Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/caXkdOh26Ng2luhqokI4XXlYMpU.roa
File: caXkdOh26Ng2luhqokI4XXlYMpU.roa (raw, json)
Hash identifier: K5rOjRfhlR9NLMm+bd9NoV6sfAdU4dteUmtcqkGa+PE=
Subject key identifier: 71:A5:E4:74:E8:76:E8:D8:36:96:E8:6A:A2:42:38:5D:79:58:32:95
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019EA71372AA3A78412CA73BE82656835BC3
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/caXkdOh26Ng2luhqokI4XXlYMpU.roa
Signing time: Mon 08 Jun 2026 11:52:10 +0000
ROA not before: Mon 08 Jun 2026 11:52:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219512
IP address blocks: 93.180.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:13:72:aa:3a:78:41:2c:a7:3b:e8:26:56:83:5b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jun 8 11:52:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71a5e474e876e8d83696e86aa242385d79583295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:7c:5c:3f:da:4e:c0:fb:96:4f:71:2c:31:
95:ee:47:a3:ee:cf:68:d6:d7:90:59:aa:26:cc:b1:
07:ef:98:d5:b0:d0:bb:a7:dc:86:06:d5:77:39:3c:
72:df:63:5d:02:03:7d:26:86:f6:c9:15:68:de:f7:
70:48:8c:d7:c4:8e:15:0f:3a:af:e1:9c:60:20:91:
fe:db:36:54:4f:a6:f4:8f:58:95:31:6f:fc:d1:d4:
c1:02:c4:99:4d:00:0c:d4:2b:2d:bf:3d:84:fa:5b:
ea:c1:20:29:19:7e:ff:c9:a3:7e:a5:4a:dd:3e:e3:
19:cc:8b:18:8f:4e:4a:9a:0f:7b:bc:25:ac:77:29:
76:d4:f0:ef:71:08:ac:63:8c:13:e9:96:ad:d1:9a:
75:4b:05:79:db:6c:b2:6f:cd:60:06:98:e9:7c:ee:
8e:7a:b0:13:b9:67:63:30:b4:ab:e1:57:b6:9b:d9:
4d:bb:a5:73:77:1a:f8:55:38:f9:f2:f0:ff:6f:a1:
b6:62:67:b8:2e:07:0f:23:33:c0:dd:52:2c:37:9e:
5c:f3:3f:2b:7c:32:91:2d:1f:39:c4:6e:34:23:4f:
fb:b5:fa:98:53:fc:54:7d:cf:42:2f:2e:d8:6d:db:
b8:31:56:18:91:cb:75:c9:e2:b2:ea:87:53:6f:77:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:E4:74:E8:76:E8:D8:36:96:E8:6A:A2:42:38:5D:79:58:32:95
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/caXkdOh26Ng2luhqokI4XXlYMpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:89:97:bf:81:a7:25:a9:73:dc:05:83:8d:83:bd:0f:d7:ab:
2e:b5:2f:93:89:b8:3c:ef:92:e7:b2:1a:f2:2e:74:c8:97:db:
9d:5b:cc:ec:be:3e:fe:67:4e:8d:17:5d:96:4a:49:26:1c:e9:
13:07:9f:f5:bc:98:0c:44:79:28:29:93:5f:e1:6a:2d:64:6f:
79:61:79:d9:0a:b2:0f:cc:08:b8:4d:11:e7:14:c8:47:0d:f0:
50:22:8e:49:6a:14:c3:26:8d:0d:48:e3:7c:51:e4:84:9e:9e:
06:f7:b9:62:55:bf:06:25:16:4b:76:27:c5:f1:f4:e4:12:31:
4b:b3:da:35:42:92:5f:2e:7a:da:3a:78:e5:e9:45:81:e2:20:
1d:21:c1:45:b2:fa:1b:cb:1a:58:dd:8b:5c:74:4c:67:7a:06:
6a:a6:b9:c2:c8:f5:59:ad:8f:4b:60:0f:5e:2d:72:9d:68:5d:
2d:0c:d9:ec:a3:7a:f8:b6:2e:33:d9:7d:eb:fc:15:90:1c:15:
f8:4b:0d:64:af:07:c3:a9:be:11:3d:ec:71:9e:44:b1:15:8d:
ac:05:2d:83:cc:f8:5c:3d:84:7c:67:eb:ca:c0:4f:ce:28:de:
76:c4:1b:d8:74:f9:ed:3b:79:85:b4:d7:31:52:4f:2a:be:e9:
63:74:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:17 2026 by rpki-client