Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/xretZ-0tku4dEDuuPBjp5hipxR4.roa
File: xretZ-0tku4dEDuuPBjp5hipxR4.roa (raw, json)
Hash identifier: h8xf705U/94jYJickJO/2iQyU/3UKOcIpRfpNQ5uKf0=
Subject key identifier: C6:B7:AD:67:ED:2D:92:EE:1D:10:3B:AE:3C:18:E9:E6:18:A9:C5:1E
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A08214408FE08F2EB66111A243350011F6
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/xretZ-0tku4dEDuuPBjp5hipxR4.roa
Signing time: Tue 08 Sep 2026 17:32:40 +0000
ROA not before: Tue 08 Sep 2026 17:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 87.192.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:14:40:8f:e0:8f:2e:b6:61:11:a2:43:35:00:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 8 17:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6b7ad67ed2d92ee1d103bae3c18e9e618a9c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:c4:21:21:6b:f9:e8:65:2e:ef:31:6d:2e:
70:56:21:c7:0f:98:ad:e3:6c:94:95:52:6e:7e:d3:
fb:66:f9:c1:77:24:b7:8a:cf:ba:b0:b3:14:32:05:
cc:d8:78:b8:e0:e4:5e:fe:38:95:b0:09:b3:90:cc:
bd:ac:d1:a8:97:ad:61:ae:e0:50:43:4e:a6:8b:fd:
e6:00:b9:25:d1:69:06:3f:76:bb:eb:ac:0d:32:8a:
72:41:d9:25:c8:30:77:5a:df:37:ed:02:e5:3e:ed:
b0:ad:ab:af:fc:03:94:44:f7:82:52:35:f4:43:23:
4c:6a:5c:5b:b9:f0:a6:d6:7a:1a:c1:eb:b9:ec:8e:
72:02:a0:22:3c:ca:77:60:d7:71:ae:ca:71:5a:53:
7d:dc:ac:0f:ed:4b:29:26:b0:b5:ce:11:2a:35:a5:
9a:68:91:f1:7f:d8:e1:12:17:3b:2d:c9:73:c4:c4:
5f:da:db:ed:74:6d:5e:db:90:16:37:69:68:8c:e4:
6b:f1:5e:d9:b8:dc:40:9d:9f:54:b6:1d:6e:6e:05:
eb:a4:85:28:1c:9b:9d:76:31:d2:6c:26:77:4b:47:
78:9d:f5:fe:12:d3:f8:97:10:47:4c:d5:94:36:4c:
4a:5a:b1:01:91:c9:c4:5e:16:6e:aa:64:24:8d:69:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:AD:67:ED:2D:92:EE:1D:10:3B:AE:3C:18:E9:E6:18:A9:C5:1E
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/xretZ-0tku4dEDuuPBjp5hipxR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.50.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:f6:cd:49:da:e9:41:ea:73:9b:92:4e:cb:39:ec:f2:56:96:
33:dd:39:1c:a1:18:a9:25:8f:0e:2f:47:2a:7b:19:b2:05:7a:
04:10:18:24:2e:82:f4:b4:cd:66:97:d7:62:02:75:27:2e:39:
f5:75:af:da:39:db:6d:d1:06:86:aa:c8:86:02:cd:55:71:85:
17:d6:e0:8d:d9:c2:de:47:9e:84:9a:3c:a0:f1:ff:3d:e0:36:
2d:df:a7:aa:29:6b:09:21:56:c3:ba:83:80:05:6a:0a:13:2d:
e4:bf:99:15:35:d5:72:e6:b8:cb:ee:37:e3:27:c1:aa:ae:85:
16:60:10:ae:e3:40:bf:26:68:4d:07:70:4c:48:a9:3c:d8:d3:
88:dd:92:7a:bc:8c:72:bf:b4:c4:18:0d:49:75:2e:d4:16:8e:
fd:85:67:6d:79:7f:fc:7a:ae:67:e3:a1:c1:4b:ac:27:22:81:
9f:ad:5a:1b:64:4b:dc:83:b6:9a:15:c0:a5:65:ea:93:58:df:
80:12:bd:1c:39:82:9d:d5:77:d5:e8:e7:9b:03:04:47:bd:2f:
5b:83:ff:25:70:08:83:95:80:0a:55:c7:f8:b2:c7:39:0e:3d:
fc:51:d7:36:a8:f2:ae:3f:aa:15:fe:55:5d:c9:25:7c:c8:a7:
dc:c5:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:44 2026 by rpki-client