Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa
File: XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa (raw, json)
Hash identifier: Op7qdEKE+y8LVoqvvxQ0lrXSRlOdEFOdeV28bvi5uds=
Subject key identifier: 5C:C6:F6:8D:3B:BC:E8:5D:6D:18:BA:82:28:0A:32:BB:85:3F:D2:14
Certificate issuer: /CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Certificate serial: 019F23682AC82E03D3C75A9C236DC1DB9722
Authority key identifier: EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208463
IP address blocks: 45.135.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:c8:2e:03:d3:c7:5a:9c:23:6d:c1:db:97:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbbb484ea086f51ebeb8cf279d004b6d97c2ce2
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cc6f68d3bbce85d6d18ba82280a32bb853fd214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:74:b1:35:34:3e:06:10:80:94:98:e6:f2:
ea:85:de:79:eb:53:aa:18:76:9c:c4:48:db:30:96:
04:c9:6e:fb:db:d0:d9:bb:dc:7f:aa:2e:d0:17:e1:
ff:e7:14:58:f5:9a:be:f6:e4:88:0a:5a:54:19:65:
cf:78:7c:60:d3:cf:b4:4e:ef:60:09:15:74:db:03:
4d:29:cc:47:54:f8:c8:85:3f:ca:16:fb:0b:3a:d4:
d0:c3:2e:31:98:e1:3b:c6:c7:cb:15:7d:b5:c6:6c:
47:b2:84:72:62:15:a9:b2:c5:53:1a:2d:69:aa:51:
63:bf:4e:a4:47:de:6d:66:97:af:07:18:3d:c4:c1:
07:a7:2a:8d:10:6a:a4:40:ab:a8:63:b3:c3:ea:c9:
4b:d4:73:ba:54:09:f0:a1:ef:52:4b:db:ff:af:b4:
e4:d0:fa:63:a1:29:ef:42:f5:92:b1:69:68:de:9f:
d1:30:d1:92:50:b9:ff:40:36:88:8e:1f:d7:5d:58:
56:96:9f:12:25:34:e7:99:13:d6:3c:08:0e:15:96:
d3:01:20:3c:9f:2d:63:a5:9b:b7:fc:0b:f0:a7:88:
cb:e5:87:34:d4:0e:39:e7:97:e9:0f:e1:d8:c2:21:
d7:8e:a9:88:95:0d:90:2c:ef:a7:15:9f:d8:71:cd:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:F6:8D:3B:BC:E8:5D:6D:18:BA:82:28:0A:32:BB:85:3F:D2:14
X509v3 Authority Key Identifier:
keyid:EB:BB:B4:84:EA:08:6F:51:EB:EB:8C:F2:79:D0:04:B6:D9:7C:2C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67u0hOoIb1Hr64zyedAEttl8LOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/XMb2jTu86F1tGLqCKAoyu4U_0hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/67u0hOoIb1Hr64zyedAEttl8LOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.108.0/22
Signature Algorithm: sha256WithRSAEncryption
11:6b:ba:dc:70:4d:82:34:e6:ba:15:a1:8e:14:0f:b3:57:c0:
a4:43:f3:2f:5e:12:21:d2:77:5f:7a:d5:f8:b0:4a:0a:ba:e3:
9b:c1:3c:8c:f9:3a:ba:8a:f3:99:9d:bf:3e:09:67:1f:4b:99:
c6:4b:d1:6c:5b:fd:31:14:cf:6a:f1:8b:5e:80:cd:e5:90:53:
8b:44:10:95:f2:39:a2:c9:32:b1:fe:1d:5b:06:43:9e:26:18:
f3:50:62:91:57:61:7f:8d:04:02:ba:55:38:bd:2b:a7:7f:eb:
1f:5c:c9:c8:f2:16:df:96:1f:cb:ce:56:2e:d7:2c:f8:99:92:
e8:86:5b:b4:5e:55:84:89:48:f8:f0:1f:f2:a4:a1:3a:b7:e3:
e2:05:25:7a:39:df:ad:49:4a:98:cb:46:50:b3:0f:fb:7a:08:
d4:50:0a:ed:3e:80:2d:70:4b:be:3f:cc:ee:09:b2:ba:26:73:
cb:0f:03:03:87:e2:8a:4f:d8:60:08:64:41:bd:6d:3d:dd:75:
fd:17:a7:96:83:65:a1:98:ef:dd:55:c8:c0:67:b9:4a:bb:88:
67:f3:cf:cc:ff:ad:7d:36:e9:b6:4a:b0:0b:86:fb:80:22:12:
ca:13:84:4a:f0:ee:6b:87:9b:aa:e9:9b:91:b8:d8:5e:d7:93:
87:65:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:59 2026 by rpki-client