Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/x6jgvumw8oDL54hN0MXCYKM2_Z0.roa
File: x6jgvumw8oDL54hN0MXCYKM2_Z0.roa (raw, json)
Hash identifier: 0+zNXAF4ybCppHxdpcgBL9DpQoeamBo0aEiuJ2e3+Oo=
Subject key identifier: C7:A8:E0:BE:E9:B0:F2:80:CB:E7:88:4D:D0:C5:C2:60:A3:36:FD:9D
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 01A05BC7C3D62D43576B013D1D785DF8189C
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/x6jgvumw8oDL54hN0MXCYKM2_Z0.roa
Signing time: Tue 01 Sep 2026 07:03:33 +0000
ROA not before: Tue 01 Sep 2026 07:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 194.150.73.0/24 maxlen: 24
194.150.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:c7:c3:d6:2d:43:57:6b:01:3d:1d:78:5d:f8:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Sep 1 07:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7a8e0bee9b0f280cbe7884dd0c5c260a336fd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:5e:14:f5:e3:08:b5:08:25:f3:42:43:ca:
66:2d:d5:a6:86:50:e6:68:0e:43:c2:61:91:21:0e:
8c:63:a8:1b:49:90:68:34:1d:a7:c5:0a:4a:86:59:
e7:62:16:fc:82:8f:16:e6:09:0f:9b:57:12:b2:e0:
59:46:4c:da:35:c7:79:53:e3:d8:46:66:c5:ff:b3:
6b:de:84:78:70:15:d7:c4:cb:cc:f4:23:4c:d8:b9:
a9:84:d6:66:19:2b:f5:b9:2a:54:c9:cb:e9:66:c7:
5f:c3:50:cb:a0:d9:6d:48:cd:c4:29:31:c9:9d:ee:
1e:3d:a0:2a:ee:1e:0c:65:16:f5:5b:75:2f:c3:b2:
36:4b:52:d2:9c:6e:5e:9c:34:90:be:ef:f5:38:f6:
6c:2f:4a:8e:80:75:eb:8f:8b:1a:73:1b:aa:b5:d6:
18:70:ff:b0:d9:26:b1:3e:4e:f1:3f:9f:7d:a6:31:
37:52:dc:25:c7:5e:dc:18:88:6b:01:04:67:28:f7:
ff:0e:6b:fd:91:92:ca:c4:ef:33:a8:d7:65:1a:54:
c0:ea:99:ef:ad:07:81:77:10:1f:7f:43:27:08:4f:
9f:ab:05:16:2d:c1:38:bd:6a:87:0d:61:3d:c4:b8:
79:a6:26:dd:31:01:e0:b4:6d:62:12:2c:02:a9:c2:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A8:E0:BE:E9:B0:F2:80:CB:E7:88:4D:D0:C5:C2:60:A3:36:FD:9D
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/x6jgvumw8oDL54hN0MXCYKM2_Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0/24
194.150.75.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c8:9d:87:d3:ea:71:a6:b6:7d:17:68:4a:eb:5d:7b:6d:3f:
fa:6a:b5:f6:52:f9:2e:d8:b6:07:5b:1e:af:b6:77:8e:b9:bb:
6b:96:1c:ca:cc:1a:57:43:2c:1e:7b:f3:b2:62:7b:58:e9:4a:
49:e4:25:22:50:40:9c:78:ef:f3:68:dc:fd:c9:7c:03:16:43:
8d:24:d7:53:70:4e:ef:d7:40:55:20:a2:be:2a:10:9a:f0:9f:
f5:1f:14:0d:c8:47:60:50:06:db:c0:2a:d9:8e:dc:7e:b3:4c:
a4:21:39:78:50:bf:24:37:8c:87:c5:c2:ab:0f:dd:4f:89:c8:
59:30:e1:c9:c7:2f:e3:bd:4e:ab:56:5f:92:98:d9:d7:9b:f3:
c4:c0:6b:5c:b5:b9:f0:c6:e1:f4:a9:e9:a3:b1:81:2b:f4:74:
88:10:a1:65:e2:04:d0:e5:8c:48:70:c0:50:c4:78:74:6c:fa:
5d:57:5c:8e:39:6f:26:d7:31:a7:a0:95:7c:95:6e:75:95:f7:
9b:a7:31:84:1c:d4:68:47:f0:dc:72:b8:45:cf:6e:6f:e5:be:
a3:ec:f9:45:a9:2c:2f:ab:39:de:a0:74:43:1f:c5:9c:e8:e0:
95:7f:c6:f5:c0:b6:55:22:d7:43:5e:6c:74:a1:69:e1:2c:11:
b7:2f:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:06 2026 by rpki-client