Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/xJQkEE-myuee2xusX84h4jOXGkk.roa
File: xJQkEE-myuee2xusX84h4jOXGkk.roa (raw, json)
Hash identifier: bgfimRITzgygmGvHr8W4DzraqoP9/oX3mukFAiSIHn4=
Subject key identifier: C4:94:24:10:4F:A6:CA:E7:9E:DB:1B:AC:5F:CE:21:E2:33:97:1A:49
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019B775902B8E16E6721516771EDC63F7220
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/xJQkEE-myuee2xusX84h4jOXGkk.roa
Signing time: Thu 01 Jan 2026 02:18:00 +0000
ROA not before: Thu 01 Jan 2026 02:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49553
IP address blocks: 130.193.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:02:b8:e1:6e:67:21:51:67:71:ed:c6:3f:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jan 1 02:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c49424104fa6cae79edb1bac5fce21e233971a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:7f:43:2e:6e:4f:f4:88:0c:a4:06:e9:74:
0b:07:b9:21:55:00:f4:c6:50:6e:30:40:92:22:6e:
7c:bf:29:9c:f4:6c:6a:8e:16:49:7f:ac:e4:84:4b:
25:fc:fe:88:01:b9:e6:4b:63:3f:27:ec:17:b0:cd:
51:e9:ca:b6:f0:d9:6f:a8:95:d9:af:b0:5f:0b:b5:
d8:09:46:89:27:c6:4f:9d:ed:27:30:16:a7:26:d1:
0d:a2:ef:4c:c5:7e:ab:e4:03:c3:50:d7:00:ef:54:
20:ef:e1:b5:00:ee:0b:20:3c:36:94:fd:1a:ac:93:
d8:58:20:c9:28:b5:cc:f8:d8:b3:f6:93:91:64:10:
80:40:d5:98:57:8f:a3:8b:da:df:89:40:ce:23:6b:
f8:c7:74:54:11:e6:24:38:e0:62:26:bb:09:55:e7:
d1:05:fe:c4:59:41:19:fb:c9:12:a7:83:3c:aa:86:
a2:7c:47:8c:e9:5f:92:0e:a1:37:dd:59:2b:da:df:
45:25:6d:ee:1f:c5:c4:90:7c:5c:d5:01:52:90:e2:
1e:4e:3c:ab:7d:23:99:48:2b:82:4d:0c:b0:a5:53:
5c:27:ee:e2:1e:04:5a:06:fd:70:e9:8d:d5:a0:7e:
ae:57:0a:5b:99:ab:09:c3:da:b8:7f:e8:0e:a2:e9:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:24:10:4F:A6:CA:E7:9E:DB:1B:AC:5F:CE:21:E2:33:97:1A:49
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/xJQkEE-myuee2xusX84h4jOXGkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.72.0/24
Signature Algorithm: sha256WithRSAEncryption
70:98:00:2f:56:4c:e7:ad:0c:95:1b:19:92:eb:cf:61:9c:a3:
a3:00:20:53:10:2f:f6:84:1f:c3:ef:3a:30:68:92:b7:30:70:
fc:99:e1:7f:1a:a1:d9:e7:45:cd:b4:d2:0d:e2:07:96:0f:3e:
10:79:b0:cf:78:96:d7:8b:4e:52:dd:ac:9a:bf:6a:ba:16:c4:
c8:bd:f7:46:f4:77:81:43:66:d6:ba:2b:30:68:ba:bb:ad:cc:
06:d1:e3:74:d8:be:fe:3a:10:17:e4:47:84:c7:a0:0d:c3:d8:
70:51:20:bd:76:43:59:2e:0e:2c:d9:3f:0c:05:17:ce:12:5e:
9e:ec:56:93:52:23:f9:da:6e:e1:14:3a:cb:31:fa:f6:81:a5:
68:b0:04:05:fb:bd:c7:d0:e3:b4:ca:4a:c6:2c:11:78:40:bf:
1d:13:21:a4:86:5a:21:3d:07:97:43:8a:8a:13:a7:96:01:3a:
7c:53:90:0a:4f:e2:31:c1:6e:df:fe:b9:e3:55:68:ce:b0:af:
69:0a:af:30:ab:0f:c1:b2:58:19:7c:44:3b:f5:2f:e0:66:5d:
00:73:82:a5:b2:c3:9a:54:d0:85:7e:b9:2e:eb:f3:7f:9f:b4:
2b:9e:58:d8:ac:1c:ec:3c:1b:67:98:92:e5:f1:20:f6:8e:aa:
c2:05:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:32 2026 by rpki-client