Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XHfcDKSkfrPAsXMltt4I5GTqG9c.roa
File: XHfcDKSkfrPAsXMltt4I5GTqG9c.roa (raw, json)
Hash identifier: g3NY+qcl5AvuT/cYhczT0DVJX7p0GyMyuNuDa912lC4=
Subject key identifier: 5C:77:DC:0C:A4:A4:7E:B3:C0:B1:73:25:B6:DE:08:E4:64:EA:1B:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EBFFD09BB951EE4C173D812108260DA4D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XHfcDKSkfrPAsXMltt4I5GTqG9c.roa
Signing time: Sat 13 Jun 2026 07:58:11 +0000
ROA not before: Sat 13 Jun 2026 07:58:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141520
IP address blocks: 185.3.73.0/24 maxlen: 24
217.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fd:09:bb:95:1e:e4:c1:73:d8:12:10:82:60:da:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 13 07:58:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c77dc0ca4a47eb3c0b17325b6de08e464ea1bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:f6:11:28:b0:a1:5c:f0:88:de:fa:4d:d0:
85:91:e4:6e:b6:3c:7b:07:32:14:8e:91:1a:02:f5:
c6:cc:c0:ce:d6:ac:33:e5:c2:5a:53:9a:ab:f2:18:
91:be:54:95:11:14:42:33:d7:cd:5f:96:13:2c:89:
4f:41:05:b5:cd:bc:e2:92:fb:20:2a:ad:12:9b:34:
27:ff:44:9e:fc:eb:03:3c:27:ce:1b:bb:e7:0d:e9:
ee:ee:2a:58:fb:92:39:43:b9:19:68:88:6c:5b:9a:
df:1a:0c:92:62:a7:5a:0c:a1:31:d8:37:7d:36:60:
85:59:5b:10:71:92:48:3d:f1:b0:ba:95:cc:c9:33:
8c:fb:ed:e0:cb:bc:bc:5e:47:64:64:6d:6a:8a:ff:
6b:d2:8d:65:ee:55:cd:6a:84:fd:e0:ae:a5:c9:42:
2b:11:99:c0:26:fc:5c:98:e1:f6:df:65:0c:49:79:
ee:59:aa:95:ec:e8:ee:d2:8c:15:b0:76:87:e5:06:
8a:f0:b5:92:9a:ad:40:c8:59:38:57:79:9d:8f:1d:
53:38:c1:2b:f4:75:b5:e1:44:0b:bf:63:88:ce:19:
3a:34:56:43:68:3a:67:b2:30:67:47:df:c1:3a:3f:
8d:c0:37:d9:04:be:a4:76:c0:e7:af:63:c6:f1:45:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:DC:0C:A4:A4:7E:B3:C0:B1:73:25:B6:DE:08:E4:64:EA:1B:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XHfcDKSkfrPAsXMltt4I5GTqG9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.73.0/24
217.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:96:30:fb:f4:82:28:db:39:9b:f5:a0:19:c2:49:bd:6b:a9:
59:7c:ae:a9:d2:11:72:f6:ec:7b:b3:07:e3:29:12:41:b9:4c:
82:38:2c:38:78:1b:bc:29:06:03:cb:40:0e:4f:bb:5a:d6:b8:
bd:56:96:c0:51:a0:7f:a6:06:41:40:fa:79:a8:07:3e:1a:dd:
f9:54:13:87:8b:8e:c3:b5:88:16:9f:b8:4d:f3:3e:fc:42:50:
ec:80:c7:63:e2:e9:3a:56:b7:86:15:65:47:aa:00:da:aa:2c:
31:5b:d5:da:52:9a:33:4f:76:34:32:1c:51:8f:17:9d:f6:16:
ea:1b:9a:dd:ec:43:e0:8b:62:92:02:23:a1:bb:b8:c6:4b:23:
25:19:3e:6a:99:25:66:3d:ee:c2:7e:74:b4:f4:76:40:cf:3b:
a2:c5:00:d7:85:86:4e:de:8a:2b:31:9b:15:88:9a:d0:c4:64:
ff:3d:20:d8:59:55:4b:55:41:36:4b:54:c1:05:98:5e:bf:41:
32:dd:69:6d:46:a6:e6:f9:89:77:c2:91:37:88:4e:d0:10:ca:
6e:7a:a0:83:c4:90:9f:82:3d:ba:91:13:a3:ac:d6:48:84:ab:
07:24:56:a5:ef:82:7c:ff:8e:a7:cc:91:0d:25:3b:72:6b:82:
20:4b:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:43 2026 by rpki-client