Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/xPa2VWn8zPPJu1TS_BqirNCgVQc.roa
File: xPa2VWn8zPPJu1TS_BqirNCgVQc.roa (raw, json)
Hash identifier: DZ163Mk89KXMzE5FqtcclAXo6ecwVKvSxuhUWnKFYkg=
Subject key identifier: C4:F6:B6:55:69:FC:CC:F3:C9:BB:54:D2:FC:1A:A2:AC:D0:A0:55:07
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 019F3B64B645BB90D32ADA3CAB3EFEDFFEB2
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/xPa2VWn8zPPJu1TS_BqirNCgVQc.roa
Signing time: Tue 07 Jul 2026 07:04:43 +0000
ROA not before: Tue 07 Jul 2026 07:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24812
IP address blocks: 80.64.80.0/20 maxlen: 24
80.64.80.0/24 maxlen: 24
80.64.81.0/24 maxlen: 24
80.64.82.0/24 maxlen: 24
80.64.83.0/24 maxlen: 24
80.64.84.0/24 maxlen: 24
80.64.85.0/24 maxlen: 24
80.64.86.0/24 maxlen: 24
80.64.87.0/24 maxlen: 24
80.64.88.0/24 maxlen: 24
80.64.89.0/24 maxlen: 24
80.64.90.0/24 maxlen: 24
80.64.91.0/24 maxlen: 24
80.64.92.0/24 maxlen: 24
80.64.93.0/24 maxlen: 24
80.64.94.0/24 maxlen: 24
80.64.95.0/24 maxlen: 24
91.196.96.0/22 maxlen: 22
91.196.96.0/24 maxlen: 24
91.196.97.0/24 maxlen: 24
91.196.98.0/24 maxlen: 24
91.196.99.0/24 maxlen: 24
176.105.192.0/22 maxlen: 24
176.105.193.0/24 maxlen: 24
176.105.194.0/23 maxlen: 23
176.105.194.0/24 maxlen: 24
176.105.196.0/24 maxlen: 24
176.105.197.0/24 maxlen: 24
176.105.198.0/24 maxlen: 24
176.105.199.0/24 maxlen: 24
176.105.200.0/22 maxlen: 24
176.105.200.0/23 maxlen: 24
176.105.202.0/24 maxlen: 24
176.105.203.0/24 maxlen: 24
176.105.204.0/23 maxlen: 24
176.105.204.0/24 maxlen: 24
176.105.206.0/23 maxlen: 23
176.105.208.0/22 maxlen: 22
176.105.208.0/24 maxlen: 24
176.105.209.0/24 maxlen: 24
176.105.210.0/23 maxlen: 23
176.105.212.0/22 maxlen: 24
176.105.212.0/23 maxlen: 23
176.105.214.0/24 maxlen: 24
176.105.215.0/24 maxlen: 24
176.105.216.0/23 maxlen: 24
176.105.218.0/23 maxlen: 23
176.105.218.0/24 maxlen: 24
176.105.220.0/24 maxlen: 24
176.105.221.0/24 maxlen: 24
176.105.222.0/24 maxlen: 24
176.105.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:64:b6:45:bb:90:d3:2a:da:3c:ab:3e:fe:df:fe:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Jul 7 07:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4f6b65569fcccf3c9bb54d2fc1aa2acd0a05507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:14:7e:7f:be:0d:ed:55:bb:35:2d:b3:fd:
71:5d:15:20:d2:80:4a:65:31:d5:f8:8a:69:e4:67:
2f:48:ec:5d:d7:a9:0f:28:f5:bd:73:ef:ec:40:a6:
93:f7:98:14:aa:4f:0a:e8:91:39:2f:d2:1a:6e:bc:
d3:46:fb:12:83:e3:78:e3:fd:32:4b:66:dd:a0:b4:
c1:4f:31:70:06:f8:af:73:4c:4a:a9:2a:fb:e6:9f:
95:7f:4b:19:2f:30:81:c6:74:5c:54:7a:fb:b3:63:
dc:37:dc:b3:70:6e:f1:2d:91:f1:35:55:53:9a:b2:
61:a2:e7:9f:ee:b2:6d:6b:13:f3:fe:0f:31:7d:95:
97:06:4f:00:26:b8:91:6f:b8:83:8e:ca:27:26:e0:
92:76:90:7e:e6:bd:31:4a:2c:02:c2:68:82:88:fa:
e1:8f:54:fe:75:a7:ed:37:6e:e2:7d:42:32:82:73:
1e:99:f1:d0:9a:b4:ac:e0:f8:b7:58:97:73:34:95:
c4:d5:25:6d:ad:98:64:c5:97:b0:72:f6:99:57:05:
a5:d8:61:50:f5:3c:90:89:d5:9e:3f:96:91:36:56:
7b:b2:77:da:82:30:89:fb:29:77:07:29:9d:b1:3e:
25:e8:70:99:ca:67:9b:76:a3:dd:62:10:e3:90:5f:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:B6:55:69:FC:CC:F3:C9:BB:54:D2:FC:1A:A2:AC:D0:A0:55:07
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/xPa2VWn8zPPJu1TS_BqirNCgVQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.80.0/20
91.196.96.0/22
176.105.192.0/19
Signature Algorithm: sha256WithRSAEncryption
62:49:a8:27:2d:7f:e7:b5:f2:49:2d:67:44:32:04:9a:fd:0e:
a0:a7:82:72:42:ad:82:3c:b5:d9:0c:d3:90:3c:58:2e:4b:b1:
cb:d7:72:9d:fa:13:0a:ee:2e:97:6d:e1:8c:e9:a1:95:6d:1e:
70:f8:d3:c4:0b:36:35:e3:02:0f:4a:0c:90:61:e9:f8:85:28:
8f:e5:a3:9f:c7:79:dd:15:0d:bc:7c:81:f4:2a:0a:62:58:8d:
44:b6:77:3b:d6:7b:26:39:17:23:40:7b:1e:bd:e3:9f:c0:22:
e7:50:6f:63:d5:bd:a0:b6:15:11:1c:9a:1a:3c:cf:0d:d9:7c:
78:ce:0e:14:a7:b1:d1:09:9e:eb:1e:2f:a6:c6:71:43:70:8d:
c6:16:46:be:73:06:a1:cc:97:c3:b4:db:13:75:df:5b:ca:30:
41:12:2d:11:97:d3:23:eb:3e:8d:11:23:e4:61:a0:7a:c2:97:
38:65:bc:cd:ad:02:89:e1:33:9b:8b:4a:d3:7a:69:0c:ae:1e:
b2:d1:02:2a:09:34:83:cd:ec:e0:e2:83:42:54:9f:23:dc:39:
52:25:38:5a:77:97:22:4a:55:74:df:26:a5:1f:a4:25:5d:a3:
b8:fa:2a:1d:5b:db:2a:23:64:81:d7:1e:cb:fc:a7:ac:c6:03:
c3:63:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:10 2026 by rpki-client