Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/xiRI03KiR2kTypJJ2hMYP-Q_WUk.roa
File: xiRI03KiR2kTypJJ2hMYP-Q_WUk.roa (raw, json)
Hash identifier: epEHvuWlPaTN4PMeKdhT4Suaq6L4/zYkZaVeY5nXdFc=
Subject key identifier: C6:24:48:D3:72:A2:47:69:13:CA:92:49:DA:13:18:3F:E4:3F:59:49
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 01A0AA108FFDA17DE4BEA22125AA1D47BF73
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/xiRI03KiR2kTypJJ2hMYP-Q_WUk.roa
Signing time: Wed 16 Sep 2026 11:53:27 +0000
ROA not before: Wed 16 Sep 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16080
IP address blocks: 80.70.216.0/23 maxlen: 23
80.70.216.0/24 maxlen: 24
80.70.217.0/24 maxlen: 24
80.70.222.0/23 maxlen: 23
80.89.114.0/24 maxlen: 24
2a02:d48:bb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:10:8f:fd:a1:7d:e4:be:a2:21:25:aa:1d:47:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Sep 16 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c62448d372a2476913ca9249da13183fe43f5949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:99:e1:58:ac:5c:04:9f:99:66:d5:fc:c0:
67:76:56:85:a6:95:40:7b:b1:1b:6d:db:51:fe:47:
e3:04:80:60:13:89:77:43:ad:76:6a:c1:35:47:59:
bb:b9:17:01:ac:7c:ab:52:7f:c0:68:11:b8:b3:ac:
e6:0b:bb:4e:c9:2b:b1:e4:6e:16:41:f5:87:60:36:
d8:81:90:06:43:6c:d1:63:f2:e4:bd:cc:d4:22:b6:
ed:5e:17:28:e0:3e:30:e9:d6:79:d5:80:a8:4c:c5:
d1:37:c8:0a:3d:d9:7e:ff:b5:98:16:69:b6:8e:54:
43:08:49:dc:51:13:e0:09:23:35:06:99:87:29:ee:
c0:bf:ad:19:82:02:2d:f8:20:b6:06:01:7b:7e:61:
67:7a:5b:43:ad:6b:e6:a2:49:bc:38:8b:be:e4:6a:
c6:f6:e1:e8:71:78:48:dd:3e:7a:d4:19:54:5c:14:
8a:66:6b:e2:0f:5e:78:b2:e6:09:b4:4a:f7:0a:5e:
9b:8e:e9:d4:d4:1f:50:26:3f:c5:60:69:79:92:53:
60:4b:61:87:88:3b:90:f9:c9:4c:3b:a0:fd:3e:42:
76:75:1b:b1:f9:83:03:6e:f1:1d:f1:f0:19:75:bb:
6f:af:4e:4a:94:28:d3:c7:90:28:06:96:bc:7b:4d:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:48:D3:72:A2:47:69:13:CA:92:49:DA:13:18:3F:E4:3F:59:49
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/xiRI03KiR2kTypJJ2hMYP-Q_WUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.216.0/23
80.70.222.0/23
80.89.114.0/24
IPv6:
2a02:d48:bb::/48
Signature Algorithm: sha256WithRSAEncryption
11:ff:fa:d1:23:a9:eb:62:0d:fe:8e:f4:ca:46:cd:6e:22:ab:
27:84:25:84:cd:59:49:5b:6a:dc:db:ee:c8:5b:01:6b:b9:a5:
1f:3e:50:d2:c5:1a:7e:a4:5b:a4:63:3b:aa:59:b4:b7:c2:cf:
56:e0:da:72:22:6f:73:6c:50:c4:97:4a:d5:3d:d8:d1:d0:57:
4c:c3:96:09:81:fd:ab:ca:fa:77:a2:21:24:f6:ca:16:e9:3e:
33:3a:1b:e7:4e:a0:2d:82:a5:3c:da:02:f8:10:e5:81:cb:09:
c1:70:ec:5b:7b:e5:40:e1:0b:3c:b2:cf:3c:dc:29:dd:44:a7:
ef:71:de:92:4d:4d:ba:3f:2a:9b:f6:0c:36:76:38:4a:f4:99:
7f:25:32:e6:3c:33:43:33:c4:02:b6:4e:57:d6:b2:5c:84:dd:
9f:f8:8a:91:2c:00:1c:15:6a:e4:60:1e:8c:e0:29:be:da:25:
83:79:db:55:fe:71:a9:38:bf:6c:27:de:c9:cb:72:b3:69:a2:
54:f5:3d:a9:04:c0:88:ca:ce:00:11:97:8b:d3:58:90:68:1e:
ca:bf:fe:03:0b:07:f6:63:7b:8c:a7:15:fe:85:ab:a6:72:ba:
66:6a:00:5b:66:a9:d0:53:97:a3:9b:ba:3a:a1:90:35:9e:ac:
3b:6e:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:29 2026 by rpki-client