Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/XXWqfoKtAcCM7UMttu9lDzEg9w4.roa
File: XXWqfoKtAcCM7UMttu9lDzEg9w4.roa (raw, json)
Hash identifier: iyy9JReMyZF7zyDL2nrwHjgy/k2YaXeJe511rH+4Yew=
Subject key identifier: 5D:75:AA:7E:82:AD:01:C0:8C:ED:43:2D:B6:EF:65:0F:31:20:F7:0E
Certificate issuer: /CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Certificate serial: 019F38CFB2FCAC1F008C1BB24F03A8B3C5C4
Authority key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/XXWqfoKtAcCM7UMttu9lDzEg9w4.roa
Signing time: Mon 06 Jul 2026 19:02:43 +0000
ROA not before: Mon 06 Jul 2026 19:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12693
IP address blocks: 194.79.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:cf:b2:fc:ac:1f:00:8c:1b:b2:4f:03:a8:b3:c5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Validity
Not Before: Jul 6 19:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d75aa7e82ad01c08ced432db6ef650f3120f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:06:bc:c6:fc:63:9e:9e:37:6c:a3:a4:01:
83:43:aa:3a:b2:fb:9c:87:95:8b:4c:6a:eb:8a:c0:
01:60:9d:a0:ee:0c:3b:df:c2:75:0d:28:63:f4:e5:
76:05:54:f5:30:db:06:81:70:00:f7:1d:0b:e1:ba:
df:32:19:9b:00:4f:a7:74:ed:37:e9:05:6d:92:2f:
73:aa:df:46:91:63:1d:e0:15:00:54:7a:2d:92:e0:
11:89:a5:d8:25:9d:ad:95:8b:9b:6c:0a:1c:28:7b:
4c:c1:14:d3:3c:b1:8c:64:be:2d:86:cd:89:ce:45:
ae:1d:58:52:23:55:d9:8a:df:3a:3b:98:0a:83:16:
76:2b:67:64:ad:d0:e6:41:fb:ee:b7:50:1c:3c:67:
07:60:0f:d8:a6:4f:d2:81:c4:cc:a7:19:1a:db:49:
3d:8a:41:3d:15:1d:0f:20:76:e1:8f:9f:67:0b:fb:
17:08:8a:02:73:7a:2e:c5:be:d3:c3:fe:1c:c7:24:
f8:98:28:f8:ff:5e:8f:ba:11:6d:85:c5:26:8c:70:
f3:6b:52:cf:d1:10:15:97:e1:59:42:d9:71:53:75:
05:a7:4e:f7:1d:77:c1:22:7b:e4:cb:89:2a:43:20:
1b:60:22:6c:55:33:6a:4b:d0:9a:15:d8:7b:40:57:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:AA:7E:82:AD:01:C0:8C:ED:43:2D:B6:EF:65:0F:31:20:F7:0E
X509v3 Authority Key Identifier:
keyid:63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/XXWqfoKtAcCM7UMttu9lDzEg9w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.254.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ad:83:a7:2f:ea:48:b7:b2:12:1b:db:ae:1a:97:45:10:60:
68:7b:1e:75:98:44:f4:05:e2:5e:a6:62:11:5f:35:22:70:9d:
fb:53:1a:1c:0c:65:4e:bf:84:a0:54:67:7c:e6:db:71:b4:2b:
b7:a3:a3:4f:c0:46:f3:af:5d:c3:15:99:a5:8e:35:ac:b6:78:
a0:9d:33:7b:14:62:fb:ca:97:11:f0:f4:12:44:46:81:b6:de:
1a:6d:ed:ca:13:ce:97:30:0e:34:4d:33:75:af:68:c0:a3:29:
e9:eb:8a:d5:90:d7:7c:a6:57:2c:a8:2e:a4:81:37:d2:c4:7d:
26:11:38:7c:ae:98:6d:82:b5:9f:55:1a:a0:68:7b:76:e9:25:
5d:7d:fd:bd:28:e2:eb:8c:d3:b3:d1:94:0e:8d:4e:a3:cf:43:
68:e9:12:a7:9a:4c:58:07:c9:4d:2c:cf:97:1d:82:b7:8e:d9:
21:b8:ef:03:1f:db:46:81:2f:f1:f3:e0:e3:c4:3f:d8:f1:72:
07:cc:b2:f5:a9:7c:0e:f6:89:fb:2b:85:4a:e5:51:d3:0d:bb:
1b:eb:4e:18:e9:91:54:e3:55:1c:6d:ed:b0:a9:6a:f3:f0:a4:
e4:a3:b9:8a:6d:7a:2b:13:5e:56:7e:35:19:89:ad:d7:2b:03:
9b:bc:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:23 2026 by rpki-client