Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xG0zgblfhVPreXxfDvYTKJ_X8X0.roa
File: xG0zgblfhVPreXxfDvYTKJ_X8X0.roa (raw, json)
Hash identifier: GYYwM+p4GrJMoRFb3I5V9KkwXbaKA+de6LTtDoVJgqo=
Subject key identifier: C4:6D:33:81:B9:5F:85:53:EB:79:7C:5F:0E:F6:13:28:9F:D7:F1:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019ECF97D3CD7DCDCEF30AB5AEC34062B578
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xG0zgblfhVPreXxfDvYTKJ_X8X0.roa
Signing time: Tue 16 Jun 2026 08:41:34 +0000
ROA not before: Tue 16 Jun 2026 08:41:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205380
IP address blocks: 45.8.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:97:d3:cd:7d:cd:ce:f3:0a:b5:ae:c3:40:62:b5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 16 08:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c46d3381b95f8553eb797c5f0ef613289fd7f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:39:b8:e1:e5:f8:6d:63:e9:f3:8b:d6:e0:
4e:7c:f1:c9:fd:00:83:de:05:8d:e8:28:18:03:e8:
84:80:94:4f:af:4a:eb:ef:c7:b5:13:1a:54:e1:b6:
91:fa:2a:48:60:63:4c:5a:4a:56:0c:46:e1:97:6c:
7e:0b:17:ce:f2:cb:9d:4c:e8:f1:ad:85:82:86:fe:
c5:c2:6d:03:3a:21:02:ac:43:2d:e8:7d:db:68:39:
3d:8c:da:a7:88:83:26:6a:77:3e:05:ff:df:5a:ed:
79:05:2b:10:ba:fc:59:e8:fb:60:ca:86:31:b9:ba:
c7:e5:f1:c0:0d:64:b7:2f:df:2d:f3:00:10:f8:f1:
48:09:8c:eb:d8:5d:f0:d6:b2:67:c2:7f:9d:3d:7d:
dc:a2:56:04:8b:17:fa:3a:35:8e:60:ec:64:49:0c:
b0:04:e2:45:93:0b:6f:85:1c:35:c6:2b:14:84:36:
74:10:09:56:5e:9e:95:6e:0a:a6:e8:b5:ae:70:a5:
38:12:07:2a:26:e1:b3:93:e7:46:d9:40:90:ac:f1:
e2:a5:0c:c3:8a:19:da:73:ab:d1:32:5e:fc:46:18:
77:d2:02:d8:75:f2:9d:cb:49:84:60:7a:87:71:c3:
70:0a:fd:05:f9:c7:22:ef:bb:77:c1:34:d5:b6:68:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:33:81:B9:5F:85:53:EB:79:7C:5F:0E:F6:13:28:9F:D7:F1:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xG0zgblfhVPreXxfDvYTKJ_X8X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:07:2c:f1:ec:db:bc:00:97:1b:d5:9d:72:13:ab:98:a5:a3:
30:a4:3b:24:01:53:46:7b:9a:08:c8:2a:f1:f1:f9:b9:21:db:
f0:3c:dc:46:b9:9e:70:34:7a:d5:91:22:91:7e:1c:fc:51:8e:
fb:9e:d6:09:d4:74:81:51:8f:9c:77:2e:03:7b:87:37:76:ed:
c8:d6:48:a9:5f:ac:dd:9d:49:21:da:65:b6:6a:c8:59:e1:07:
16:98:88:0b:7a:22:2b:76:59:c8:20:fa:d3:e8:f7:e2:84:d3:
a7:1c:c8:92:83:0b:e1:74:43:b6:fa:d5:75:70:6a:de:71:15:
19:05:ce:de:bc:65:6c:8f:d9:4a:d5:a8:60:6b:95:7c:5e:9d:
23:9b:76:39:19:a7:9d:eb:98:93:c2:c8:65:d2:f6:0d:7c:9b:
23:30:fa:8b:8b:9d:b3:60:88:80:f9:c5:7f:00:69:17:48:8d:
30:0d:e3:18:14:9f:39:cc:39:e1:f4:93:b9:81:e4:c3:7f:6d:
cc:e3:38:f3:da:87:5e:de:25:12:5e:c8:0a:66:cd:dd:59:5c:
04:47:b2:63:3c:bc:2f:70:ee:b1:83:ee:fe:2d:b5:cc:28:3e:
52:a9:df:81:12:8f:f9:21:e0:f0:4b:29:97:32:72:07:4a:07:
68:e1:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 11:45:03 2026 by rpki-client