Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/xyc3dtPBeCZodO1ea-M7uUOk0M4.roa
File: xyc3dtPBeCZodO1ea-M7uUOk0M4.roa (raw, json)
Hash identifier: OTJn4Cjc6VH+vP9GyHGv33tTlfRUx9SD+YiIfBghf20=
Subject key identifier: C7:27:37:76:D3:C1:78:26:68:74:ED:5E:6B:E3:3B:B9:43:A4:D0:CE
Certificate issuer: /CN=5a4bfcda761e4f2969f6343721879eca019eaede
Certificate serial: 019F23685B5B0FAEC89C12042F897EF18540
Authority key identifier: 5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/xyc3dtPBeCZodO1ea-M7uUOk0M4.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 130.149.0.0/16 maxlen: 16
141.23.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5b:5b:0f:ae:c8:9c:12:04:2f:89:7e:f1:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4bfcda761e4f2969f6343721879eca019eaede
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7273776d3c178266874ed5e6be33bb943a4d0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:68:cd:cb:e9:ab:66:a0:49:62:ef:c1:ff:
32:5c:6a:20:9f:b9:07:e2:f6:22:c8:ba:37:45:28:
7b:01:d1:2e:a8:ff:92:23:67:1a:68:1a:8d:28:9d:
8a:a7:34:89:31:22:3c:80:06:12:46:20:02:5f:5a:
06:4d:b4:5e:5e:63:6e:ac:2f:58:6b:ea:d2:38:08:
7e:a4:6a:7b:27:ae:12:ee:80:17:e1:80:fa:47:ea:
00:ce:ad:04:de:4f:db:3c:00:b8:4d:ae:96:d0:61:
df:8f:ad:00:ed:ce:19:83:7c:fd:76:48:07:ff:0c:
9c:31:86:97:79:b6:36:74:13:cd:47:ba:00:5b:fe:
82:38:f9:7d:01:b7:69:6f:40:2d:0e:d3:0e:67:7b:
7e:b3:5c:1c:ec:de:e6:79:fc:2d:4d:79:22:27:23:
62:72:d2:11:68:02:ce:74:f6:46:be:6a:17:a5:00:
cc:50:98:db:f4:db:5c:fd:51:20:68:1c:38:09:16:
60:89:f8:6d:5e:9e:7a:f5:9e:09:0f:09:6b:20:e6:
1b:ba:7a:14:56:af:4f:e1:1e:91:df:eb:ed:5d:14:
f4:73:63:68:fd:31:5a:d0:b0:0f:c9:91:a2:f9:1a:
d6:7c:3e:2d:08:99:df:ff:f5:d5:a9:da:ca:db:dd:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:37:76:D3:C1:78:26:68:74:ED:5E:6B:E3:3B:B9:43:A4:D0:CE
X509v3 Authority Key Identifier:
keyid:5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/xyc3dtPBeCZodO1ea-M7uUOk0M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.149.0.0/16
141.23.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:89:0a:61:30:35:c4:9c:06:03:2b:39:87:4b:74:a7:3c:a7:
4e:28:25:85:bf:3c:0d:46:ac:40:94:a8:82:29:a9:e5:8c:a0:
46:d1:be:69:40:7c:2c:ed:8c:8d:9d:39:76:6a:b3:41:85:52:
bc:97:51:2c:3f:17:13:0e:c9:cd:52:ad:ee:79:c7:f0:d2:b3:
8e:2e:2f:a5:8a:d4:d1:14:cd:43:65:11:a4:5f:a0:b7:58:90:
11:b3:34:56:fb:ee:da:ec:46:3c:cd:2f:0f:7b:3d:32:0a:e9:
c6:ce:4a:0f:67:3c:08:65:ea:b1:02:19:a1:2f:1a:be:aa:c2:
b3:1e:2a:d5:c2:1a:a5:36:fc:88:23:de:e3:50:9f:92:a5:cb:
f3:ff:1e:2e:e8:19:41:ac:3b:65:8f:16:52:5b:51:d4:1c:2d:
94:91:8a:1f:e4:74:76:4e:66:88:1b:55:87:94:ef:9d:65:70:
91:76:f0:e6:fb:99:26:4a:d2:dd:ad:11:13:6e:e7:ab:b4:67:
4a:31:67:02:3a:b6:11:0c:44:3a:60:37:f9:a4:fa:ef:68:3b:
26:49:f8:6a:e7:83:18:37:e4:83:be:fb:06:35:3d:9a:48:ba:
1c:2a:88:44:b9:8a:13:06:99:30:55:5e:43:27:5f:ed:75:66:
50:57:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:51 2026 by rpki-client