Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xfiDuNAmhslZN45mcRTlxSsOr-Q.roa
File: xfiDuNAmhslZN45mcRTlxSsOr-Q.roa (raw, json)
Hash identifier: dL8giF+q/P54AQb6hd8OhW/BnNYctw74IOKd7l0qV9Y=
Subject key identifier: C5:F8:83:B8:D0:26:86:C9:59:37:8E:66:71:14:E5:C5:2B:0E:AF:E4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FA910BE3B73379B1FF8F1A8423A27D909
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xfiDuNAmhslZN45mcRTlxSsOr-Q.roa
Signing time: Tue 28 Jul 2026 14:11:14 +0000
ROA not before: Tue 28 Jul 2026 14:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.98.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:10:be:3b:73:37:9b:1f:f8:f1:a8:42:3a:27:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 28 14:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5f883b8d02686c959378e667114e5c52b0eafe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:27:30:20:15:90:91:6b:1f:19:21:45:47:
7c:6d:fd:58:25:ec:74:c9:22:01:78:1d:09:48:ea:
5e:8c:af:d0:51:76:f2:56:b0:b7:85:08:df:d7:71:
52:ef:f0:3e:8f:62:2c:f0:3b:87:b9:a1:c3:85:68:
fd:09:f4:86:b6:b6:cf:29:62:eb:11:66:ae:f9:e1:
a2:aa:af:53:9a:6b:77:df:5e:71:d8:75:31:55:fa:
ce:a7:ee:43:41:be:8a:50:37:3b:0a:51:a9:2c:c7:
54:52:04:6b:d2:fd:86:b6:c7:41:37:3d:a8:b6:6d:
99:4d:4b:22:e8:9c:22:d5:3a:a1:23:33:df:41:1b:
06:da:c0:cf:d7:cf:2b:dd:5a:e5:05:2f:11:3c:cf:
79:be:8f:b5:1d:96:dc:39:f5:fe:85:23:5e:df:05:
88:5d:5d:46:08:15:82:d7:be:17:79:50:a4:8a:53:
6e:3e:c9:61:7e:bd:08:15:aa:88:bc:7f:26:8b:c1:
a0:21:6a:0f:c5:7b:9f:e3:b8:21:08:29:b7:13:9a:
ff:d1:fd:16:c1:11:28:c8:28:19:ca:49:35:09:14:
e7:f5:d3:cc:eb:ae:7b:d8:6b:37:cc:b3:7b:87:57:
15:24:38:a4:b7:44:93:cc:be:2f:a0:22:13:19:fe:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:83:B8:D0:26:86:C9:59:37:8E:66:71:14:E5:C5:2B:0E:AF:E4
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xfiDuNAmhslZN45mcRTlxSsOr-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.197.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0c:44:48:ed:28:be:8c:ba:08:2e:4a:e6:7a:ce:9b:a9:45:
59:d9:37:c3:32:da:4d:a2:38:a8:8a:8c:5a:97:3a:8d:b5:34:
7b:de:a3:c1:09:76:f4:db:02:07:79:c6:09:96:05:5f:5c:cb:
fb:05:b5:04:e6:c6:67:f2:ff:72:07:25:9f:78:45:b3:99:d5:
1a:d8:bd:98:81:a8:43:a7:5d:71:2b:9f:24:a4:ec:b1:10:1d:
bf:39:c2:58:15:2b:06:72:37:f8:f8:b4:10:4d:a6:73:8e:d8:
2e:29:6e:40:16:21:35:eb:ae:78:4a:fc:20:e1:1e:45:a0:f1:
e8:e5:72:29:c0:23:5a:21:bf:74:bb:69:81:de:48:8b:e6:fb:
8b:26:67:b6:09:15:13:47:bc:80:21:6b:a3:e3:4d:5a:ee:71:
5b:b8:e9:2f:a3:9b:b4:5f:3f:b1:8d:e1:80:d9:8f:65:73:92:
1e:31:01:c2:fa:9f:62:b5:5f:49:54:78:4f:1b:1c:c9:36:37:
44:d1:fb:6d:f2:dc:52:af:be:50:21:84:84:6f:3b:4f:ac:47:
5c:c8:26:20:91:1e:00:28:ae:ae:27:14:2d:1e:2b:2f:79:7e:
d0:1a:3e:c7:24:06:08:69:b3:6f:d8:1b:40:e3:33:c9:44:35:
2f:cc:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:16 2026 by rpki-client