Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/xheccSOSMrMhQkmUs0ArySYjR94.roa
File: xheccSOSMrMhQkmUs0ArySYjR94.roa (raw, json)
Hash identifier: 13kL9yShAZBWeh3fCPAL0E49pb3DKTrvgC8bV26A7gk=
Subject key identifier: C6:17:9C:71:23:92:32:B3:21:42:49:94:B3:40:2B:C9:26:23:47:DE
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019D784E24AA163C47DB371E7A89B2BD2DEE
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/xheccSOSMrMhQkmUs0ArySYjR94.roa
Signing time: Fri 10 Apr 2026 16:51:20 +0000
ROA not before: Fri 10 Apr 2026 16:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199133
IP address blocks: 2a0d:d940:50::/46 maxlen: 46
2a0d:d940:5e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:4e:24:aa:16:3c:47:db:37:1e:7a:89:b2:bd:2d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Apr 10 16:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6179c71239232b321424994b3402bc9262347de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:e4:a8:6c:a5:81:c4:95:da:a1:d0:ac:77:
a6:a0:d7:da:f5:33:6d:ec:7a:ae:76:82:b3:c8:bf:
94:bd:0c:ce:0a:af:b3:ca:ce:f7:d5:4d:eb:15:12:
8a:f2:09:38:ac:b4:93:01:81:ed:45:15:54:92:0f:
ee:be:ee:c0:e1:af:3c:22:c2:97:5f:ba:30:47:b8:
16:6d:4d:3c:3a:27:c7:b0:f0:a0:21:13:1d:9b:fd:
cc:3e:61:0b:10:b7:b5:38:a5:e8:f4:1d:b3:33:cc:
77:d3:ba:7d:7a:fa:50:be:19:07:bd:4f:5a:ca:e1:
f0:bc:89:92:99:b8:b5:e3:2d:20:2d:24:5b:d1:90:
b4:e8:26:02:0b:b3:61:1c:5e:1c:4e:cb:7e:38:62:
7a:de:b0:13:91:55:71:7d:d2:d0:57:97:83:9b:18:
38:3a:b8:1b:4c:75:a3:5c:72:1e:40:ae:11:e5:93:
75:90:60:44:15:2a:ae:a3:6b:75:81:53:58:42:39:
f4:65:87:7c:51:bc:f2:e7:1f:fe:8b:ff:43:9a:1b:
7b:4d:55:d6:e0:9f:ff:4a:5c:63:cf:d0:d1:7b:b4:
61:db:c8:bb:f0:68:bf:4f:c0:ce:28:4a:42:16:69:
39:23:5d:24:50:b6:c5:be:18:5d:84:26:a9:5c:a7:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:9C:71:23:92:32:B3:21:42:49:94:B3:40:2B:C9:26:23:47:DE
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/xheccSOSMrMhQkmUs0ArySYjR94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:50::/46
2a0d:d940:5e::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ee:38:d4:cd:d6:53:6a:f0:e4:39:f8:d5:71:d9:33:77:01:
07:c4:d6:be:a9:53:49:84:d5:7b:c6:5e:99:7d:23:b9:f8:06:
1c:e0:75:47:16:50:ca:e9:38:16:b9:27:8a:26:2b:3b:d2:9c:
ff:78:ab:dd:6f:56:f5:a5:d5:68:9e:48:bc:94:5d:41:86:ad:
bc:f3:70:28:15:97:8b:ac:da:61:44:bf:69:b7:e2:c5:a1:42:
95:05:82:79:a3:c5:c6:f5:b6:77:3c:de:ce:30:a8:31:06:a3:
98:7d:47:2b:fb:13:63:0d:36:e6:d4:8c:8b:60:02:e5:84:3c:
76:0e:d9:ff:57:4d:fd:ce:a5:87:24:19:c9:53:fd:3d:a0:b5:
25:f5:e6:88:24:f4:15:9b:26:10:79:b2:33:6b:27:c5:e2:18:
6d:7a:ea:3d:13:bc:6a:9e:e2:cd:ee:f6:a0:91:c5:b3:1b:da:
de:49:0c:99:3e:23:73:f3:c0:3c:a1:34:17:22:40:6c:31:cd:
52:03:c6:ab:a6:d3:2c:87:86:d6:78:24:e5:43:4a:4c:ad:d2:
f7:38:f4:8c:a8:b2:d1:fc:8a:74:e8:5f:03:ba:b4:81:3d:86:
d9:dc:32:12:ef:13:fd:15:a3:4e:79:1d:dd:09:ac:ad:df:51:
18:33:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:55 2026 by rpki-client