Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xuulcIiXcvzP9HJ_QxbIdUyhNNY.roa
File: xuulcIiXcvzP9HJ_QxbIdUyhNNY.roa (raw, json)
Hash identifier: 7zlM2xjM3U8aaoco090gd51c/6NMImVxgY+Eg6EHkEM=
Subject key identifier: C6:EB:A5:70:88:97:72:FC:CF:F4:72:7F:43:16:C8:75:4C:A1:34:D6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019CB957D593CF71D9BB1EB5F145DF4ACA0C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xuulcIiXcvzP9HJ_QxbIdUyhNNY.roa
Signing time: Wed 04 Mar 2026 14:54:27 +0000
ROA not before: Wed 04 Mar 2026 14:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 80.242.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:57:d5:93:cf:71:d9:bb:1e:b5:f1:45:df:4a:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 4 14:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6eba570889772fccff4727f4316c8754ca134d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:db:2a:df:17:c1:a1:0a:eb:ba:5b:07:9d:
c6:91:9e:94:3b:24:f5:20:50:a9:48:4e:dc:39:d6:
24:08:a3:7b:fa:1b:e9:29:b8:be:0a:1c:ad:d4:7a:
6c:0b:91:3b:15:44:55:5a:15:f3:fb:ed:43:3d:4f:
cb:82:80:c7:e0:06:39:d7:5c:d2:8e:87:4a:42:6f:
35:9b:5a:8f:0d:00:09:2d:1b:85:da:73:a4:b4:8e:
81:94:92:db:68:85:e2:2f:88:cd:d5:65:0c:57:b7:
18:69:b2:07:60:54:cb:ab:ac:5a:e2:4c:68:8c:6f:
30:d4:32:59:93:52:cf:db:73:fc:c4:4d:53:87:e6:
58:96:7c:c4:28:ee:99:db:cd:ba:8d:b8:22:d4:37:
58:ee:e3:36:8a:c9:77:ac:82:e3:04:93:81:78:76:
26:e2:b9:55:b4:5f:75:5f:b3:0d:51:39:63:40:bc:
4e:97:09:79:9d:0b:45:44:9b:07:0e:10:26:b3:7e:
e6:05:fb:94:11:d9:5d:c7:ac:c6:7d:e6:67:23:f3:
ee:3b:26:e2:8e:f2:a8:ab:02:83:28:3b:bb:2b:09:
9a:b2:38:15:e6:33:b6:0d:c8:b5:b3:03:0e:8a:c6:
82:9b:99:74:4c:02:84:56:07:0b:b3:30:79:f9:02:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:A5:70:88:97:72:FC:CF:F4:72:7F:43:16:C8:75:4C:A1:34:D6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xuulcIiXcvzP9HJ_QxbIdUyhNNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d5:86:d1:5e:b8:42:83:33:10:c5:1f:74:e9:7e:e2:ed:43:
be:0b:57:08:6c:6c:fd:19:b5:d1:b3:a7:c8:d8:33:f7:6f:78:
83:4b:93:e4:0c:84:33:5c:97:b6:70:ef:70:97:6e:53:0c:53:
3a:50:0d:89:1c:12:fe:59:8d:2b:b1:b3:de:b4:70:13:6c:37:
a1:5f:02:eb:8b:b4:22:19:62:bc:a4:58:80:2f:b9:3b:f9:e4:
74:5f:67:71:26:5e:40:f3:c5:e5:2a:cc:f4:80:82:84:c6:63:
1c:eb:30:d3:f1:3f:e6:6f:fb:1d:80:38:0c:3b:2d:32:7d:12:
04:24:35:b1:46:8a:4d:4e:5a:22:df:f1:c3:97:06:3b:38:b8:
f9:1a:53:40:aa:83:78:da:83:29:81:c1:b2:ff:d8:1e:d5:b3:
ae:d9:a7:21:dd:9d:16:8b:9d:e7:a7:de:85:45:8b:e1:b1:fe:
f7:24:4f:e4:31:f4:05:03:3e:0b:ec:72:f0:24:04:e0:50:4e:
81:1e:d2:71:bd:51:9b:25:6b:fc:20:2e:ce:76:fc:8e:73:45:
c7:7f:8d:b8:d9:61:34:96:58:43:c5:5b:d1:d3:88:96:8f:30:
c3:01:be:7b:ea:47:5a:ee:ac:0d:1e:0c:2b:6f:7a:4b:e5:60:
f8:03:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 21:46:54 2026 by rpki-client