Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa
File: Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa (raw, json)
Hash identifier: dTjLGIgHzcuawJEo1z0MGCRL7Fj8URygA4AZ4Hforus=
Subject key identifier: 0B:0E:52:7F:20:F3:65:2C:1C:B3:5B:B4:D3:8F:81:1C:1B:19:27:69
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019C8044038F1A94E3D1ACFFC5019A9AE7F4
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa
Signing time: Sat 21 Feb 2026 12:54:26 +0000
ROA not before: Sat 21 Feb 2026 12:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213694
IP address blocks: 176.124.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:80:44:03:8f:1a:94:e3:d1:ac:ff:c5:01:9a:9a:e7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Feb 21 12:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b0e527f20f3652c1cb35bb4d38f811c1b192769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:f7:52:0a:87:4c:d5:01:30:94:0d:22:55:
cd:1d:7c:e9:ef:a5:9b:bf:21:fd:b0:68:be:3b:2c:
95:61:4f:67:24:f5:d2:2f:c6:c5:c5:9d:c1:87:4d:
d2:a1:ac:fc:f5:b1:58:bd:8f:18:58:7c:55:5b:4a:
ae:a1:fc:84:46:d4:d4:33:fe:b6:fa:c4:72:0b:6e:
2a:3c:b7:64:44:d7:ef:8e:a8:1e:17:1a:66:de:3f:
7d:25:dc:d7:a1:38:e9:95:f7:32:12:ed:ab:13:76:
a0:0c:d1:e9:8c:cb:79:e7:72:bd:92:55:fa:85:88:
c1:37:1b:40:9d:d3:fe:e4:b2:01:a0:06:22:44:d5:
f8:1a:ba:b5:0b:7f:58:5d:71:ba:01:d1:4c:78:c1:
1d:ec:be:56:59:36:de:a4:d2:1c:7c:6a:e7:eb:ac:
13:5f:17:db:57:ea:d6:0d:e8:e2:3c:4f:3b:ab:f4:
9f:c3:08:44:52:10:2a:d5:0f:16:34:ce:a7:f3:a6:
b4:9a:46:de:64:c6:ea:ed:ff:a2:07:1e:90:c3:8f:
a6:a5:00:49:0c:ed:26:35:a9:9a:d9:93:78:8b:4c:
8e:2b:7f:5d:5d:7c:5a:2e:cb:3e:a2:74:ae:e6:ea:
e0:8a:1e:73:e3:c6:6a:3a:a8:67:12:15:d0:c6:04:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0E:52:7F:20:F3:65:2C:1C:B3:5B:B4:D3:8F:81:1C:1B:19:27:69
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:11:79:30:50:5d:c8:32:0c:c6:78:c5:eb:2b:e2:ca:d4:f5:
d0:c8:d5:74:af:d7:87:97:22:45:63:a3:90:36:9e:41:02:7a:
a6:fd:3e:95:46:d8:2f:64:5c:6e:36:97:1e:3c:65:49:c7:6b:
c7:dc:45:51:01:42:bf:d0:e5:12:30:c4:19:f6:d2:30:3a:15:
aa:75:79:c7:22:7c:46:4f:b7:50:91:09:07:94:a4:a3:1d:1f:
21:0f:98:82:73:da:54:60:d4:c6:6e:b2:ec:ff:68:36:b4:44:
cd:6b:77:41:f7:75:a2:a3:74:68:fa:a2:fa:a1:3e:af:47:cf:
d3:82:c7:07:87:f3:ef:11:69:98:a1:61:3b:74:80:9c:6e:16:
19:08:13:4c:3c:24:db:69:bf:14:2e:37:9b:2e:c7:36:cb:cb:
23:df:c8:35:67:95:8a:ff:a4:e2:74:68:b6:ae:15:10:1c:ec:
1d:75:97:76:ab:8d:75:c7:dd:c6:d0:ab:af:24:3f:92:23:e2:
ef:78:8b:5f:b8:57:55:56:b1:8a:ff:73:84:bb:38:73:72:c7:
32:d6:1a:e1:9c:54:59:25:c8:5e:05:ba:ca:5a:c8:c4:9e:2f:
1a:f6:47:0a:92:32:ef:cd:b3:e2:55:e5:bd:e6:dc:12:6a:3c:
6d:fc:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:26 2026 by rpki-client