Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xNGkypvTdgXzp5sMtkx6tHwJnMI.roa
File: xNGkypvTdgXzp5sMtkx6tHwJnMI.roa (raw, json)
Hash identifier: Hre3npDByS8RR7ziOJ6iiDdkA/ZowkgCHkz0xgjNUpY=
Subject key identifier: C4:D1:A4:CA:9B:D3:76:05:F3:A7:9B:0C:B6:4C:7A:B4:7C:09:9C:C2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DFDBE11F3C52F0CD7F179E21575412BE5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xNGkypvTdgXzp5sMtkx6tHwJnMI.roa
Signing time: Wed 06 May 2026 14:43:05 +0000
ROA not before: Wed 06 May 2026 14:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399989
IP address blocks: 109.176.25.0/24 maxlen: 24
109.176.215.0/24 maxlen: 24
109.176.255.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:be:11:f3:c5:2f:0c:d7:f1:79:e2:15:75:41:2b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 6 14:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d1a4ca9bd37605f3a79b0cb64c7ab47c099cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:04:ba:14:34:d5:25:80:ba:f6:8b:e7:bd:
bc:c4:2b:2d:b5:4f:cb:66:a4:c3:e7:17:45:13:6d:
bc:85:8e:f4:56:55:ec:c0:cc:36:ae:de:e5:90:46:
df:9c:e3:38:b6:b6:0d:31:b8:2b:74:83:29:86:ed:
53:f3:92:84:c0:df:b1:c0:28:73:be:d0:da:19:bf:
32:7c:73:1e:68:f0:79:0d:99:a4:f4:23:2d:4e:f5:
d0:e5:e3:25:d6:2c:7c:ba:b7:b9:d5:ce:0c:d6:39:
f7:95:87:32:01:7d:f2:20:46:00:dd:30:45:ba:7b:
cf:c2:0b:43:7e:36:7c:fa:09:4e:2e:bb:45:d6:04:
6b:dd:80:f0:46:20:0a:e3:d6:98:b8:fd:97:15:06:
d9:f8:1f:e1:77:ad:e9:d6:88:f3:f3:6c:53:cb:c9:
01:2b:7b:d7:c7:96:70:a5:f5:48:84:c8:f5:1d:ce:
4c:e8:b5:d4:b6:23:13:0e:24:50:e6:f0:97:95:b9:
a4:4d:e8:98:25:0d:eb:98:23:de:4a:b9:dd:74:15:
56:e1:b4:5e:91:92:dc:3e:98:74:60:da:18:c0:c9:
f4:6c:eb:8c:a1:eb:0e:e9:02:84:99:7b:3e:90:24:
cd:a2:d4:3b:26:9e:61:30:08:77:8a:68:0d:14:5c:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:A4:CA:9B:D3:76:05:F3:A7:9B:0C:B6:4C:7A:B4:7C:09:9C:C2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xNGkypvTdgXzp5sMtkx6tHwJnMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.25.0/24
109.176.215.0/24
109.176.255.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4e:6e:71:cf:76:5a:59:46:86:41:2b:e2:35:8b:16:d6:cd:
85:ea:f1:24:d4:4b:f6:fc:5b:9c:36:18:de:ca:d4:d0:de:78:
ba:50:5f:10:c7:f1:9d:59:1f:38:04:98:91:6e:8b:73:ff:87:
7d:7d:7a:8a:18:f4:82:59:f0:8c:e1:16:be:b1:f0:4a:92:26:
e9:36:e3:3a:9f:ed:67:29:47:f3:e4:9d:58:66:38:7b:ac:d7:
15:0d:03:d9:30:20:77:5c:f8:4a:0a:1b:3b:70:7e:8c:9c:34:
81:f1:34:82:7c:a1:40:14:a6:50:b9:52:9f:fe:65:ec:ff:a1:
64:cc:84:0b:8f:8e:a0:f9:7e:d9:db:e7:5f:0b:37:13:94:81:
1b:f2:05:15:57:17:66:a2:f2:76:5d:7e:cb:7e:4c:b3:e6:75:
a5:22:9f:7a:07:94:f6:45:62:ff:7b:a7:dd:53:61:fb:23:89:
7f:80:a0:55:a7:7e:27:61:56:8f:a6:97:08:64:e4:9d:ec:44:
ca:90:81:f8:df:3d:5d:8f:d8:ac:aa:1d:d4:4f:e5:5a:7a:d6:
c4:f6:c4:e8:19:84:70:7e:17:d1:b0:16:39:2c:86:f6:c6:24:
21:7f:99:7c:bf:89:44:3c:17:a0:cb:0d:9a:b7:da:97:d3:ce:
5f:42:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:34 2026 by rpki-client