Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/XquIVervRfTQRR9R6ml_cTOLMcg.roa
File: XquIVervRfTQRR9R6ml_cTOLMcg.roa (raw, json)
Hash identifier: qQ4JO3bWVJS7ohyWrxDX4KanJPdshnnjvLQMGawFNLs=
Subject key identifier: 5E:AB:88:55:EA:EF:45:F4:D0:45:1F:51:EA:69:7F:71:33:8B:31:C8
Certificate issuer: /CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Certificate serial: 01A0C3221A1C6F1ECFF6FB93CC965A083F42
Authority key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/XquIVervRfTQRR9R6ml_cTOLMcg.roa
Signing time: Mon 21 Sep 2026 08:43:07 +0000
ROA not before: Mon 21 Sep 2026 08:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198389
IP address blocks: 167.104.112.0/21 maxlen: 21
176.103.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:22:1a:1c:6f:1e:cf:f6:fb:93:cc:96:5a:08:3f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Validity
Not Before: Sep 21 08:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eab8855eaef45f4d0451f51ea697f71338b31c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:92:68:15:b5:69:c0:2a:b3:f2:fa:b5:7b:
ee:6a:b3:a6:34:7f:21:bc:b1:97:b4:92:d2:1c:28:
4d:ba:91:24:9f:fe:ef:60:32:74:e7:79:16:0a:a4:
4d:9d:88:7d:7c:1a:5e:62:28:7b:6f:6c:09:5e:3c:
60:00:15:11:68:c7:c0:c8:35:a2:8c:3b:18:18:32:
3e:2c:a8:33:c2:6d:5a:74:c0:06:b8:8b:32:b3:86:
f2:bb:45:78:39:0e:8a:aa:84:54:51:38:42:9c:c0:
1c:47:58:86:db:d0:e4:a6:b6:cc:9b:6f:22:4f:00:
a4:4f:84:3c:c3:8f:17:99:34:fc:c6:7f:c5:58:81:
b0:42:2c:08:0e:19:b8:1e:49:11:5c:f7:94:f7:76:
b1:fe:d1:63:da:a4:05:35:ef:a3:90:02:f8:82:6c:
cf:4d:90:56:3a:a7:e1:97:c7:6f:7d:df:fd:f1:52:
c2:8d:e3:da:d2:60:25:78:be:4a:4e:43:f4:80:09:
3d:1d:d0:aa:a9:e1:ec:91:c7:58:85:e8:e7:fd:8d:
2a:22:ad:0f:c3:43:dd:6b:17:d5:5d:e2:06:db:b5:
4a:96:d5:1f:fa:a7:d5:86:e6:cd:4c:b6:69:0f:22:
c0:b7:e8:44:ef:28:96:8d:b5:1d:73:de:ad:ee:42:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:88:55:EA:EF:45:F4:D0:45:1F:51:EA:69:7F:71:33:8B:31:C8
X509v3 Authority Key Identifier:
keyid:2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/XquIVervRfTQRR9R6ml_cTOLMcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.112.0/21
176.103.168.0/21
Signature Algorithm: sha256WithRSAEncryption
64:44:2d:13:25:05:d3:6f:52:0a:c4:4f:33:0d:cd:2e:6e:ab:
96:cf:63:fd:1d:fe:8b:f3:fb:d1:8a:e6:0d:b6:e4:13:3c:7b:
48:96:cb:9b:67:5d:aa:e7:52:c3:83:f2:1c:4f:95:a0:fd:ce:
af:fb:7d:f9:c3:1e:bd:5f:bd:70:d0:26:08:6a:b1:5d:4a:83:
34:cb:89:92:fc:35:5e:63:d0:6d:34:66:cd:6c:38:11:84:1a:
72:44:4b:92:71:d9:f1:b0:39:49:aa:47:42:16:3f:cf:47:2c:
c3:d3:82:fe:6c:2c:ab:c8:5e:92:14:b2:eb:47:ef:10:2e:72:
41:50:4a:1f:84:d3:2b:fb:63:df:c0:dd:7b:39:bc:a2:33:7f:
7b:62:7c:7c:09:80:e2:2a:ef:d0:c6:6d:5d:e5:c3:3a:34:64:
1c:cf:af:66:4b:ed:e2:54:7f:86:b4:a8:81:3f:9d:2a:3a:d4:
d7:53:90:47:90:10:4a:7e:6c:f5:a5:ed:5b:17:1d:f4:01:d5:
c9:6c:1f:fa:4b:c6:a0:9b:ce:2a:94:66:f1:5a:04:68:98:19:
b9:a8:34:2e:3b:34:45:92:b7:23:36:72:d4:36:59:3b:ef:91:
f9:22:52:83:ed:c2:59:b8:b7:b6:81:b7:51:a3:e6:fe:bb:3e:
48:74:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:26 2026 by rpki-client