Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa
File: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (raw, json)
Hash identifier: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=
Subject key identifier: C5:21:94:EA:BD:01:FC:8D:E5:BC:CF:71:51:AD:4E:49:BC:C7:61:5C
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019C0A3FAA174FE277EF7298755CC1448B22
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa
Signing time: Thu 29 Jan 2026 14:54:30 +0000
ROA not before: Thu 29 Jan 2026 14:54:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8455
IP address blocks: 81.85.60.0/24 maxlen: 24
2a0b:3100:200::/48 maxlen: 48
2a0b:3100:200::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:3f:aa:17:4f:e2:77:ef:72:98:75:5c:c1:44:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Jan 29 14:54:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c52194eabd01fc8de5bccf7151ad4e49bcc7615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:bc:dd:bc:2e:9b:f6:76:ef:e2:48:c8:13:
ba:77:e2:ed:79:db:f5:b0:1c:2b:51:da:c7:b8:fe:
f8:8d:b8:c2:0e:d0:a5:3b:d7:4d:50:72:1d:fc:8a:
4b:cf:fe:ea:b9:40:66:05:aa:2e:49:49:28:56:b7:
2e:8c:cb:50:6a:7c:8a:8e:99:95:c3:0c:9a:38:bf:
f2:7c:d8:36:dd:17:f4:77:e3:35:66:26:bc:9d:81:
db:e4:86:84:a7:13:32:98:d3:d4:c1:74:68:a3:7e:
a1:6d:2b:fd:38:c4:9a:01:9e:7a:c7:e9:e6:6b:14:
52:4d:95:08:db:0d:ee:9c:38:1d:c8:34:78:65:5b:
ab:5b:ff:7c:81:f0:83:a2:38:2b:3d:5a:5a:ba:db:
4d:ac:a2:54:dd:40:ec:85:17:7c:7f:6d:8d:41:df:
e0:69:b9:a3:bc:21:b2:e0:a9:e8:93:ae:47:c0:8e:
39:74:e5:5b:cd:e9:45:fb:30:c0:44:86:75:28:25:
c9:37:ec:1a:fb:de:19:ac:78:c7:75:72:9f:94:31:
4d:6b:03:16:bb:bd:14:bf:31:f2:56:e3:97:cf:34:
73:38:e6:3f:12:48:37:c9:b8:3a:9c:76:36:45:a8:
69:b8:ca:df:fd:4f:b5:7c:97:66:44:70:94:bf:79:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:21:94:EA:BD:01:FC:8D:E5:BC:CF:71:51:AD:4E:49:BC:C7:61:5C
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.60.0/24
IPv6:
2a0b:3100:200::/48
Signature Algorithm: sha256WithRSAEncryption
6f:5c:b2:93:a8:ae:8c:ed:75:71:a6:04:23:c0:1d:ec:99:85:
a1:1b:1d:e4:66:5f:3a:a0:62:d8:a8:af:82:80:6d:b7:84:33:
64:68:cf:88:0d:d5:8a:6f:d9:ec:a2:38:cf:84:1b:0b:0b:17:
c8:75:ce:bf:3e:b8:06:ca:77:1b:6f:de:72:16:75:ea:88:e5:
ce:1c:4b:f8:49:e6:43:cf:aa:d8:33:ad:6b:17:45:f0:b4:bb:
33:73:94:ac:a5:29:7b:0f:a4:fe:49:53:9c:44:d6:fc:11:0f:
62:94:7e:f9:3e:83:bc:11:72:8c:4e:ef:c4:c9:f0:9b:5d:f3:
77:45:da:ef:27:46:e3:bc:a8:0b:7d:c0:8a:28:28:e6:bc:a6:
b2:66:7f:42:2a:44:b7:b1:4f:e3:db:ff:e9:18:49:14:10:e0:
d8:23:13:83:f4:2c:47:13:45:68:dc:08:2c:e7:1e:3c:7f:54:
4b:c3:5c:61:cb:9b:e1:3d:0c:9f:13:21:1c:88:b8:21:dd:4e:
78:c7:cb:83:1b:9e:4b:92:b3:04:04:03:2e:0e:fc:2d:e1:77:
2c:19:41:3f:02:50:58:2a:a7:dc:bb:6a:21:59:14:a8:9b:9a:
b4:a6:9f:c8:fd:e8:82:d3:b9:cd:3c:97:2e:49:5f:37:50:e3:
07:a3:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:44 2026 by rpki-client