Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/x5x3Pj_Ebi8cpqDdceQwc1bQi8k.roa
File: x5x3Pj_Ebi8cpqDdceQwc1bQi8k.roa (raw, json)
Hash identifier: /+MfSm48/YGhdZIuBjmTNukFGIpbLVckCq5v1bXH1fU=
Subject key identifier: C7:9C:77:3E:3F:C4:6E:2F:1C:A6:A0:DD:71:E4:30:73:56:D0:8B:C9
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F5F40B52CABE0048040034CB19FFFB967
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/x5x3Pj_Ebi8cpqDdceQwc1bQi8k.roa
Signing time: Tue 14 Jul 2026 06:11:43 +0000
ROA not before: Tue 14 Jul 2026 06:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 213.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:40:b5:2c:ab:e0:04:80:40:03:4c:b1:9f:ff:b9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 14 06:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c79c773e3fc46e2f1ca6a0dd71e4307356d08bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:51:a9:98:1c:70:c2:cd:02:e9:d6:59:c1:
d6:95:d8:87:ef:28:2c:f3:f9:35:b2:db:b2:60:c4:
3b:a2:d8:12:77:7f:58:1f:04:75:fe:2e:93:6e:66:
b6:5e:cd:34:c3:d9:79:5a:fb:04:40:bb:61:e7:a6:
db:63:cf:96:88:5a:e0:b5:93:66:6b:c9:1c:38:94:
86:a5:d8:d9:ae:aa:da:12:80:32:2c:97:9c:d7:94:
37:24:a7:22:05:1e:c1:ef:3c:c3:31:80:8f:db:aa:
85:ad:11:d6:99:52:74:68:c9:55:23:0e:e5:c6:e7:
6e:2a:50:19:9d:9d:93:df:0f:e4:f9:bf:4a:bc:ae:
8f:65:3c:bc:81:34:5b:5a:1d:15:8c:6a:c0:11:fd:
eb:d4:62:ad:b0:31:5e:bb:71:c6:86:9f:13:c0:b9:
bc:fe:15:24:7f:17:cf:3d:34:17:4c:a9:ae:96:a4:
66:2b:14:36:17:2e:cc:fe:8d:62:aa:db:10:3e:11:
20:23:24:98:51:24:9f:f1:56:69:99:b3:e2:6f:61:
30:02:c1:eb:fd:61:af:e7:67:e8:14:2c:bd:74:18:
0f:7e:35:fd:ce:25:58:aa:b1:d6:bc:dc:56:24:79:
45:e9:b5:95:2d:85:c8:c2:a7:a8:c8:b5:91:b9:be:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:77:3E:3F:C4:6E:2F:1C:A6:A0:DD:71:E4:30:73:56:D0:8B:C9
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/x5x3Pj_Ebi8cpqDdceQwc1bQi8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:56:01:5b:53:d0:7a:b9:8f:2a:42:52:29:ce:b6:82:06:9c:
40:a5:5c:22:3b:63:be:5c:6c:32:ad:de:6f:62:1d:84:b6:6f:
b6:c8:a4:3e:1d:66:3b:be:14:80:43:78:8b:dd:ae:5b:2c:d6:
e3:10:11:07:f5:74:87:c0:d4:fe:2e:6c:41:7c:c9:71:1e:04:
55:9a:50:b9:c5:11:fe:22:cb:7e:a7:a0:74:55:8d:68:d8:83:
db:62:ee:dc:85:70:d8:14:76:bc:3e:78:17:5c:56:03:a5:be:
6d:e0:96:9f:97:f4:26:2e:b0:3b:57:bf:10:81:70:fc:45:ac:
50:7a:d9:92:89:24:f9:fc:5a:ed:51:ce:bf:dd:e6:1b:9f:f1:
8e:35:08:ec:f7:12:44:10:06:e5:21:3a:0f:e5:d5:cd:3f:08:
9c:da:b8:97:82:2d:57:29:b4:fe:3a:6a:27:a7:50:96:32:07:
55:e0:34:fa:2c:36:b9:34:08:f7:c0:9c:76:23:16:a1:a4:e6:
f1:0e:0a:13:d1:5b:a2:2a:8d:43:b1:0e:48:1f:25:09:b1:f6:
79:7e:f3:3e:6c:91:cb:30:c4:6f:cf:3a:ec:b8:46:c3:65:fd:
e8:7b:71:36:bc:12:96:6a:c6:1c:47:83:2a:26:4b:ff:d2:8e:
5c:57:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:16 2026 by rpki-client