Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa
File: XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa (raw, json)
Hash identifier: MGXnjAVWXxsjSqpO9GUP1arrzPGYa/FORm1VJm318GI=
Subject key identifier: 5E:41:45:E6:2C:BC:70:D1:22:30:66:CD:B6:CF:6C:30:B2:78:97:9A
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F6A6B060F50E5D6F8961FB4C433481A39
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa
Signing time: Thu 16 Jul 2026 10:13:46 +0000
ROA not before: Thu 16 Jul 2026 10:13:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 216.195.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:6b:06:0f:50:e5:d6:f8:96:1f:b4:c4:33:48:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 16 10:13:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e4145e62cbc70d1223066cdb6cf6c30b278979a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:c9:0e:17:4b:64:f0:bd:6d:b6:88:7e:14:
20:69:77:b2:5d:41:53:30:62:75:53:87:a7:94:1b:
55:e4:5d:09:ef:76:ca:04:12:69:20:9c:f3:22:d6:
6e:9b:50:da:c0:7b:a3:ce:cc:d4:8c:ce:41:b5:7d:
d9:40:bc:f8:d6:cd:7b:46:dc:54:ac:6a:33:7a:af:
a0:87:62:05:04:06:d7:c0:c6:33:1c:3e:16:ec:88:
d7:62:6d:78:a1:61:b8:84:20:2d:75:8f:7a:e6:fc:
e2:9e:13:64:08:9d:11:5d:3a:28:40:c8:d0:e5:71:
23:fa:c9:ec:44:bf:9e:a0:84:6a:ad:80:d7:d1:ff:
70:5e:d1:ee:e2:d7:94:27:29:53:1a:bb:46:95:a7:
7e:41:67:a1:4f:10:c9:34:f0:87:6b:b2:80:47:1d:
39:f9:10:26:59:c6:97:ff:5d:db:a7:32:92:bc:ec:
5c:22:be:67:30:4f:89:96:f9:94:42:fd:25:e8:39:
84:e3:bd:a4:37:2e:6b:6c:31:a6:ea:43:8f:09:ec:
8a:66:bf:58:7c:be:5f:93:5a:92:33:9f:bd:0f:dc:
a5:f0:46:d6:de:cb:3d:c1:dd:7c:73:86:16:1c:cd:
3d:77:54:0a:3f:a6:1c:fa:e5:6e:f1:1e:95:ed:66:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:45:E6:2C:BC:70:D1:22:30:66:CD:B6:CF:6C:30:B2:78:97:9A
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/XkFF5iy8cNEiMGbNts9sMLJ4l5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.212.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8b:9e:e9:22:89:1d:3f:91:52:c0:cf:8c:8a:26:c9:68:93:
fc:4b:f7:86:72:0e:38:89:35:c3:10:5a:a6:25:3c:ec:8e:c4:
d8:89:a4:30:75:01:f4:0a:14:f7:c6:25:30:97:9e:d5:6c:13:
2b:87:60:18:5e:b5:85:89:32:08:a3:5d:d0:a1:d8:38:e3:1d:
9a:87:2f:42:d6:05:c0:09:70:0d:da:23:ce:21:45:6c:08:74:
ef:0b:f2:12:59:8a:62:8a:b4:63:9b:a1:cb:d0:f3:f5:d5:4e:
7a:0d:03:d3:d1:d8:47:82:b7:5d:7a:c3:c6:66:60:7e:7d:7a:
f7:a4:e1:3f:99:f7:2a:3b:57:44:eb:05:bf:6c:d9:95:44:48:
56:0e:87:31:2f:a0:1a:d8:ed:02:f1:e3:1d:df:82:3d:c2:c2:
54:4f:14:fc:d4:35:4c:a3:fc:c9:eb:dd:49:40:25:7a:13:bf:
62:bd:d9:14:65:02:4a:1a:74:61:ba:ff:b4:1c:58:c9:f6:98:
ef:41:ee:c8:5e:53:89:a5:f8:23:60:fb:8b:b8:dd:87:2d:cb:
45:5d:d1:00:c7:ca:9d:fe:59:5f:9a:96:79:95:bf:c6:60:58:
80:c6:b2:a7:77:b1:77:8b:97:8c:c2:f3:91:12:2b:5c:ce:04:
91:db:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:12 2026 by rpki-client