Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xEkkPj63pjHfqxqNZBtkVUsjobU.roa
File: xEkkPj63pjHfqxqNZBtkVUsjobU.roa (raw, json)
Hash identifier: AbeR1BfRF4w8UyzzWMLqrTFYnqsUoot++Lqw8fZIZ48=
Subject key identifier: C4:49:24:3E:3E:B7:A6:31:DF:AB:1A:8D:64:1B:64:55:4B:23:A1:B5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019EBAF4E38E3827AA97B7C17915CFE7EB18
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xEkkPj63pjHfqxqNZBtkVUsjobU.roa
Signing time: Fri 12 Jun 2026 08:31:11 +0000
ROA not before: Fri 12 Jun 2026 08:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:f4:e3:8e:38:27:aa:97:b7:c1:79:15:cf:e7:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 12 08:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c449243e3eb7a631dfab1a8d641b64554b23a1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:67:57:f9:9c:52:87:12:65:fe:97:df:b5:
6e:76:ce:38:e5:0a:93:dc:a7:66:c9:91:85:e5:de:
ef:d0:35:4f:85:c7:7c:90:da:c4:45:0e:6b:71:af:
2a:5e:55:72:3a:98:54:fe:84:c4:1a:41:13:de:6e:
72:e0:4d:ee:07:0a:08:18:ea:a8:2b:9a:eb:a0:b1:
a5:b9:cc:5a:42:c9:10:8e:df:fb:88:72:2f:6a:d8:
ed:0c:40:f4:2f:18:05:9e:26:d8:54:13:f7:9a:65:
5e:c2:1f:b3:a7:14:cc:2c:c1:52:43:63:cd:c0:72:
9b:b5:e4:52:5f:de:5f:21:32:13:b2:d8:bc:24:39:
7f:52:f6:76:d1:41:2d:b6:c2:94:c6:a0:3c:ce:f5:
f0:01:e7:71:4d:b9:4f:21:3a:db:a3:75:19:05:7a:
a8:c7:dd:db:e4:89:50:0c:13:15:63:89:77:77:d8:
ac:ae:31:f0:25:31:a9:a4:8e:74:c9:f8:49:cd:ba:
b2:35:e3:40:dd:0c:29:6f:cc:11:e7:cf:e6:d3:38:
d1:4e:8d:ea:78:4e:c9:2e:99:e5:ea:4a:bf:58:d4:
28:51:75:40:3e:7e:c1:b6:58:a8:01:c8:86:3e:54:
9f:23:d8:06:b6:b6:e8:4c:42:61:e6:73:11:26:fe:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:24:3E:3E:B7:A6:31:DF:AB:1A:8D:64:1B:64:55:4B:23:A1:B5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xEkkPj63pjHfqxqNZBtkVUsjobU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
15:19:5f:01:9d:f7:e2:58:39:7e:ca:df:4c:06:f9:34:57:ef:
a0:6c:16:70:88:0a:7d:72:c6:7c:95:05:cd:90:21:dd:08:d7:
c1:29:c3:0e:6d:b5:b3:7f:8d:04:62:0e:92:7b:ca:c0:96:48:
0e:40:57:26:6a:95:45:f6:fe:d1:5e:73:2f:0f:e8:38:61:04:
a8:35:6b:50:2d:99:48:68:40:f4:5c:78:67:a1:e0:bf:ac:3d:
99:10:e8:8e:26:0b:19:ee:6b:b4:0e:91:d1:ae:05:1a:c8:e6:
66:ff:11:5b:7d:4d:27:d1:28:53:bd:f4:4f:50:62:15:6b:95:
8c:2b:dd:6f:41:10:b1:47:9a:bc:af:81:97:49:d4:16:43:a0:
34:c5:93:87:32:59:52:b1:b8:07:34:83:4f:16:89:23:1d:17:
20:18:15:64:af:95:04:8d:05:a3:b1:32:a6:f2:ec:93:b7:69:
56:08:ed:4e:34:2d:81:89:cf:ff:42:c9:f8:55:7f:f9:fc:17:
4f:02:45:b2:53:9e:92:ee:42:09:91:75:d5:7a:da:51:1f:00:
fa:44:dd:3d:00:61:8c:5f:87:76:02:ca:16:68:37:8e:0d:3f:
66:d7:60:d3:e0:36:6c:ec:c5:a4:14:1b:e0:87:94:4b:c6:c1:
a1:d0:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:26:59 2026 by rpki-client