Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/xJVZmwhY7utaptENw2W7cxJs8A0.roa
File: xJVZmwhY7utaptENw2W7cxJs8A0.roa (raw, json)
Hash identifier: 6LO6+5kQiWhvtv1cMZ+cZDZ7KIpd7UwlqzDqG/cJAzE=
Subject key identifier: C4:95:59:9B:08:58:EE:EB:5A:A6:D1:0D:C3:65:BB:73:12:6C:F0:0D
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019EB036A53B84E30E71474AF3DFCAFF8FB4
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/xJVZmwhY7utaptENw2W7cxJs8A0.roa
Signing time: Wed 10 Jun 2026 06:27:11 +0000
ROA not before: Wed 10 Jun 2026 06:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215185
IP address blocks: 45.140.181.0/24 maxlen: 24
2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:36:a5:3b:84:e3:0e:71:47:4a:f3:df:ca:ff:8f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jun 10 06:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c495599b0858eeeb5aa6d10dc365bb73126cf00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:b8:1e:93:b0:70:df:6a:35:c8:4b:1d:38:
58:fd:2e:32:ef:df:33:a3:ff:1b:42:fe:35:ee:33:
dc:40:c0:ee:fe:55:a3:75:dc:01:e5:18:7d:bc:42:
63:aa:7f:57:46:50:4f:55:cd:99:3c:0e:49:84:00:
52:45:f0:88:56:67:79:05:09:9b:3b:74:b4:62:1f:
8f:18:f9:ca:00:3e:59:eb:4b:f2:16:27:df:d9:67:
d6:47:52:de:3c:f4:27:af:45:1e:cc:8c:b5:b7:f7:
1a:fb:c2:11:ba:e2:34:ea:9a:ea:ac:ff:9b:c8:64:
b4:c0:91:66:e2:72:d7:cb:2b:46:89:71:2e:91:88:
5f:46:2a:1a:bc:96:4d:a2:8e:fc:89:02:15:96:9c:
6e:52:45:b9:0d:70:84:f8:26:15:7d:fb:a6:4a:96:
af:32:84:1c:63:78:d8:ae:21:b1:54:d5:a8:3f:e4:
07:ee:e8:6e:ed:26:12:82:94:8c:67:52:71:7a:b6:
51:ea:d1:78:85:41:37:b3:26:ff:be:2f:bb:54:b3:
6e:1c:cc:e5:be:d3:19:dc:5a:21:cb:72:4d:62:3a:
5c:39:63:0c:fb:61:28:20:9d:de:8b:00:11:8b:6b:
d6:58:44:07:0e:71:fa:26:e1:fc:cf:46:94:27:60:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:59:9B:08:58:EE:EB:5A:A6:D1:0D:C3:65:BB:73:12:6C:F0:0D
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/xJVZmwhY7utaptENw2W7cxJs8A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.181.0/24
IPv6:
2a0e:c5c1::/48
Signature Algorithm: sha256WithRSAEncryption
52:fa:81:93:04:8d:c9:ee:c5:7b:1a:35:58:c5:2d:c9:f8:ff:
57:ff:90:64:80:65:85:94:90:db:66:28:f6:14:e4:1f:03:1a:
ec:d3:11:3c:21:f0:da:ba:71:25:6c:32:44:d8:ba:8e:ac:c9:
f1:2e:ed:31:cc:c1:70:47:d4:3c:bd:76:42:82:a6:23:72:a7:
98:01:22:59:f0:1e:91:37:9c:54:81:83:9c:b3:88:a5:7f:a8:
f6:4a:b6:bc:60:b2:26:6b:b8:d1:f9:07:27:ec:73:ae:75:2e:
a2:f1:61:e4:7b:d2:64:2b:72:3b:e9:8c:f1:3a:f3:14:63:6b:
65:1b:33:02:02:f1:c3:47:b8:a4:2b:10:ed:d6:69:f3:86:bb:
4c:9e:f3:18:4f:92:ed:c4:67:09:14:6b:59:b5:07:e2:2c:41:
33:9f:fc:5b:19:0c:91:c7:3b:21:9d:6b:0d:0e:6a:35:e1:03:
f9:84:ab:53:de:38:95:5a:14:bd:5e:37:ee:0b:45:2b:cc:24:
1d:95:b7:4a:27:3c:54:f2:08:ec:d1:a5:fd:6c:a7:62:50:bb:
0e:da:07:a3:b1:2d:15:41:c5:7b:48:79:51:f3:0e:9c:df:a4:
4b:7d:de:ad:88:ed:1e:d8:6c:70:b1:a9:23:36:ea:50:a9:8b:
3e:d1:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:00 2026 by rpki-client