Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/xu4367rTCq-PaJR0TqEFWPrUVSU.roa
File: xu4367rTCq-PaJR0TqEFWPrUVSU.roa (raw, json)
Hash identifier: y/FhYnngcjKCDWpWGI5NMxxal3saQVjOboN8MjiFs1k=
Subject key identifier: C6:EE:37:EB:BA:D3:0A:AF:8F:68:94:74:4E:A1:05:58:FA:D4:55:25
Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial: 019B77592FEAF82D41743D112A0DF5546EC3
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/xu4367rTCq-PaJR0TqEFWPrUVSU.roa
Signing time: Thu 01 Jan 2026 02:18:12 +0000
ROA not before: Thu 01 Jan 2026 02:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50357
IP address blocks: 193.106.124.0/22 maxlen: 22
193.106.124.0/23 maxlen: 23
193.106.126.0/24 maxlen: 24
193.106.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:2f:ea:f8:2d:41:74:3d:11:2a:0d:f5:54:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Validity
Not Before: Jan 1 02:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6ee37ebbad30aaf8f6894744ea10558fad45525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:54:cc:d6:e1:2e:d9:bb:60:1b:7d:7e:27:
51:ab:0e:7a:ac:81:96:87:f5:d0:15:a1:ba:25:d9:
9a:7e:89:84:3e:9b:f1:cc:8c:6c:2b:5a:8d:d7:e2:
42:7d:1b:e9:92:22:c6:9f:58:0a:26:6f:75:f2:cf:
29:84:d4:cb:c3:fa:34:8c:e6:70:9b:05:d9:64:d3:
4f:cc:88:3b:72:79:a6:08:2c:71:aa:95:db:26:e9:
c4:bd:8a:b9:6f:ed:0a:50:25:cc:10:7c:f8:7a:11:
96:73:67:2b:fa:de:01:87:1b:99:5a:b8:8d:16:76:
ce:f2:c3:cd:50:6a:de:a3:d4:02:ea:72:45:f3:10:
22:31:a1:b4:84:83:56:b8:1f:dc:36:e1:2e:60:c3:
49:81:77:40:8f:23:a8:66:a9:07:2a:2e:e1:f3:4c:
9a:2c:27:fa:29:78:6a:13:35:3f:71:24:cd:9d:82:
f8:fe:66:4d:09:29:c0:0a:29:e3:ce:d0:0a:58:26:
69:e4:73:0d:31:8d:05:84:1c:82:1a:ed:2f:c8:30:
b6:a7:db:bf:2d:79:7e:06:19:98:05:79:b5:b4:18:
d5:ca:d1:04:49:e1:26:34:7b:51:fe:8a:78:1c:68:
ab:5a:87:5a:9d:15:85:84:21:ab:75:70:c6:cb:3a:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:37:EB:BA:D3:0A:AF:8F:68:94:74:4E:A1:05:58:FA:D4:55:25
X509v3 Authority Key Identifier:
keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/xu4367rTCq-PaJR0TqEFWPrUVSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:f7:b6:45:1d:fe:57:0e:9a:e5:cb:fe:90:95:87:49:15:7f:
29:3c:99:ba:94:db:b8:e0:7c:45:18:d2:01:db:7e:5a:4d:14:
db:05:62:31:df:19:cb:f4:4d:87:a8:32:af:23:25:88:6d:08:
86:85:eb:e6:fd:5f:e0:e4:fd:b5:68:7a:7a:33:45:c8:ca:3c:
9e:f3:a3:73:ef:fd:12:39:5f:e0:f5:8a:38:31:23:0c:73:b9:
fc:46:03:69:f9:61:40:61:95:9a:68:82:7c:0b:46:d3:08:2b:
b9:b5:8c:3d:99:e6:98:01:b5:20:75:c9:a6:7f:d4:b4:61:53:
c9:71:93:b5:bd:7d:bf:28:4e:03:87:f2:cc:bc:d0:cf:ff:81:
58:c0:cb:18:1e:53:38:b5:9f:39:11:86:2a:ea:31:ce:b1:46:
d9:bf:ba:1a:73:cb:83:7a:40:12:b0:f4:5c:e0:ec:79:cc:8f:
f1:86:0e:f1:ee:2b:22:53:84:da:7e:1c:d0:2c:4c:1d:a6:3c:
68:79:7d:28:c2:9c:37:5b:e2:78:6b:43:ca:54:a0:ea:55:cf:
88:d7:4f:c6:6f:9e:af:bf:9d:3e:89:7a:c0:eb:38:ef:ac:85:
8c:1b:ea:a6:3e:a1:44:02:ba:a4:c2:ff:8f:83:30:cf:18:a3:
f8:77:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:34 2026 by rpki-client