Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xkLJfzFNbBzuljSnehV6Uc_aVlo.roa
File: xkLJfzFNbBzuljSnehV6Uc_aVlo.roa (raw, json)
Hash identifier: MNYuYBMI/4dU3saKmbnukadXQRM1k5aVd5zEXQKbLYY=
Subject key identifier: C6:42:C9:7F:31:4D:6C:1C:EE:96:34:A7:7A:15:7A:51:CF:DA:56:5A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0F102BF7880A8CD8FB29256FFED793856
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xkLJfzFNbBzuljSnehV6Uc_aVlo.roa
Signing time: Wed 30 Sep 2026 06:31:24 +0000
ROA not before: Wed 30 Sep 2026 06:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203693
IP address blocks: 80.96.73.0/24 maxlen: 24
80.97.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:02:bf:78:80:a8:cd:8f:b2:92:56:ff:ed:79:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 30 06:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c642c97f314d6c1cee9634a77a157a51cfda565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:44:d8:00:6f:a2:d5:02:8c:89:d1:f8:de:
32:77:5b:c7:5b:b2:43:f6:dc:0c:6c:0f:4c:f0:a2:
45:fb:87:c3:41:8f:a6:ed:cc:92:3e:79:88:02:90:
eb:52:c3:cb:91:7b:8f:4e:4f:fe:20:b0:6b:e4:6f:
dd:a7:80:ea:18:82:af:55:ac:e0:93:e4:c9:5e:36:
1a:e8:68:ce:aa:27:22:7e:d0:2f:3b:ff:5d:fa:68:
14:59:0a:ff:b1:08:1d:40:c1:d0:0e:a1:d2:e1:bc:
bf:6e:bf:68:21:96:aa:5f:53:3d:46:e3:8e:9c:15:
35:71:df:ab:83:9b:43:75:41:01:84:a0:47:b8:7b:
2d:ac:6f:10:dd:cf:fa:4f:96:24:dd:79:65:84:fb:
c2:58:7b:5e:cc:33:0b:cb:1d:b6:3d:33:4c:e1:5d:
2d:73:2e:71:5b:31:c4:d6:b8:e7:51:1e:c7:25:e7:
fb:9e:08:6c:c2:de:db:ac:5d:06:b0:00:92:69:bc:
0a:b2:8b:a5:b7:2b:f7:c1:14:4c:ca:da:cd:25:bd:
dc:b2:a6:cd:0a:04:47:08:0c:4b:fe:99:b8:29:1a:
2b:d5:2f:69:87:4b:8f:1a:cc:72:aa:75:73:1a:0c:
c8:91:1a:68:1f:17:62:74:60:64:6c:b6:0c:fe:23:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:42:C9:7F:31:4D:6C:1C:EE:96:34:A7:7A:15:7A:51:CF:DA:56:5A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xkLJfzFNbBzuljSnehV6Uc_aVlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.73.0/24
80.97.145.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:47:96:72:2f:4b:36:9c:1a:6e:c0:f6:86:cd:72:b8:dc:d0:
3f:56:04:8f:c8:76:0d:8a:89:8f:84:a8:c1:02:2f:c1:f9:ad:
45:b3:4d:13:73:ff:3e:c4:ba:8e:d6:05:3f:0a:4d:59:1c:ea:
45:27:b0:f9:92:5b:37:bd:73:ce:09:39:c5:39:fe:24:dd:2c:
6f:fc:d3:91:d3:ac:50:eb:42:ac:3b:ef:66:13:9b:b8:ab:9a:
fa:d6:b6:f9:37:32:5a:74:cb:c2:7d:56:b3:57:d1:72:35:b7:
bb:a5:61:30:28:61:bd:cd:88:2c:20:10:57:35:a2:cc:17:1f:
59:3f:35:8f:8f:68:52:67:6a:2f:52:fc:23:15:35:c2:3d:aa:
0c:e2:54:5e:83:be:26:47:e4:45:4b:5f:55:1a:8d:0e:a2:59:
49:bf:dc:67:9d:ab:d2:d9:52:45:a0:05:c1:d6:b2:91:9d:37:
9b:14:dc:e0:20:fc:cc:83:64:a9:a8:38:de:c5:12:4f:00:62:
71:35:79:6e:da:70:c8:e6:ae:76:ef:85:e5:16:e4:9a:45:c6:
fd:79:6b:d2:3f:bb:7d:ee:87:b9:47:c0:ef:a4:5b:fe:27:ba:
bb:d7:1c:11:24:56:4c:a9:a2:5c:7a:81:58:97:91:82:8f:c4:
24:1b:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:08:32 2026 by rpki-client