Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xMiYJKjQcsX4IWnQ_iNWSyjpyT4.roa
File: xMiYJKjQcsX4IWnQ_iNWSyjpyT4.roa (raw, json)
Hash identifier: qUB/R8S6eWv25hu3lBHm5YYvPLSOLe0jcm6TxUqz1Pk=
Subject key identifier: C4:C8:98:24:A8:D0:72:C5:F8:21:69:D0:FE:23:56:4B:28:E9:C9:3E
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019DFBC9B121BCB91EB79A742D7A857804E1
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xMiYJKjQcsX4IWnQ_iNWSyjpyT4.roa
Signing time: Wed 06 May 2026 05:36:32 +0000
ROA not before: Wed 06 May 2026 05:36:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207994
IP address blocks: 178.254.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:c9:b1:21:bc:b9:1e:b7:9a:74:2d:7a:85:78:04:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 6 05:36:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4c89824a8d072c5f82169d0fe23564b28e9c93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:3f:48:b1:f1:e8:40:b8:7b:87:37:53:c6:
4d:3a:97:83:e1:ef:94:7d:de:b3:04:b7:9a:d6:c9:
1e:cd:95:17:a7:bb:bc:e5:0d:c0:6f:c3:7f:a3:8c:
ab:c9:ed:e4:04:ef:69:86:8d:03:76:c4:42:95:72:
1d:f5:af:c3:73:4a:2a:db:79:0e:9b:c1:f1:64:31:
d8:ce:50:ce:99:13:56:0d:e6:07:de:28:35:4a:89:
23:db:e2:74:99:11:91:ad:84:2e:a6:17:95:c6:35:
34:08:40:d5:3d:8e:d0:d6:1d:41:ee:ad:48:ce:f2:
3b:59:7e:bf:f3:9d:15:41:aa:3a:d1:40:61:27:10:
ba:fb:0f:75:ee:7c:b5:9e:ee:be:2a:52:d4:df:dc:
c5:e1:e1:d0:87:ef:ab:20:8f:b1:12:27:09:12:02:
84:34:d1:63:f0:54:5c:81:e1:32:44:c5:ef:22:9b:
7d:b9:93:c3:bb:88:ad:77:63:eb:92:bc:b3:66:cc:
3a:93:60:ac:05:fb:21:ff:aa:2f:6a:b2:8a:ad:19:
cc:9a:b9:1c:80:f4:63:7b:8c:c2:7e:98:1e:a2:ec:
3d:e8:45:9d:2c:72:78:77:32:f1:97:75:da:16:83:
a1:63:32:22:68:a3:c7:31:90:77:ef:c2:4e:7d:ed:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:98:24:A8:D0:72:C5:F8:21:69:D0:FE:23:56:4B:28:E9:C9:3E
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xMiYJKjQcsX4IWnQ_iNWSyjpyT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.177.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2a:e3:cd:dd:1e:25:44:1d:8f:6d:11:07:1b:e5:f9:8e:c6:
9b:6e:91:bb:94:6c:36:e3:fb:fc:17:33:2d:36:ad:7f:6b:25:
89:ec:c7:db:17:44:48:2c:a5:21:41:d9:67:33:22:c9:76:07:
6c:4e:58:ac:81:4b:84:03:af:6b:10:6d:09:e2:a5:21:29:fa:
0f:04:ac:ad:a3:1a:33:d1:16:f3:f4:97:9c:c7:30:bb:4f:44:
96:25:b0:e0:6f:98:a1:58:1f:3b:f8:ed:3c:2d:91:94:72:f4:
c9:3f:b4:9e:90:af:b4:01:33:1a:84:33:5f:1a:c8:d4:47:86:
05:aa:97:a0:1e:35:cc:11:8d:e2:78:04:f2:24:00:77:00:98:
95:4f:00:fb:39:62:43:3f:d6:ae:ae:e6:60:b9:86:4b:84:a6:
a5:68:4c:f7:7c:49:2e:7d:8b:75:ef:74:99:4c:88:bc:58:85:
2b:4b:0a:e9:2c:52:de:20:fe:e8:f0:74:a5:ba:02:07:41:ea:
c2:2c:df:97:55:d8:aa:98:da:81:28:b3:f8:ba:a2:5b:72:a5:
f3:1f:cd:4b:a0:e1:90:33:12:87:4c:9b:3b:1d:7d:f1:7e:8e:
92:cb:7a:fb:05:39:a7:2b:ed:51:6c:a9:6a:e3:f0:5a:5f:83:
4e:fe:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:21 2026 by rpki-client