Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/XC2qgnZMd7KoCxUvbJDEOOAZ6gY.roa
File: XC2qgnZMd7KoCxUvbJDEOOAZ6gY.roa (raw, json)
Hash identifier: lNqu83Yibp25n37JenqiUawc+hvvEVurC151viVxI6Y=
Subject key identifier: 5C:2D:AA:82:76:4C:77:B2:A8:0B:15:2F:6C:90:C4:38:E0:19:EA:06
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 01A076E47BEB031540897BB0304257DF877C
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/XC2qgnZMd7KoCxUvbJDEOOAZ6gY.roa
Signing time: Sun 06 Sep 2026 13:24:40 +0000
ROA not before: Sun 06 Sep 2026 13:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 194.238.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:e4:7b:eb:03:15:40:89:7b:b0:30:42:57:df:87:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Sep 6 13:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c2daa82764c77b2a80b152f6c90c438e019ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:f8:e6:5f:05:25:c6:78:14:f2:7b:e0:1c:
56:bd:8f:e6:10:c8:a5:78:23:05:71:38:5d:06:2e:
88:ec:48:29:32:fd:cd:d2:e2:f0:0d:e6:c5:1d:e1:
23:1b:be:c5:c0:1f:4c:8e:eb:ac:68:9d:fd:4c:28:
08:3b:70:d6:cb:54:1c:1d:6e:34:2d:13:a0:98:00:
3b:3a:e8:dd:46:44:9b:12:d8:b0:fd:ba:1e:68:ce:
a9:02:aa:5b:c5:1d:f8:20:22:bd:47:8f:cc:c9:a0:
25:af:bc:9a:1a:6f:7e:57:bb:66:e4:84:a4:f0:84:
2c:a6:49:df:0b:18:0b:e7:bf:dc:2c:e4:52:26:4e:
95:5a:4a:19:59:41:95:af:96:19:01:a2:54:5e:7e:
6e:b9:c1:7b:10:1c:a3:62:62:62:19:e4:83:0d:f9:
92:df:96:3b:ad:b4:df:29:7c:7c:d3:16:f6:0c:25:
b0:96:dd:b6:81:56:ae:d0:a0:b1:94:8f:fb:3d:ee:
36:b9:be:2f:88:d4:59:e0:0d:e3:75:3c:0a:61:91:
60:31:16:5a:d9:77:db:0f:45:da:38:ab:62:67:cf:
ed:b6:38:17:ab:e4:f4:56:4c:c8:63:b8:63:32:ef:
bd:c5:b5:d2:e6:b3:b0:6d:65:c3:c9:41:01:5a:96:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:AA:82:76:4C:77:B2:A8:0B:15:2F:6C:90:C4:38:E0:19:EA:06
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/XC2qgnZMd7KoCxUvbJDEOOAZ6gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:00:cd:34:0a:24:4a:27:44:1a:46:c9:75:ea:ff:ac:c9:f2:
21:c7:4d:e7:d9:0c:10:69:77:c0:ad:dc:f7:b5:d2:d8:fa:ab:
51:9b:53:6d:4f:44:58:f8:e3:61:d2:fc:6a:ac:81:55:df:b6:
dd:cb:ef:e9:11:28:b7:5b:ad:7b:84:4d:8c:25:20:93:91:24:
a1:6b:75:b9:eb:ba:37:a2:43:fb:1a:d9:c9:41:cd:1f:8a:87:
18:b9:f9:79:97:0b:01:f4:2d:b3:e4:e3:43:b5:8b:5b:51:5f:
08:01:65:16:4f:75:0b:97:85:df:ad:98:b0:aa:23:dc:1d:3d:
86:09:b0:ed:26:7a:15:79:2a:2f:93:36:77:7d:51:21:4a:49:
e0:d5:af:43:50:7c:aa:f7:3e:3b:b8:bf:83:f5:24:af:d1:4f:
71:e3:f4:0b:a6:09:72:9e:23:2a:af:7e:4a:56:85:08:4b:76:
41:5d:60:04:c8:1d:e2:c3:9d:8e:29:64:4a:e5:af:88:62:4e:
23:b3:20:a6:4c:c3:e1:c9:b6:10:ba:10:a7:f7:7a:6a:77:f8:
55:e6:ae:9a:fe:e4:81:fe:05:01:17:57:0a:db:b6:48:be:33:
30:42:e4:21:7e:31:e3:18:53:56:8e:72:52:9c:e3:b9:9d:54:
37:18:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:31:58 2026 by rpki-client