Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/0cXxJ5BrjDm6rReB_iGqGCIVB64.roa
File: 0cXxJ5BrjDm6rReB_iGqGCIVB64.roa (raw, json)
Hash identifier: 3z1rKVdZaeGfXgSTMjxBzti3FlrMlqldx9sJbZNGjcw=
Subject key identifier: D1:C5:F1:27:90:6B:8C:39:BA:AD:17:81:FE:21:AA:18:22:15:07:AE
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 019E9243147D1E074EC5FF804E27ABBBAF60
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/0cXxJ5BrjDm6rReB_iGqGCIVB64.roa
Signing time: Thu 04 Jun 2026 10:52:09 +0000
ROA not before: Thu 04 Jun 2026 10:52:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 37.72.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:43:14:7d:1e:07:4e:c5:ff:80:4e:27:ab:bb:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Jun 4 10:52:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1c5f127906b8c39baad1781fe21aa18221507ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:3b:b7:b9:d3:09:7d:00:9a:0b:d2:ba:5c:
ff:b3:c5:08:54:e5:1d:84:e3:99:4b:b0:17:14:58:
be:a2:90:d5:fe:28:1d:59:2c:42:3a:76:59:2a:b7:
da:de:fa:49:70:0a:21:73:55:46:c2:b5:bd:e5:c3:
50:da:9f:d6:6a:dd:12:5f:a0:2d:40:d9:95:50:ae:
1b:c4:f4:fe:6a:86:bd:3a:d8:04:a0:78:71:aa:c2:
a5:26:b8:94:79:cf:c8:07:60:81:52:2d:1f:5b:40:
fe:63:ba:8b:50:f5:a8:d0:c3:67:0d:17:44:24:8e:
b4:96:a3:47:85:8f:cc:17:a2:79:e6:f3:8f:ce:e9:
e4:12:95:f2:b6:93:95:1a:98:e1:56:5e:7f:46:1d:
0a:9b:94:2a:36:7b:c4:85:74:8c:66:f5:c9:fc:2c:
c7:7c:66:5b:22:e9:b5:37:44:aa:b9:6b:f9:a8:07:
1b:98:18:aa:88:ee:b1:68:ce:e7:16:bf:53:7d:f8:
aa:31:40:92:2b:30:4c:c0:05:d7:2a:b6:85:ea:07:
3c:6c:bf:6c:9a:1f:28:b0:9d:46:f3:c5:eb:a8:c6:
ee:29:20:3d:b6:27:62:e2:31:12:af:6c:82:55:77:
72:cf:22:7e:57:07:c2:d8:36:6c:7b:80:93:ef:23:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:F1:27:90:6B:8C:39:BA:AD:17:81:FE:21:AA:18:22:15:07:AE
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/0cXxJ5BrjDm6rReB_iGqGCIVB64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:63:cb:0a:dc:56:d2:7e:b2:04:5c:29:95:db:67:d7:4e:b5:
8c:b8:4b:70:2e:f8:26:f2:47:b5:7a:f6:6a:b5:b7:a0:44:a5:
9f:d3:ae:7a:81:6b:e0:e5:97:27:c2:42:96:ed:9a:5a:b3:da:
5e:11:47:95:12:95:d1:48:cc:77:8c:aa:76:fe:9e:1a:16:4c:
32:18:08:5e:da:a9:1a:29:27:da:29:7c:a3:11:ba:6e:30:61:
06:86:bc:c6:0e:38:66:f6:93:b3:f5:78:ef:0e:c5:df:5f:4f:
40:de:a4:7c:5d:60:98:77:2b:85:54:95:f6:d0:d9:03:f2:54:
7b:8c:68:d4:7b:96:0d:91:23:e8:db:48:fe:6a:db:42:ba:0d:
de:c4:24:6d:14:bb:dc:14:d7:fd:0c:31:ca:f7:bb:4f:c9:50:
8f:9e:56:c8:b7:9f:3c:fe:eb:85:41:de:ea:b8:38:44:2c:a4:
4d:c6:0d:f5:d6:62:8f:ce:2c:66:a2:ad:dc:71:8c:8a:23:7d:
d4:d5:3f:44:02:b0:16:60:3a:d8:5c:37:56:46:25:57:eb:78:
48:78:e7:4c:61:e8:72:27:e5:d9:6f:3a:af:57:5c:be:08:20:
ed:c5:4a:e6:a7:18:ed:46:f5:ac:fd:c5:c6:6b:1f:78:70:74:
71:c5:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:15 2026 by rpki-client