Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/XRMagsKMowgWkMH2-b6-6BAJzvY.roa
File: XRMagsKMowgWkMH2-b6-6BAJzvY.roa (raw, json)
Hash identifier: e5GQj30Ck4x8b9A5ID17Zr1fimQ+S0NzIWv6rtDEQVU=
Subject key identifier: 5D:13:1A:82:C2:8C:A3:08:16:90:C1:F6:F9:BE:BE:E8:10:09:CE:F6
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A01D8C96D1340A3663308A9D13C8B68343
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/XRMagsKMowgWkMH2-b6-6BAJzvY.roa
Signing time: Thu 20 Aug 2026 05:02:28 +0000
ROA not before: Thu 20 Aug 2026 05:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 84.55.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:8c:96:d1:34:0a:36:63:30:8a:9d:13:c8:b6:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 20 05:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d131a82c28ca3081690c1f6f9bebee81009cef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:ab:31:45:b2:83:f6:a8:b5:99:d6:b8:3c:
27:25:df:75:b2:25:38:92:b9:33:70:f6:47:d3:03:
a4:14:54:64:a1:5c:89:ce:1c:13:35:63:54:ea:97:
3a:5e:ec:be:aa:4a:62:7a:70:b3:77:0d:4b:61:e4:
e0:03:cb:51:b5:bc:5f:72:ec:5c:a7:4d:95:9d:2c:
e3:2e:e2:81:84:e3:c8:4e:65:0e:ec:71:cc:eb:a4:
d7:1a:51:6b:4c:cf:de:03:78:21:e9:bb:34:5d:26:
97:7c:bc:24:88:15:d7:1c:ec:36:71:aa:94:01:83:
11:91:dc:bc:5e:cc:22:a7:af:53:98:4c:52:eb:28:
1c:10:54:a3:b8:a5:d8:97:1c:66:00:4d:58:51:ae:
23:31:40:33:cb:af:98:4e:4d:7e:28:d5:8a:8b:e5:
b7:a7:82:49:4d:e5:70:80:d6:97:38:e7:42:6c:c8:
2e:26:f1:cd:b4:55:05:4b:e0:4a:61:89:7b:85:11:
39:6e:9b:c1:4c:93:8e:b1:30:ed:7d:fc:12:92:69:
24:3e:19:bb:3e:1d:28:a4:3b:0f:e7:82:ca:fd:69:
20:ac:cf:d0:59:6d:6e:a1:36:55:ab:cc:2d:81:82:
45:0e:a3:f2:12:b6:26:4f:58:9f:39:e1:ea:a6:ef:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:13:1A:82:C2:8C:A3:08:16:90:C1:F6:F9:BE:BE:E8:10:09:CE:F6
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/XRMagsKMowgWkMH2-b6-6BAJzvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e7:bd:37:d2:87:c5:6a:80:ea:07:a0:ee:69:e8:bf:9a:41:
2b:98:c5:87:36:a0:5b:08:37:9f:a1:ff:79:71:12:57:bf:3b:
80:a0:94:3d:92:b2:5e:07:11:14:60:98:36:5e:94:c4:b8:4d:
5b:99:00:2c:15:89:1a:f6:62:e2:72:72:2d:52:2d:cd:b6:3a:
ac:b1:40:cb:f8:42:a9:30:07:5f:53:d4:82:8f:39:e3:9b:19:
56:56:db:e3:4e:9a:84:23:d1:2e:da:e7:b2:0b:37:f5:08:7f:
63:e3:23:f3:9b:b7:cd:10:e2:24:e2:11:44:63:3c:a1:3f:fd:
5e:c5:9a:d0:b9:e4:ec:80:b1:22:a5:de:6d:45:21:2e:6d:34:
fd:7e:be:24:e1:a7:e7:fe:1d:10:2b:60:d2:a8:f1:42:e4:fc:
1d:0f:8d:03:fc:ea:91:6d:96:f4:2a:fc:58:a4:88:00:6b:fc:
63:94:57:35:6a:38:79:7d:75:15:b4:9a:7c:ef:60:e6:b6:84:
52:08:4b:18:73:89:0f:9f:d2:a0:c3:20:d9:18:94:45:78:83:
8f:b2:2b:a4:1c:86:35:66:3b:87:49:33:49:0e:23:3f:83:4f:
28:35:2f:83:d6:a1:1f:45:4b:07:14:fd:a2:60:e3:ab:1c:9b:
17:f5:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:41 2026 by rpki-client