a:56:e4:85:2a:91:32:c1:
18:aa:0f:15:2a:df:a1:74:3d:31:f8:0d:ef:a5:05:
0e:00:19:08:aa:ce:9b:91:98:8e:70:6b:f1:ec:02:
e2:29:3e:d2:ba:9a:d0:1b:e3:05:17:a8:f1:8b:98:
41:0d:a0:80:c2:f8:aa:18:d9:a4:9e:66:4b:9f:35:
a5:9a:dd:fd:a6:22:5d:a4:ed:f5:a6:65:08:9b:f9:
1f:ba:2d:11:15:51:74:b5:c6:d0:86:79:5b:31:a5:
40:ae:b8:fa:20:79:b4:24:64:9c:a5:22:79:6d:75:
d4:97:de:65:90:12:36:67:d4:ec:f9:c3:df:6f:30:
12:b0:d4:b4:45:0e:7f:80:1a:61:05:bf:9a:1b:8a:
8b:1c:f1:7d:85:fc:70:bc:df:fc:9e:c0:58:23:6a:
38:25:0c:e4:b2:0d:53:09:41:a6:79:5b:be:7e:e1:
b4:28:41:a7:15:5e:58:a9:48:42:88:96:f1:fb:38:
1e:35:06:97:bd:38:9c:18:06:40:fb:8f:b9:24:c4:
a5:21:41:5b:90:00:f2:7d:c4:0a:b7:7d:20:fb:a0:
41:1b:f9:7e:4e:5b:0c:75:08:4f:dc:d7:fc:da:29:
97:5f:03:07:e6:54:53:e2:79:7c:c9:3a:8b:34:4d:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:F7:3E:66:D7:E7:87:53:49:69:6F:70:50:21:98:F0:30:E2:EB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xpj3PmbX54dTSWlvcFAhmPAw4us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6d:2e:ec:5b:d8:6f:90:cb:0e:88:8d:6d:68:75:1b:a0:ed:
a9:1b:a3:0b:f6:8f:f5:12:cd:35:14:3c:ad:19:ca:24:6f:c7:
72:93:71:1e:6b:88:24:21:15:3c:28:b9:31:50:95:02:b9:37:
07:e9:fd:01:3f:0e:c5:7b:76:26:8e:f6:10:d5:62:86:d9:a0:
6d:a9:8f:7b:a5:5d:ea:48:ef:b2:a1:03:02:f6:7d:7c:85:64:
1b:b3:50:87:f6:28:68:05:e6:18:5f:18:57:36:9f:90:14:ba:
bc:74:8a:5f:4d:25:b1:b7:22:6f:30:0a:27:c1:6c:0d:ab:84:
e7:c4:86:35:13:d2:ca:15:58:7c:f4:2f:7a:34:b6:fc:2c:cc:
4c:f6:1c:c6:b7:40:03:79:5e:82:9f:f8:46:b6:05:87:9c:b0:
1e:6e:dc:c0:92:0b:94:e3:f8:54:23:63:b2:b4:b9:80:27:ca:
9c:3e:da:11:2e:6a:bd:1b:b0:05:e0:ce:05:a4:cc:93:f8:d9:
52:5b:6d:ec:a1:e6:b5:d1:31:d5:a5:67:61:95:89:a1:bb:5d:
cd:e9:b6:47:1e:b2:59:f3:4d:b4:fd:e6:21:ca:21:b8:39:bd:
ee:e0:68:9a:70:3e:3f:34:75:2b:eb:f6:76:3d:0b:99:a4:cd:
7f:b6:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 22:19:19 2026 by rpki-client