Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/XbUrIbN32tx_I5q3CIy0eDpniyc.roa
File: XbUrIbN32tx_I5q3CIy0eDpniyc.roa (raw, json)
Hash identifier: rSzXDaoG3c1rlucOs36GgG/tUP5/xd5PVZrM6moq2JE=
Subject key identifier: 5D:B5:2B:21:B3:77:DA:DC:7F:23:9A:B7:08:8C:B4:78:3A:67:8B:27
Certificate issuer: /CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Certificate serial: 019F23684FE3B241ACF78190EC8FB5ECEDC5
Authority key identifier: EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/XbUrIbN32tx_I5q3CIy0eDpniyc.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1103
IP address blocks: 141.252.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:e3:b2:41:ac:f7:81:90:ec:8f:b5:ec:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5db52b21b377dadc7f239ab7088cb4783a678b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:55:0c:00:4e:e0:85:af:f3:58:04:dc:3a:
25:5a:d2:fb:8e:43:fe:14:6a:9b:48:03:68:61:4c:
7e:4f:a2:90:03:06:30:a0:c1:8c:5b:76:f3:5f:4b:
5a:92:24:87:04:07:dd:4f:cd:a0:8e:ce:ea:c7:06:
aa:bc:e7:10:0b:8e:67:b4:c6:13:fb:18:8b:12:42:
dc:cd:a9:7b:c4:16:33:78:96:07:da:54:67:09:4e:
a7:ff:d4:00:70:e6:55:fc:d2:f3:e0:ef:9e:75:ed:
cb:28:cb:c5:64:8b:b8:5c:d9:36:05:dc:ff:5a:f0:
1d:5e:c3:58:3e:20:d5:de:f2:44:f3:5d:bc:2a:80:
d1:6c:49:b6:2f:69:bd:8f:f9:d6:10:79:5c:8b:91:
25:7a:c3:99:25:81:1b:b3:93:2d:7e:2c:89:e0:ce:
07:f4:3f:d0:82:01:3e:e1:29:39:9e:62:02:c2:c2:
a7:72:4d:67:ec:0d:8a:d2:77:da:50:ba:f1:db:f8:
3d:93:23:39:8b:48:b5:bb:ac:1a:4b:5c:26:f3:c4:
c5:d9:07:4c:21:b9:c9:41:27:31:6d:63:e4:1b:bd:
17:fc:da:78:0a:39:0a:9b:16:c7:91:6b:eb:50:e7:
00:ed:42:31:b2:ad:28:a5:0c:6a:1a:65:94:c4:d4:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:2B:21:B3:77:DA:DC:7F:23:9A:B7:08:8C:B4:78:3A:67:8B:27
X509v3 Authority Key Identifier:
keyid:EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/XbUrIbN32tx_I5q3CIy0eDpniyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:15:a4:1d:7b:54:41:3e:4f:3a:ab:3c:15:5c:7c:ab:41:ae:
68:07:09:42:f3:39:d8:7b:d4:f4:b5:58:bb:af:77:81:8e:26:
2a:ff:be:47:08:bb:bb:63:52:3d:e3:a0:94:83:56:f9:c7:75:
07:2e:57:70:6f:25:df:c5:e7:46:0f:aa:2a:f6:a4:c2:42:d9:
e1:f8:5a:bd:a7:ff:ad:5d:4b:07:24:f7:5a:26:ff:92:86:01:
59:82:12:da:38:29:d5:a5:ac:57:db:75:17:da:fc:3e:fb:64:
30:cd:91:c5:a3:8c:c3:5c:7b:73:fd:c6:06:71:43:61:93:28:
d7:a8:4d:f7:0b:21:9c:fd:f0:8b:87:5f:6f:41:07:30:14:db:
44:f9:c4:d0:c2:ef:94:9f:6a:5c:7c:de:bf:d1:7f:73:75:14:
54:e2:00:5b:b2:44:7c:61:e7:61:01:90:94:84:ec:64:24:8f:
1a:78:f0:a0:72:cd:39:96:ab:74:5e:e3:fd:ec:e1:f6:51:c1:
ca:b8:58:db:14:ea:6d:14:af:90:a2:97:d6:57:c8:db:19:b8:
25:ec:b3:91:cb:83:fe:ab:99:fd:ee:f5:98:c1:39:3f:d3:7b:
c7:16:e1:b3:2a:d0:57:25:cf:a4:32:cc:d7:49:95:0b:5a:46:
f3:f5:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:04 2026 by rpki-client