Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/X6JtswPuWMphlqJiHzVyInL98j8.roa
File: X6JtswPuWMphlqJiHzVyInL98j8.roa (raw, json)
Hash identifier: ZL1Sxec3tsw8Y32bFS8REbWmOs/4Jyot6g63yrFt8Zc=
Subject key identifier: 5F:A2:6D:B3:03:EE:58:CA:61:96:A2:62:1F:35:72:22:72:FD:F2:3F
Certificate issuer: /CN=a7e480768c60361b8554b4be826f5e75839d726e
Certificate serial: 01A08FAB75FD255061ECAE14A06166DC3F23
Authority key identifier: A7:E4:80:76:8C:60:36:1B:85:54:B4:BE:82:6F:5E:75:83:9D:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/X6JtswPuWMphlqJiHzVyInL98j8.roa
Signing time: Fri 11 Sep 2026 08:52:53 +0000
ROA not before: Fri 11 Sep 2026 08:52:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 194.9.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ab:75:fd:25:50:61:ec:ae:14:a0:61:66:dc:3f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e480768c60361b8554b4be826f5e75839d726e
Validity
Not Before: Sep 11 08:52:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fa26db303ee58ca6196a2621f35722272fdf23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:11:08:02:ba:02:c8:23:5d:5e:b5:a9:f5:
27:67:8a:84:85:87:85:e4:0b:40:16:5c:3a:5d:85:
40:d9:c6:2d:cb:92:ee:c9:f4:56:bb:77:87:91:08:
38:a1:e4:b9:ca:ba:3a:4a:42:c6:dc:7e:3a:d4:72:
0f:35:cb:85:5c:7c:6f:77:94:76:56:11:f5:8a:2f:
66:ed:05:93:86:50:99:22:8f:d6:b8:37:8b:cd:2c:
8e:9c:55:de:3f:13:40:06:07:a9:45:58:07:a4:84:
80:da:75:43:e5:68:33:70:8c:ae:28:08:34:55:b3:
87:b1:63:3b:9e:a8:8f:12:b9:1f:84:3a:4e:f6:09:
a5:e2:11:af:0b:a7:17:ba:aa:21:38:c8:b1:90:b7:
44:86:15:03:89:9a:2b:2e:cb:73:f4:4d:e4:d8:85:
27:85:22:31:97:4e:36:3d:69:fa:a9:b8:76:80:18:
5b:b0:8f:80:22:d6:4f:ee:d0:78:8c:26:66:c1:f9:
79:47:15:6f:0d:47:13:f2:7f:6f:38:4b:52:ef:21:
14:d9:f2:b7:44:aa:b6:a0:78:e7:2b:50:7a:cc:c7:
82:81:87:49:36:03:92:2d:15:e1:24:e7:86:c0:cc:
29:d0:12:d9:57:9d:12:2c:cb:a9:fc:b7:c9:ba:f3:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:6D:B3:03:EE:58:CA:61:96:A2:62:1F:35:72:22:72:FD:F2:3F
X509v3 Authority Key Identifier:
keyid:A7:E4:80:76:8C:60:36:1B:85:54:B4:BE:82:6F:5E:75:83:9D:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/X6JtswPuWMphlqJiHzVyInL98j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.54.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d2:bf:b5:a6:65:7a:41:49:09:e0:e6:4f:f7:c2:62:eb:fc:
ec:91:f2:9d:e0:66:e4:b8:c7:38:77:31:71:18:77:d4:e9:4b:
c7:25:d2:19:ad:e4:a0:48:09:77:79:17:a6:51:1e:c5:fe:47:
3e:4a:7f:b3:91:3a:f5:23:b5:5f:94:73:7c:8c:0a:4d:c0:12:
80:34:8f:99:bb:d4:b3:f4:c8:38:f4:49:b1:8b:fa:30:3d:92:
0f:cf:27:0e:7f:44:4c:42:9f:b7:aa:59:6d:a9:62:09:4f:98:
f8:89:bf:1d:a5:47:67:96:5c:23:03:04:9c:a5:97:21:c2:cb:
8f:59:97:e5:49:72:ba:d6:4a:e0:5b:ee:05:43:3d:c3:e1:c2:
9e:2f:c5:66:e7:bc:e9:d7:10:e0:06:e6:ab:9b:4a:da:a4:b6:
af:45:eb:b2:ec:88:fe:51:5c:69:87:1b:84:7a:34:26:af:ed:
4d:79:70:b5:86:16:0c:bc:45:10:b0:bd:82:91:c3:c8:e5:f8:
6a:c1:e2:c7:df:87:e8:3f:56:a7:ea:70:d4:ed:4d:0c:bb:71:
30:01:38:ef:6d:c8:60:64:ff:c0:f9:4f:43:e7:a8:a4:f6:3d:
26:c7:b7:47:db:d9:c4:c0:7d:b2:37:e5:f0:35:d5:a7:cf:f1:
1b:fa:54:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCPq3X9JVBh7K4UoGFm3D8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTQ4MDc2OGM2MDM2MWI4NTU0YjRiZTgyNmY1ZTc1ODM5
ZDcyNmUwHhcNMjYwOTExMDg1MjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmEyNmRiMzAzZWU1OGNhNjE5NmEyNjIxZjM1NzIyMjcyZmRmMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2kRCAK6AsgjXV61qfUnZ4qEhYeF
5AtAFlw6XYVA2cYty5LuyfRWu3eHkQg4oeS5yro6SkLG3H461HIPNcuFXHxvd5R2
VhH1ii9m7QWThlCZIo/WuDeLzSyOnFXePxNABgepRVgHpISA2nVD5WgzcIyuKAg0
VbOHsWM7nqiPErkfhDpO9gml4hGvC6cXuqohOMixkLdEhhUDiZorLstz9E3k2IUn
hSIxl042PWn6qbh2gBhbsI+AItZP7tB4jCZmwfl5RxVvDUcT8n9vOEtS7yEU2fK3
RKq2oHjnK1B6zMeCgYdJNgOSLRXhJOeGwMwp0BLZV50SLMup/LfJuvM28wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+ibbMD7ljKYZaiYh81ciJy/fI/MB8GA1UdIwQY
MBaAFKfkgHaMYDYbhVS0voJvXnWDnXJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1TQWRveGdOaHVGVkxTLWdtOWVkWU9kY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81OTZiYTctNGFlOC00MTllLThiNjIt
YTYxY2Q4YzIxZWFkLzEvWDZKdHN3UHVXTXBobHFKaUh6VnlJbkw5OGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81OTZiYTctNGFlOC00MTllLThiNjItYTYxY2Q4YzIxZWFk
LzEvcC1TQWRveGdOaHVGVkxTLWdtOWVkWU9kY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgk2MA0G
CSqGSIb3DQEBCwUAA4IBAQCu0r+1pmV6QUkJ4OZP98Ji6/zskfKd4GbkuMc4dzFx
GHfU6UvHJdIZreSgSAl3eRemUR7F/kc+Sn+zkTr1I7VflHN8jApNwBKANI+Zu9Sz
9Mg49Emxi/owPZIPzycOf0RMQp+3qlltqWIJT5j4ib8dpUdnllwjAwScpZchwsuP
WZflSXK61krgW+4FQz3D4cKeL8Vm57zp1xDgBuarm0rapLavReuy7Ij+UVxphxuE
ejQmr+1NeXC1hhYMvEUQsL2CkcPI5fhqweLH34foP1an6nDU7U0Mu3EwATjvbchg
ZP/A+U9D56ik9j0mx7dH29nEwH2yN+XwNdWnz/Eb+lSx
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:27 2026 by rpki-client