Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xZ3PaHAhck1-zTot5bAdQE2lQ4U.roa
File: xZ3PaHAhck1-zTot5bAdQE2lQ4U.roa (raw, json)
Hash identifier: 2w7fQJZVpjXVFk5vDKxt+rLKvj1zr2g0txIq5RsJnX0=
Subject key identifier: C5:9D:CF:68:70:21:72:4D:7E:CD:3A:2D:E5:B0:1D:40:4D:A5:43:85
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019C709E5EB4CDF5C46D65CE3639D35AF90A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xZ3PaHAhck1-zTot5bAdQE2lQ4U.roa
Signing time: Wed 18 Feb 2026 11:59:12 +0000
ROA not before: Wed 18 Feb 2026 11:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:9e:5e:b4:cd:f5:c4:6d:65:ce:36:39:d3:5a:f9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 18 11:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c59dcf687021724d7ecd3a2de5b01d404da54385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:82:26:32:0d:79:d6:72:05:7d:92:13:b0:
bc:ea:f3:d2:1a:ef:c6:b9:79:18:f7:80:18:1e:01:
f2:b5:25:74:74:0e:60:ef:3b:b8:d1:b5:20:6f:6e:
60:f6:46:cc:15:e7:82:05:e6:6d:33:07:eb:58:99:
91:7d:82:a8:8a:c8:e9:bf:34:99:40:c5:93:57:88:
3f:95:dc:71:ac:93:09:e5:f9:4d:94:cd:25:38:41:
4c:67:75:e4:ff:ab:c7:05:fb:80:5b:83:59:9b:85:
64:e8:d2:d2:51:2b:fb:78:25:a2:87:c7:26:8b:a6:
5c:e9:4e:82:d3:37:11:e3:6c:10:77:ce:5e:ab:98:
a0:e7:5a:a6:9d:50:e0:a7:f8:ae:4e:68:60:df:17:
57:d5:29:df:ce:e7:ed:f2:32:06:2c:8e:5f:32:a1:
d9:3f:22:37:3d:d8:3b:53:a7:f4:3d:32:0a:2b:df:
44:63:cc:e0:0e:c6:14:07:ef:ab:f0:1f:48:77:c5:
06:0c:a9:c8:95:44:e5:66:f6:8d:b2:68:98:19:0d:
a7:80:18:20:80:0f:6e:98:bc:0e:44:57:81:01:ac:
29:45:00:d8:fb:c7:05:36:8b:dd:e1:77:1e:ec:0d:
8b:b5:25:9e:e2:02:37:74:88:d6:b2:8e:61:0e:72:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:CF:68:70:21:72:4D:7E:CD:3A:2D:E5:B0:1D:40:4D:A5:43:85
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xZ3PaHAhck1-zTot5bAdQE2lQ4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c9:c1:6c:be:b2:d5:5d:28:65:f3:f3:e6:ac:23:03:d2:f5:
56:86:65:37:c8:47:78:f6:c0:f1:1b:d5:1f:59:59:c2:56:39:
9e:d0:77:78:8a:33:f2:b2:66:6f:5c:69:fb:25:83:ba:c1:42:
4b:15:78:80:d5:29:96:95:94:de:32:b0:15:c0:7a:82:4c:74:
f7:2f:b9:4f:42:a4:52:40:3e:49:5a:73:08:18:8e:ae:88:40:
95:7e:02:82:fe:f8:b3:4b:bd:03:ff:79:b1:82:b7:6c:0b:3e:
f9:79:6f:e7:b5:11:b4:a4:ec:74:70:ee:80:ba:d0:19:27:52:
31:3a:4f:db:cf:f0:15:e8:ef:d3:53:82:98:ec:1e:17:ad:7e:
cb:2e:82:f4:1f:25:97:3b:c6:c6:7d:c6:4c:6e:7e:e6:1c:41:
09:81:d8:c0:34:55:e0:88:bf:a3:09:95:37:b2:7a:6a:22:9e:
b9:de:f5:7d:2e:dc:3c:2d:bc:bd:17:e7:2a:63:45:e1:7d:1a:
ac:e8:d4:90:18:eb:65:fa:24:90:85:f2:b2:0c:e1:4f:e4:9d:
67:c8:f9:1b:ba:95:4a:c2:07:f7:06:39:65:65:e0:a5:c4:8d:
a9:e1:88:4b:a7:18:76:6f:e1:67:1a:ce:55:9c:46:a3:69:a6:
e2:2d:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:37 2026 by rpki-client