Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/xLZ3J1KMb8yQrN6g6__lPacbUAQ.roa
File: xLZ3J1KMb8yQrN6g6__lPacbUAQ.roa (raw, json)
Hash identifier: 3oyRoMLYdGZGUobI7quUmcksz3zT3JdoMcdxUp1s5Fw=
Subject key identifier: C4:B6:77:27:52:8C:6F:CC:90:AC:DE:A0:EB:FF:E5:3D:A7:1B:50:04
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 019B7F14DDFA04FA154D68F4F1DECA75896F
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/xLZ3J1KMb8yQrN6g6__lPacbUAQ.roa
Signing time: Fri 02 Jan 2026 14:20:32 +0000
ROA not before: Fri 02 Jan 2026 14:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199224
IP address blocks: 77.74.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:dd:fa:04:fa:15:4d:68:f4:f1:de:ca:75:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 2 14:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4b67727528c6fcc90acdea0ebffe53da71b5004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:32:5c:62:5b:d9:46:95:97:97:16:0b:6f:
0d:16:6f:99:43:5b:7c:e2:8a:02:e4:5b:50:4d:85:
1f:1a:a7:a5:13:2e:07:31:d6:76:f2:84:63:5b:52:
c6:7b:81:b0:c8:73:58:4c:90:6a:57:e8:19:cd:40:
f6:26:6d:22:df:0d:6b:f9:a1:f2:c1:73:38:21:7b:
9e:5d:fe:e1:b7:3c:03:ea:52:fe:80:87:0f:d4:b9:
67:56:d2:cf:31:a4:61:f5:3c:a4:b9:33:18:0b:42:
43:8c:e3:88:2f:f2:2b:d6:19:88:14:8d:b7:9b:79:
5f:8f:27:8a:14:0c:43:76:a1:76:3b:ef:e0:48:c1:
da:fd:aa:3c:da:4f:19:f9:3f:ce:62:8b:cf:91:1b:
5f:c5:af:72:d7:32:16:cc:da:cf:e2:be:5c:56:7c:
ce:ec:06:b8:93:d2:ff:c4:ef:b9:db:db:72:e2:56:
0f:b9:e7:b3:70:17:11:09:cb:8a:76:62:68:02:98:
7f:a7:da:46:f8:dc:9c:50:98:8d:10:8a:d0:d1:fe:
db:dd:56:45:d5:1f:71:bb:21:39:9c:9b:93:b9:d1:
f8:d1:f0:bb:d4:25:03:94:ab:9b:b3:b8:16:90:98:
f1:e1:16:98:5a:60:02:8e:6f:41:1b:0b:a8:ce:9d:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:77:27:52:8C:6F:CC:90:AC:DE:A0:EB:FF:E5:3D:A7:1B:50:04
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/xLZ3J1KMb8yQrN6g6__lPacbUAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.104.0/23
Signature Algorithm: sha256WithRSAEncryption
35:d4:6e:00:a1:6e:e3:80:f9:3e:5e:da:3c:46:15:32:63:42:
51:24:ed:e1:e1:54:1b:a5:1e:52:0b:6d:46:ab:1e:a4:d1:04:
54:67:db:d3:75:ba:72:4c:48:93:45:80:26:66:ab:4c:84:9a:
fe:b2:3b:72:f9:1a:04:6d:b5:a3:7b:1b:7d:5b:48:6f:31:51:
d8:a6:9c:9c:ff:30:6a:45:9e:58:eb:b0:b5:d6:b7:7b:b7:5c:
1b:f7:59:3d:e1:d6:68:90:6c:cc:1a:1c:7d:b4:4c:c5:d9:2c:
6f:b8:e7:67:29:c2:2e:05:5f:3d:88:66:93:de:b8:e2:38:29:
6a:13:bd:de:c5:bc:50:b4:17:bb:2e:50:8c:0d:57:8d:5a:f0:
42:7c:aa:c7:21:f0:96:c0:76:99:71:8d:1e:a6:d9:a6:1a:bf:
f4:d1:78:3f:f1:af:49:3e:b8:99:8d:d5:39:e9:cf:da:46:20:
93:a0:13:74:5e:b0:5d:63:50:9c:d6:06:35:64:97:98:cb:76:
95:ba:26:b7:2d:2d:3b:e9:98:6f:8f:8c:50:15:57:0b:7e:5a:
5c:bc:52:b2:bf:1c:24:d6:81:1c:47:d9:44:32:a0:b1:44:c9:
2e:9d:89:d4:7e:6a:bf:69:ac:38:22:30:65:56:04:47:e9:c1:
39:f8:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:54 2026 by rpki-client