Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa
File: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (raw, json)
Hash identifier: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=
Subject key identifier: 71:73:56:2C:9F:9F:85:E6:55:3D:31:EA:9F:12:AB:E6:A1:32:42:22
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019F6AB8D76C4E6C7CFC551BAA8FF4A176FE
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa
Signing time: Thu 16 Jul 2026 11:38:46 +0000
ROA not before: Thu 16 Jul 2026 11:38:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.136.192.0/20 maxlen: 24
2a07:4ac0:f005::/48 maxlen: 48
2a07:4ac0:f006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:b8:d7:6c:4e:6c:7c:fc:55:1b:aa:8f:f4:a1:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Jul 16 11:38:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7173562c9f9f85e6553d31ea9f12abe6a1324222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:75:59:31:fd:22:de:61:db:fd:36:9a:e9:
c5:29:4f:15:c2:53:7c:2d:39:28:a8:d8:05:89:00:
c4:56:44:41:7f:2d:88:e4:7a:f0:05:e2:5e:c2:27:
c2:a7:2b:5d:2b:f1:58:3d:5c:72:9d:cb:13:72:f5:
ef:08:05:29:e3:d3:44:02:37:fd:07:6e:cb:27:11:
8f:77:5e:49:47:86:a6:ff:7a:8a:af:87:2e:cc:6b:
33:2d:00:b9:4d:4d:b4:a5:f0:5b:9e:50:f1:10:ac:
f0:ba:56:8a:77:30:eb:f4:59:f6:14:b7:e3:ac:ce:
6e:c1:bb:64:0e:e1:e7:d4:82:14:b4:b1:13:59:5d:
23:f2:a3:52:fe:7b:7c:0d:de:ed:f3:5d:d5:c5:2b:
d0:47:bd:86:00:5a:0d:38:cf:55:ba:1b:70:99:84:
45:bf:c8:fb:10:56:7f:da:d0:18:10:29:33:15:70:
ab:49:11:3d:79:a6:10:b4:c5:3e:aa:09:1d:40:78:
80:5d:1f:59:f5:5b:c8:2a:64:c4:e6:a5:a6:cf:5d:
b9:40:16:ba:16:90:f0:35:e6:32:b6:ed:ff:2f:8c:
ae:c2:a1:16:f1:20:c9:62:64:14:b5:3a:2e:98:c0:
4f:fc:f5:55:0d:e0:c7:91:f3:69:87:09:53:f8:5e:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:56:2C:9F:9F:85:E6:55:3D:31:EA:9F:12:AB:E6:A1:32:42:22
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.136.192.0/20
IPv6:
2a07:4ac0:f005::-2a07:4ac0:f006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e4:dd:43:cc:0f:9b:3e:e7:5b:ac:9c:07:a2:ab:17:02:11:77:
9b:0d:4a:3a:f9:f9:7b:ca:55:28:7f:e2:17:01:ae:f2:13:6d:
e2:ad:c8:71:fe:2d:04:e8:cf:50:b8:03:9b:cd:50:41:03:b1:
40:e7:f9:1f:5a:73:f7:35:64:e5:3f:97:01:76:3e:fe:8d:65:
30:46:41:69:0d:bd:fc:77:ef:88:78:d9:c8:38:2e:5d:60:d9:
62:ef:13:f9:d7:af:da:54:b8:8e:e9:d5:67:46:be:48:ce:40:
2a:1a:c4:22:ae:07:0f:2c:c0:59:15:b1:a5:40:f9:0a:45:df:
43:19:13:72:e9:8a:4c:03:19:82:54:2a:2c:a2:1b:ff:2b:2a:
06:c9:72:56:ec:88:7e:89:b6:44:63:7a:3d:fc:9f:41:b2:9c:
c8:4c:94:dc:dc:b6:44:ed:c5:3c:74:4e:b4:78:05:cb:c6:d1:
96:a8:20:9c:bf:64:2e:dc:a7:40:d2:36:4e:5b:84:08:92:f7:
ad:14:9f:20:f5:1d:ab:86:f3:83:18:ea:4c:fb:00:07:e2:d3:
82:83:31:5c:23:d9:41:d5:36:36:05:8d:90:0f:da:3e:68:21:
07:51:b5:d5:26:c7:02:c1:4b:b6:07:b1:13:d1:c7:ed:30:ef:
16:c5:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:42:13 2026 by rpki-client