Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/RpX-BY98Lx61d6BbDQ85JgwJHHA.roa
File: RpX-BY98Lx61d6BbDQ85JgwJHHA.roa (raw, json)
Hash identifier: 0VMmsY08zvLKyajdXHCzmWNfxGZ2eh7xs6DS8yoIsrs=
Subject key identifier: 46:95:FE:05:8F:7C:2F:1E:B5:77:A0:5B:0D:0F:39:26:0C:09:1C:70
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019DFD04A04A75561815B83546C52C8D8005
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/RpX-BY98Lx61d6BbDQ85JgwJHHA.roa
Signing time: Wed 06 May 2026 11:20:32 +0000
ROA not before: Wed 06 May 2026 11:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 130.193.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:04:a0:4a:75:56:18:15:b8:35:46:c5:2c:8d:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: May 6 11:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4695fe058f7c2f1eb577a05b0d0f39260c091c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:8b:3a:ef:74:67:d8:f1:af:43:df:18:91:
df:1d:be:b9:30:3c:c7:27:44:ba:33:61:a9:72:4d:
01:d3:a0:dc:a2:49:3d:72:9e:dc:c6:9c:63:6a:4d:
1d:96:56:ea:20:b5:57:a5:d7:9b:54:25:bf:c7:b4:
3e:1d:58:52:5f:96:24:ed:6d:3c:8f:e0:f5:9a:eb:
de:61:d2:b9:93:93:7e:72:43:08:71:c4:76:50:c4:
d8:1a:66:a2:46:08:15:a0:29:a8:d5:25:2f:d5:c2:
8d:cc:14:d5:36:bd:be:c1:76:b4:69:53:41:cc:35:
b1:a4:11:e8:5b:df:2e:a5:f4:6a:f4:c9:28:82:36:
39:0f:52:3d:5a:6f:73:9b:30:cf:9d:af:dd:97:b9:
a8:88:7b:a6:5f:46:b1:bc:a8:7c:c7:53:26:1c:c1:
a1:8b:11:bd:cd:e5:8d:46:71:51:f0:1e:22:9d:88:
e9:40:4d:8a:5a:cd:2f:23:4e:03:ed:7f:bc:e5:2b:
17:d0:69:81:2c:c3:15:b2:c6:2a:2d:4d:9d:5b:c9:
e2:ea:f4:13:a2:4d:43:a0:6d:cc:1d:c1:92:0b:a4:
c1:5d:4b:fe:a1:dd:75:4c:69:a3:03:c1:d9:2a:80:
ac:c7:c4:74:4d:43:c0:b1:30:db:e4:a1:24:d8:35:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:FE:05:8F:7C:2F:1E:B5:77:A0:5B:0D:0F:39:26:0C:09:1C:70
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/RpX-BY98Lx61d6BbDQ85JgwJHHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.27.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f2:cc:de:f5:f2:9a:07:5a:d3:e0:3d:dc:c4:05:cc:96:bf:
3a:ba:5d:5e:41:b3:53:f9:bb:ee:29:42:1a:6e:07:7c:fe:ba:
f2:f4:f3:d2:07:bc:5b:14:64:a6:87:66:bc:a0:3a:4a:78:ce:
89:13:06:5b:49:0b:2e:bf:38:ab:10:00:23:e2:8d:19:bb:8d:
e6:fa:53:58:0d:ea:2c:fc:52:83:ff:ed:df:c5:82:1d:1e:59:
11:36:27:5f:20:0a:86:f8:09:68:00:4f:98:ce:c8:1e:bc:4a:
a9:52:40:bb:33:eb:83:84:3c:9e:05:cc:a5:4e:1c:a8:d0:0e:
0c:96:b3:a0:28:1d:24:87:b8:91:18:ab:8c:09:fe:ca:53:01:
5c:63:59:fe:18:73:d5:e0:1b:40:c0:98:1c:c8:19:ba:c2:f9:
57:41:db:f8:5e:d4:ae:39:1c:21:b4:04:52:ed:90:3a:ea:9a:
55:88:38:61:dd:bb:43:7c:7c:58:0c:68:7f:db:a1:f0:64:60:
08:60:5c:e6:08:c5:e6:44:8d:4b:a8:d9:33:66:14:3a:71:6f:
b0:ae:2f:ce:b1:e8:bd:40:38:ac:43:0f:82:dc:e5:37:e8:03:
24:af:4a:2e:ed:33:5c:b2:db:9d:68:10:37:01:79:24:e1:2d:
33:11:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:24 2026 by rpki-client