Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Xo6J7qDRBjGh9sXZaRj6zxrtZ68.roa
File: Xo6J7qDRBjGh9sXZaRj6zxrtZ68.roa (raw, json)
Hash identifier: TRaNi4k8BIVdihe9w6Pm65mC/UmNvr1WF2+/lczME2c=
Subject key identifier: 5E:8E:89:EE:A0:D1:06:31:A1:F6:C5:D9:69:18:FA:CF:1A:ED:67:AF
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019DFC79771BDD44D9069591579BE92C682B
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Xo6J7qDRBjGh9sXZaRj6zxrtZ68.roa
Signing time: Wed 06 May 2026 08:48:31 +0000
ROA not before: Wed 06 May 2026 08:48:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153671
IP address blocks: 31.42.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:79:77:1b:dd:44:d9:06:95:91:57:9b:e9:2c:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 6 08:48:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e8e89eea0d10631a1f6c5d96918facf1aed67af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:16:28:0b:9d:57:62:92:0f:10:48:b3:9b:
a8:a0:32:7b:fe:46:75:b9:17:c9:54:a9:a8:c2:27:
b6:a0:11:f8:0d:ab:01:fa:e0:76:7a:5b:1f:5c:6f:
f2:08:da:67:8b:c7:c9:f1:8a:48:2a:0f:06:40:75:
ce:1d:f8:ba:0c:2b:97:09:5e:59:3a:2f:12:f5:46:
4c:d5:6a:a1:f8:21:06:c4:c7:07:cb:2d:3a:f5:cf:
38:5e:70:80:d1:f0:0f:30:e3:e1:16:5e:c4:5d:ff:
54:ec:69:f0:4c:59:22:d8:28:08:81:14:41:0a:c2:
ee:4e:cd:12:f6:92:16:61:e3:22:f4:11:e1:43:81:
fc:31:83:8d:51:ec:b9:47:0e:17:1d:0e:e4:8c:89:
63:a0:c1:76:8d:7f:3b:dc:19:ba:5e:7c:99:15:20:
52:58:73:33:8d:52:1f:e3:a5:06:b1:49:8e:0d:2e:
b4:e8:34:cd:29:7c:58:81:99:e5:f8:31:15:1d:5e:
c8:75:c4:1e:95:81:8f:3f:44:08:c1:00:ae:35:cc:
78:1c:e3:77:37:bb:13:89:5e:eb:e4:27:b4:da:c2:
2d:83:3c:88:d4:08:dd:42:aa:66:eb:d3:8a:35:f1:
52:23:86:0d:9e:d4:08:7c:04:d6:98:18:be:b5:98:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8E:89:EE:A0:D1:06:31:A1:F6:C5:D9:69:18:FA:CF:1A:ED:67:AF
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Xo6J7qDRBjGh9sXZaRj6zxrtZ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b6:84:25:64:04:3f:5f:37:ed:9b:ec:cd:c0:bb:bc:ee:d0:
b6:fe:72:77:7b:35:2e:7d:be:76:db:71:fb:5f:a1:f9:9f:41:
a9:b9:12:0f:49:b3:b3:53:ba:ce:b6:57:48:9c:2e:5d:a1:d3:
80:29:3a:67:c2:c9:b8:86:0d:a2:34:c2:c9:c7:bd:d3:39:f0:
9d:2f:d4:46:04:5f:e7:1b:7b:98:e0:00:98:3d:40:a0:ea:68:
e6:94:f1:96:f4:5b:d5:a7:fa:36:60:71:81:2e:82:c4:9d:24:
45:80:b4:5d:45:78:86:a0:94:eb:3b:a4:c7:d7:45:42:eb:5e:
bf:29:61:89:b1:36:7b:f9:d5:a5:60:d2:b2:64:75:f9:38:44:
da:b2:ef:ee:11:22:9d:54:3d:df:2c:21:bd:c9:10:36:04:e3:
5c:e9:73:d2:92:65:16:97:dd:4a:77:ca:e9:44:33:48:b1:fe:
8f:36:b1:00:90:4d:06:9b:ec:2b:c0:49:79:0f:4b:7d:75:e9:
ff:0d:4a:08:7b:4b:0b:1d:eb:01:aa:68:a6:e7:6f:1b:13:19:
61:29:d6:02:fa:46:25:a6:6a:84:01:12:61:cd:02:8e:32:ab:
b4:60:f7:4e:93:b5:93:c4:b7:01:03:df:e5:ca:4c:6f:88:61:
3b:99:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:05 2026 by rpki-client