Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/xv_mfH_vDLg1Q5L8BpAH47O17uo.roa
File: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (raw, json)
Hash identifier: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=
Subject key identifier: C6:FF:E6:7C:7F:EF:0C:B8:35:43:92:FC:06:90:07:E3:B3:B5:EE:EA
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 019F2368C25021A0735A5CBA583744C5AFFA
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/xv_mfH_vDLg1Q5L8BpAH47O17uo.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 193.104.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:50:21:a0:73:5a:5c:ba:58:37:44:c5:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6ffe67c7fef0cb8354392fc069007e3b3b5eeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:45:1f:49:92:fc:9e:dc:59:e7:ca:8f:42:
5d:c7:2d:d1:5d:30:30:1c:99:ad:1b:14:29:46:ad:
72:3c:c0:b2:ef:58:36:de:60:4a:7b:fd:5e:7b:f7:
e1:e4:39:cb:6d:c0:3c:b0:cc:4b:05:95:21:83:0d:
99:45:77:c3:52:e3:8b:a7:00:76:09:f5:84:7b:83:
9d:bc:f7:1a:19:aa:8c:65:40:a8:4b:fa:23:31:4c:
65:6f:a5:65:85:54:b5:d5:9a:d9:f4:b5:2c:8d:bc:
62:eb:5f:1e:24:ee:f9:40:95:17:a1:3e:f7:c4:10:
69:4c:f8:47:3c:c0:15:54:39:5c:4b:4a:39:f7:4b:
bd:89:90:bf:d2:be:22:9d:aa:83:4d:0d:fb:94:ce:
01:33:db:f4:8c:00:6c:eb:e1:53:cb:94:d2:b5:47:
a6:20:86:c3:50:2c:a4:d0:b2:6a:10:83:b2:c8:52:
1a:57:45:dd:7e:c6:b9:92:27:f4:3a:e5:b5:38:ef:
69:80:e3:ff:ec:d4:e9:3c:8d:4b:b0:e9:34:7a:05:
65:77:47:fb:10:33:8f:4f:27:4f:34:1b:a4:e2:14:
23:e8:b7:18:5c:86:73:21:f2:4f:e5:4e:8e:49:39:
65:62:93:3d:93:a9:42:cd:f7:76:85:54:46:89:f2:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FF:E6:7C:7F:EF:0C:B8:35:43:92:FC:06:90:07:E3:B3:B5:EE:EA
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/xv_mfH_vDLg1Q5L8BpAH47O17uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:20:15:5b:e1:c9:68:9f:f2:0d:18:2d:14:f6:aa:18:b2:f5:
cf:94:95:15:15:b4:89:85:4c:c9:4d:a2:9d:3d:9b:9c:e0:99:
6c:7a:1c:95:5f:62:bb:94:57:63:94:2b:8e:af:b0:c8:4d:81:
eb:06:46:7b:ed:c1:5c:6c:1f:4e:3a:7f:fa:5c:35:f9:ad:25:
1a:46:81:5b:13:22:56:ff:3c:db:5c:0e:12:f1:61:77:87:c1:
d0:ca:82:30:1e:46:90:e2:c2:9f:aa:5c:61:a9:dc:1a:92:0d:
31:b0:3d:21:8a:30:62:d2:15:64:dc:79:83:66:8f:90:53:d0:
4f:f9:64:db:12:29:96:81:c1:14:9d:9f:d3:e2:32:c9:7e:75:
49:5d:2a:a9:ac:6f:28:26:2d:6d:c3:fa:3e:60:e4:01:f2:fa:
2b:1f:8f:d2:04:ed:91:7d:01:ee:81:a7:90:35:e6:b5:8c:85:
55:1d:d4:8d:40:d7:31:5a:66:02:29:63:3a:e5:a8:01:4f:69:
54:16:e8:17:1f:e3:a5:fa:21:a2:7f:58:fb:68:2c:31:9c:37:
e9:72:91:1f:3a:dd:49:34:45:bd:48:e5:47:0f:c3:91:9f:c5:
57:a6:ad:d2:63:4f:60:b5:70:6e:85:31:0c:24:a7:46:f5:f8:
c2:39:e6:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMJQIaBzWly6WDdExa/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMzY2MjgwMDNkYTgyNDY1M2Q5YTU4OTc1ZjY5ZmQyYmMx
MDZiNzEwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmZmZTY3YzdmZWYwY2I4MzU0MzkyZmMwNjkwMDdlM2IzYjVlZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb1FH0mS/J7cWefKj0Jdxy3RXTAw
HJmtGxQpRq1yPMCy71g23mBKe/1ee/fh5DnLbcA8sMxLBZUhgw2ZRXfDUuOLpwB2
CfWEe4OdvPcaGaqMZUCoS/ojMUxlb6VlhVS11ZrZ9LUsjbxi618eJO75QJUXoT73
xBBpTPhHPMAVVDlcS0o590u9iZC/0r4inaqDTQ37lM4BM9v0jABs6+FTy5TStUem
IIbDUCyk0LJqEIOyyFIaV0Xdfsa5kif0OuW1OO9pgOP/7NTpPI1LsOk0egVld0f7
EDOPTydPNBuk4hQj6LcYXIZzIfJP5U6OSTllYpM9k6lCzfd2hVRGifLaZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMb/5nx/7wy4NUOS/AaQB+Ozte7qMB8GA1UdIwQY
MBaAFGs2YoAD2oJGU9mliXX2n9K8EGtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpaaWdBUGFna1pUMmFXSmRmYWYwcndRYTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt
MWI5OWZkMDk3NjNlLzEveHZfbWZIX3ZETGcxUTVMOEJwQUg0N08xN3VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl
LzEvYXpaaWdBUGFna1pUMmFXSmRmYWYwcndRYTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWinMA0G
CSqGSIb3DQEBCwUAA4IBAQA+IBVb4clon/INGC0U9qoYsvXPlJUVFbSJhUzJTaKd
PZuc4JlsehyVX2K7lFdjlCuOr7DITYHrBkZ77cFcbB9OOn/6XDX5rSUaRoFbEyJW
/zzbXA4S8WF3h8HQyoIwHkaQ4sKfqlxhqdwakg0xsD0hijBi0hVk3HmDZo+QU9BP
+WTbEimWgcEUnZ/T4jLJfnVJXSqprG8oJi1tw/o+YOQB8vorH4/SBO2RfQHugaeQ
Nea1jIVVHdSNQNcxWmYCKWM65agBT2lUFugXH+Ol+iGif1j7aCwxnDfpcpEfOt1J
NEW9SOVHD8ORn8VXpq3SY09gtXBuhTEMJKdG9fjCOeZG
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:56 2026 by rpki-client