Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/xcCn7bpLcGcdxCMsOA8QybzdKwI.roa
File: xcCn7bpLcGcdxCMsOA8QybzdKwI.roa (raw, json)
Hash identifier: TfAAGdS5mybmlpPgNCVRXMdD51STpNvxZH6lBCg8X70=
Subject key identifier: C5:C0:A7:ED:BA:4B:70:67:1D:C4:23:2C:38:0F:10:C9:BC:DD:2B:02
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019C6624C970F3894E0428C64E34402F47E5
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/xcCn7bpLcGcdxCMsOA8QybzdKwI.roa
Signing time: Mon 16 Feb 2026 11:10:12 +0000
ROA not before: Mon 16 Feb 2026 11:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210753
IP address blocks: 213.130.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:24:c9:70:f3:89:4e:04:28:c6:4e:34:40:2f:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Feb 16 11:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5c0a7edba4b70671dc4232c380f10c9bcdd2b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:a4:35:0e:6a:2a:e8:40:c4:5c:fa:77:9b:
5e:0c:f9:88:b0:a7:ab:02:a7:e2:30:ee:2a:64:11:
89:10:dd:f4:8e:72:98:eb:ee:ac:fa:67:7c:fe:6f:
37:1b:e6:90:9f:33:c4:f1:bd:0a:2f:22:d2:0c:4f:
a9:f3:3b:8c:54:b7:19:0a:e5:24:aa:bf:0f:81:d4:
01:f7:51:86:cf:5e:05:7c:8c:ef:5f:20:6b:f2:99:
32:07:cb:ac:1e:6c:bb:02:a4:dd:e5:eb:11:7b:d8:
01:86:7d:2d:98:89:ef:8c:e8:d0:b7:4e:aa:6a:bf:
f4:ab:d2:b1:a9:b8:0a:19:77:d9:b5:10:22:34:27:
d3:7e:85:fc:e3:4e:19:35:7b:49:1c:1d:cd:94:f7:
12:8a:b1:3d:67:80:9d:6f:2e:2d:96:9f:e8:75:fd:
7d:b5:37:66:44:d4:c0:dd:6f:38:11:8a:90:48:09:
57:95:20:81:9e:d2:84:69:37:e5:23:c4:72:28:a9:
9b:fc:f1:0f:11:2f:f9:86:7f:4f:ef:87:2b:fa:de:
e0:e5:fc:cf:41:2c:08:58:a8:1f:49:a6:eb:69:50:
82:3c:e2:a8:1e:2c:de:ca:a0:0e:bc:20:b9:d3:53:
08:5d:3c:84:ac:fd:bd:54:38:3f:b3:51:63:26:df:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C0:A7:ED:BA:4B:70:67:1D:C4:23:2C:38:0F:10:C9:BC:DD:2B:02
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/xcCn7bpLcGcdxCMsOA8QybzdKwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:47:9d:45:6e:00:57:6b:05:3b:08:2d:e3:f4:a6:97:14:78:
cc:72:ad:57:de:9c:c0:d2:69:76:da:72:e8:a7:c8:9c:ab:fd:
50:f4:d7:6f:b4:ea:2a:5a:f6:81:bb:88:a6:0b:a0:41:18:b7:
61:2a:4a:6d:7c:ba:38:2c:f1:76:ff:83:80:d4:3e:43:aa:8c:
0b:a6:e4:97:0a:d3:9b:46:8b:b6:b7:63:62:36:0a:4a:ee:cb:
5b:7f:b1:37:67:35:80:84:2d:b7:18:5c:8d:1a:d3:a9:31:0d:
ac:46:9c:e7:26:39:db:73:e5:23:f9:c5:3e:37:ea:c0:77:e5:
a7:42:14:54:af:0b:8b:ed:44:a0:a3:eb:80:92:d6:0a:85:05:
bf:6d:65:45:c3:15:6b:bd:8f:c0:ae:63:61:d1:a5:f2:19:a2:
ac:1a:04:31:43:c9:b7:46:be:cb:58:8a:17:32:a6:b4:4a:38:
0b:6c:cb:16:17:44:bc:d5:66:93:a2:89:49:da:36:16:3d:db:
92:87:ea:07:0d:d2:8d:37:42:84:cd:d1:59:51:f3:2d:8e:3c:
6a:e2:46:3a:1d:c5:55:c7:37:03:b2:08:e7:58:f8:98:9f:7f:
08:95:ac:a1:30:9f:03:fb:87:5b:33:62:89:3b:d5:3c:a4:3c:
10:9c:ac:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxmJMlw84lOBCjGTjRAL0flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx
NWJlMGIwHhcNMjYwMjE2MTExMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWMwYTdlZGJhNGI3MDY3MWRjNDIzMmMzODBmMTBjOWJjZGQyYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jikNQ5qKuhAxFz6d5teDPmIsKer
AqfiMO4qZBGJEN30jnKY6+6s+md8/m83G+aQnzPE8b0KLyLSDE+p8zuMVLcZCuUk
qr8PgdQB91GGz14FfIzvXyBr8pkyB8usHmy7AqTd5esRe9gBhn0tmInvjOjQt06q
ar/0q9KxqbgKGXfZtRAiNCfTfoX8404ZNXtJHB3NlPcSirE9Z4Cdby4tlp/odf19
tTdmRNTA3W84EYqQSAlXlSCBntKEaTflI8RyKKmb/PEPES/5hn9P74cr+t7g5fzP
QSwIWKgfSabraVCCPOKoHizeyqAOvCC501MIXTyErP29VDg/s1FjJt9ycQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXAp+26S3BnHcQjLDgPEMm83SsCMB8GA1UdIwQY
MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt
NmUwZDIxM2Y0ODRhLzEveGNDbjdicExjR2NkeENNc09BOFF5YnpkS3dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh
LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YJKMA0G
CSqGSIb3DQEBCwUAA4IBAQAdR51FbgBXawU7CC3j9KaXFHjMcq1X3pzA0ml22nLo
p8icq/1Q9NdvtOoqWvaBu4imC6BBGLdhKkptfLo4LPF2/4OA1D5DqowLpuSXCtOb
Rou2t2NiNgpK7stbf7E3ZzWAhC23GFyNGtOpMQ2sRpznJjnbc+Uj+cU+N+rAd+Wn
QhRUrwuL7USgo+uAktYKhQW/bWVFwxVrvY/ArmNh0aXyGaKsGgQxQ8m3Rr7LWIoX
Mqa0SjgLbMsWF0S81WaToolJ2jYWPduSh+oHDdKNN0KEzdFZUfMtjjxq4kY6HcVV
xzcDsgjnWPiYn38IlayhMJ8D+4dbM2KJO9U8pDwQnKzx
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:30 2026 by rpki-client