Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa
File: V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa (raw, json)
Hash identifier: CmcBK0JbdCkq9SyfG/xpgWBN+pvjaz0MINnXMk2x50o=
Subject key identifier: 57:AC:9B:15:F7:38:AF:3A:6E:DC:DA:C7:F6:46:AA:19:B1:5E:2A:A9
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019B7BA50F2F5B4471E466B228B806FBF502
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa
Signing time: Thu 01 Jan 2026 22:19:33 +0000
ROA not before: Thu 01 Jan 2026 22:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59684
IP address blocks: 176.126.164.0/22 maxlen: 22
176.126.164.0/24 maxlen: 24
176.126.165.0/24 maxlen: 24
176.126.166.0/24 maxlen: 24
176.126.167.0/24 maxlen: 24
2001:67c:87c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:0f:2f:5b:44:71:e4:66:b2:28:b8:06:fb:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Jan 1 22:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57ac9b15f738af3a6edcdac7f646aa19b15e2aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:53:9b:6f:0a:19:8b:8e:5b:0a:d0:bc:6f:
60:60:5c:bf:2a:22:dc:06:20:7b:37:cd:a7:c1:c2:
a3:e5:14:2d:26:17:d0:5b:9c:49:98:81:db:a2:0a:
57:95:71:26:25:86:94:d2:1b:e7:25:87:fa:db:4c:
cd:f6:1d:3d:b0:5c:6e:1a:8e:f8:79:e5:24:e8:3d:
49:02:70:63:56:78:41:23:81:4e:ba:77:57:cf:da:
2a:f2:e4:4d:71:7d:f8:ac:3c:7b:3b:41:2e:c8:f1:
39:f4:53:39:f2:58:a4:da:c9:3b:cb:e2:0e:ab:96:
4f:15:2e:04:e4:c1:fe:4d:c2:ee:0c:7f:2a:70:fc:
fc:72:f0:e0:ae:b1:0c:f6:61:1f:2e:ac:6c:e0:7c:
99:dc:1c:e2:80:e0:09:83:4a:5a:de:7e:16:fe:1d:
5b:58:1f:27:21:de:39:d8:09:f9:ba:5a:0f:6e:11:
e4:a8:3f:ef:4c:e6:95:41:56:fe:8f:40:cb:b6:81:
de:c6:f7:24:60:d1:7d:b0:7a:64:59:d1:87:78:a9:
49:86:b7:ad:d5:a8:a8:ee:2a:79:97:07:5a:de:f5:
17:67:4f:1d:eb:85:d7:6c:f0:e8:5a:41:8b:1f:79:
eb:50:37:68:93:38:ad:46:42:e8:49:81:44:28:ba:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:9B:15:F7:38:AF:3A:6E:DC:DA:C7:F6:46:AA:19:B1:5E:2A:A9
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.164.0/22
IPv6:
2001:67c:87c::/48
Signature Algorithm: sha256WithRSAEncryption
4b:68:6a:22:cb:fe:fe:e4:cb:92:84:40:af:bb:64:bf:9a:5e:
90:47:66:23:00:a0:1b:33:6a:26:3e:cc:8e:ec:25:2e:5f:27:
22:50:4c:22:e1:e8:b9:36:cc:ac:36:dc:ec:fd:3a:2b:8e:2d:
ae:d2:60:df:d4:5e:65:7a:07:9c:8d:f6:3a:bd:c3:80:63:5d:
f7:56:bb:1b:0a:b4:02:0f:10:34:f1:5d:b9:f8:c0:bc:3b:00:
98:03:06:bd:5c:ee:4f:43:16:5b:b0:53:22:76:22:e5:95:bd:
61:a0:eb:a6:b2:81:34:c2:cf:31:a1:d7:58:70:5f:14:99:10:
0e:0d:25:4e:19:9b:75:55:85:9d:55:40:be:9e:ea:f5:5d:3d:
bd:0e:60:f9:fc:43:c9:0b:66:6a:f3:85:cb:81:d8:dc:4d:55:
eb:06:d1:9a:9c:7a:6b:bd:d3:d6:e9:8b:a0:0c:ff:68:05:ca:
f6:ce:02:b4:49:d1:17:d6:bf:ff:64:6b:8c:75:92:b2:8f:95:
e5:39:cc:70:1f:c7:26:ac:48:64:52:cf:cf:09:a6:d8:11:52:
73:55:2b:f7:1b:c9:f8:c7:40:57:4e:59:b7:08:f3:c5:14:9a:
f1:11:e3:9f:05:23:08:4a:62:7e:8f:ba:44:c6:aa:1e:1a:a4:
ae:86:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:32 2026 by rpki-client