Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/XWGt8zvOb_kyT4bEnqa0uouBMAQ.roa
File: XWGt8zvOb_kyT4bEnqa0uouBMAQ.roa (raw, json)
Hash identifier: ESSg/Q2R5xzvrkRwDMiUY8zSunMkng9nL/T25F+EMmc=
Subject key identifier: 5D:61:AD:F3:3B:CE:6F:F9:32:4F:86:C4:9E:A6:B4:BA:8B:81:30:04
Certificate issuer: /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial: 019B7BA52C7E8E5410F0660C360E2C553203
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/XWGt8zvOb_kyT4bEnqa0uouBMAQ.roa
Signing time: Thu 01 Jan 2026 22:19:40 +0000
ROA not before: Thu 01 Jan 2026 22:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43425
IP address blocks: 194.50.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:2c:7e:8e:54:10:f0:66:0c:36:0e:2c:55:32:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Validity
Not Before: Jan 1 22:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d61adf33bce6ff9324f86c49ea6b4ba8b813004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:b8:9a:87:b9:20:28:09:ff:2b:a6:94:8e:
de:f0:e8:2d:87:52:23:44:db:5c:8b:b6:d8:91:e2:
7c:27:45:72:b2:f0:c6:8e:bc:55:86:00:08:5d:c0:
65:84:3e:33:45:41:70:c2:dd:35:cf:f0:30:20:bf:
11:10:b7:fe:b2:fa:96:df:c3:05:2f:50:e4:1a:27:
95:2d:b1:ad:42:b8:0c:de:9a:e9:dd:e2:ad:ca:7c:
99:14:31:c8:a1:01:99:f7:aa:dd:af:62:6e:04:20:
4c:28:fc:bb:08:4f:1c:15:d3:5f:1b:18:78:fe:f3:
8c:61:57:21:ea:5c:01:a2:b1:cc:21:a4:9a:f7:48:
55:0d:e1:6c:c5:0e:80:09:4c:37:e3:cc:e1:3a:ec:
85:cf:8b:8f:ff:e0:f7:aa:e1:54:ff:6a:81:8e:4c:
ba:85:17:9b:31:e1:41:54:6a:c2:9a:2e:bd:de:2f:
c9:7a:90:dc:93:91:78:d0:b5:b1:f0:c7:40:a0:c5:
f2:81:d4:c8:46:77:12:40:3b:15:8e:8d:3e:a9:d0:
03:9d:87:0a:c9:1e:ab:b9:3b:2b:95:58:d0:d0:be:
e5:e7:5d:15:53:0c:b8:c8:a3:75:95:96:d3:39:a3:
47:17:3d:e3:a3:f2:2a:30:bb:bd:9d:4b:3c:c7:6a:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:AD:F3:3B:CE:6F:F9:32:4F:86:C4:9E:A6:B4:BA:8B:81:30:04
X509v3 Authority Key Identifier:
keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/XWGt8zvOb_kyT4bEnqa0uouBMAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.179.0/24
Signature Algorithm: sha256WithRSAEncryption
13:01:29:a0:90:12:5c:e1:48:70:6a:f7:06:57:c1:47:33:87:
4c:80:4e:eb:2c:26:d5:b2:ea:76:e4:0d:b6:2b:b2:01:95:5c:
0e:52:fc:be:7f:da:fc:f9:29:98:fd:54:fe:b6:b1:a0:77:68:
18:c8:44:96:90:8f:9c:f7:00:69:3a:bc:f5:a8:41:e7:e0:e6:
1e:42:4d:e0:ec:42:ec:bc:ce:03:22:83:4d:b7:b7:b3:b0:72:
dc:48:89:e2:6c:c6:03:10:bb:f1:18:7e:a9:cc:dc:64:ee:10:
da:0a:49:44:75:c7:ee:14:b8:5e:1b:9d:d5:92:db:18:0b:6c:
fa:2d:23:3f:ed:83:bf:e9:5c:c2:37:03:41:6b:85:d5:2a:e2:
2e:19:7f:6e:7c:96:96:a4:39:43:ec:b5:1b:d1:f9:86:88:f6:
60:3e:b4:99:41:1f:44:65:73:91:b7:ba:46:d4:6f:e8:e9:f8:
6e:6a:df:ce:36:83:dd:d6:47:2a:c4:7f:81:5b:e7:fa:d0:d1:
a2:8d:1e:4b:9c:63:3b:6b:f0:e5:90:87:2a:7e:4e:db:5b:4a:
0e:ab:46:b3:22:73:fc:a4:f9:e7:d8:fa:90:db:f5:b7:80:57:
19:34:70:14:ab:22:4a:1e:51:4f:1b:ff:6d:74:c3:49:b7:9b:
ca:1f:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:37 2026 by rpki-client