Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa
File: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (raw, json)
Hash identifier: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=
Subject key identifier: C5:06:49:9F:58:55:95:0B:13:B8:DA:13:8E:57:06:B8:41:A9:63:78
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019B7C119DA150CBD60EA0EA3F0F2319CE38
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa
Signing time: Fri 02 Jan 2026 00:18:07 +0000
ROA not before: Fri 02 Jan 2026 00:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29122
IP address blocks: 82.101.64.0/18 maxlen: 18
217.30.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:9d:a1:50:cb:d6:0e:a0:ea:3f:0f:23:19:ce:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jan 2 00:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c506499f5855950b13b8da138e5706b841a96378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:60:44:e1:f2:84:38:76:cb:f1:0b:c1:d9:
3b:e9:5c:6d:e3:0c:09:92:cf:e8:c6:0f:dd:b4:ec:
9b:9c:a6:ce:26:1e:1c:08:b4:d1:58:a6:9a:93:5a:
ab:4d:1f:e2:85:5d:fb:a6:72:db:e7:b1:84:91:d5:
04:e4:1b:01:2b:d0:ec:10:3a:d7:84:aa:fb:b0:1d:
4d:ed:03:a5:e8:76:b1:ba:52:81:32:b5:bb:03:44:
ae:70:48:df:e5:eb:d9:97:b0:0c:0a:3e:c7:f8:ca:
c3:b7:46:79:ba:8e:2f:0d:c2:9f:e9:50:56:99:e0:
46:d4:9d:b6:90:76:5e:36:47:21:b9:f5:19:a5:ab:
36:cf:cc:8b:c3:c9:ad:14:d3:dd:a6:73:90:25:2c:
ee:2d:05:c9:cb:62:89:0a:c8:2d:57:76:b5:35:f4:
03:61:25:e6:cf:ab:81:25:1a:1f:f7:52:96:39:f3:
d7:df:28:da:ae:ad:2a:38:de:d2:22:45:55:64:27:
b3:14:45:e8:0b:3e:73:78:c2:16:27:67:08:33:23:
e6:57:4a:da:2b:3b:91:8b:e1:de:7d:44:f3:b8:a0:
8a:9b:c4:6a:bc:08:2b:df:e3:21:57:71:bd:a8:18:
7d:16:57:90:c1:60:5e:b4:83:a6:a8:eb:0d:11:79:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:49:9F:58:55:95:0B:13:B8:DA:13:8E:57:06:B8:41:A9:63:78
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.101.64.0/18
217.30.208.0/20
Signature Algorithm: sha256WithRSAEncryption
77:06:15:9b:4d:52:ad:6a:f1:84:a3:df:18:44:a3:85:f9:ac:
9a:e4:6a:45:7f:61:f2:2a:99:fc:93:83:96:d2:e5:da:0b:05:
d6:ee:0f:73:ff:f1:d9:e1:d3:df:c0:6d:b4:21:7c:0a:a5:2c:
72:cb:c1:cf:53:85:51:91:0d:7b:08:b8:52:36:44:a2:15:8b:
e4:39:a9:cf:2a:9f:fd:68:a6:50:0d:5e:20:df:67:f9:ab:af:
57:dd:b3:68:17:36:4c:03:43:2e:c6:3f:aa:eb:b0:72:18:b6:
e0:93:8b:6c:b6:fc:b2:b4:24:21:12:c3:22:af:21:9f:79:bf:
42:8c:b5:80:f6:c1:cb:ac:c2:39:cc:9e:c5:1e:03:1d:7e:4c:
99:bc:f7:68:0e:6b:eb:b4:ea:7b:31:a0:24:e6:4e:47:91:4e:
88:75:32:e5:35:b0:f2:6e:dd:35:5b:83:27:cf:0d:91:f8:1a:
f2:54:6d:d8:64:50:75:2b:29:6d:8a:73:32:ad:cd:a9:7c:31:
2b:cb:20:aa:6c:1c:28:33:fa:e2:b6:cf:da:ac:dc:88:a4:ab:
8a:ac:38:b6:20:95:58:c4:37:19:a1:c1:f2:c0:d3:31:d1:8a:
64:fd:4f:ae:79:2e:7d:87:14:cb:c5:86:2d:54:34:20:a5:5a:
59:0f:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:06 2026 by rpki-client