Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa
File: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (raw, json)
Hash identifier: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=
Subject key identifier: C7:A4:DA:50:38:F1:FD:79:2D:FF:62:F0:D0:69:56:47:9E:C4:02:57
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F43E141FDABDA0C43B0B7EE9EEB99358D
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa
Signing time: Wed 08 Jul 2026 22:37:43 +0000
ROA not before: Wed 08 Jul 2026 22:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201592
IP address blocks: 131.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:e1:41:fd:ab:da:0c:43:b0:b7:ee:9e:eb:99:35:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 8 22:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7a4da5038f1fd792dff62f0d06956479ec40257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:af:4c:ab:76:ae:b6:43:0e:bd:04:96:c3:
9c:49:0f:5b:8e:12:0d:1c:89:93:e4:a2:eb:16:fc:
af:d7:9a:8f:14:64:79:22:b6:75:91:11:01:ab:d4:
49:ce:ab:1c:fb:81:07:ed:36:7d:14:1b:da:c2:b0:
2d:bf:90:7f:b2:d2:9e:55:59:91:57:a1:09:fa:07:
a1:a1:7e:e8:5a:60:79:9b:e1:87:3e:0e:c0:67:97:
2b:27:43:e1:f3:72:cd:21:97:c1:b8:eb:08:ca:bb:
5b:a6:c1:b7:b6:11:84:67:28:76:6a:13:73:fd:f9:
3c:61:5a:94:a6:98:e6:d4:4c:18:16:05:a3:f4:92:
38:2b:32:de:50:b4:a5:8f:87:0f:73:89:fe:71:76:
c3:74:98:02:6c:3d:ae:23:ac:2e:c7:b3:a4:55:cd:
52:61:21:9b:f7:21:7f:af:b6:aa:70:ae:fe:be:9c:
32:53:12:f0:4d:cb:a6:08:cc:1a:33:4b:4c:c0:74:
2c:e4:2b:28:d3:34:f6:af:96:ad:99:b9:51:fa:ec:
ca:68:6a:6a:22:83:5e:08:37:0f:0d:16:7c:d3:ba:
16:aa:f5:a5:02:9a:a2:3c:18:2f:45:50:00:06:67:
da:98:85:9f:12:3d:1b:39:36:d9:b1:e1:6f:fc:5e:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:DA:50:38:F1:FD:79:2D:FF:62:F0:D0:69:56:47:9E:C4:02:57
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
79:eb:1f:de:c9:a3:66:24:03:c8:1c:5a:a5:d6:3d:b7:d6:2a:
00:9f:51:9b:a9:02:c2:83:6b:45:34:9b:1b:5d:25:4e:ce:8e:
4e:65:bb:9e:f2:4e:77:2b:45:1f:ea:82:f9:ed:95:33:7d:5b:
92:2e:a4:5f:d0:c4:fd:c1:3b:64:8c:33:6c:4d:dc:b0:6c:c8:
28:cd:20:85:ed:11:ba:1a:06:12:e7:84:25:0c:4b:b5:4d:1e:
4d:6c:bb:36:20:6d:05:38:24:11:ea:e7:45:cd:61:1b:ba:d3:
89:a7:8a:24:fc:1f:bc:e0:7a:07:8c:47:a2:11:af:11:09:0e:
cf:cd:9d:a9:a1:cf:7d:32:5f:37:ad:36:8a:11:83:14:d8:9e:
19:82:e1:46:4e:c1:65:b6:d5:4f:b2:c9:4d:1d:97:b9:9c:67:
b1:58:4a:8e:be:6c:0c:90:03:b4:15:5d:7d:e7:80:1a:87:ae:
63:ac:73:e2:7c:1b:3c:00:08:bc:4b:b3:cb:17:03:0b:78:d3:
fc:ce:ba:0c:ea:9a:58:5b:77:7b:73:89:6d:fd:0f:f5:8b:34:
56:29:3b:9b:6c:57:72:3d:6e:a7:23:d0:e3:28:73:3c:41:67:
08:02:5a:1f:06:c5:87:bf:09:6d:c9:56:31:dc:9f:d7:a2:2b:
af:8b:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:47 2026 by rpki-client