Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa
File: dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa (raw, json)
Hash identifier: 7negqj+cXGDnJClvB1tA9Ds9JK3g22g19iEuLC7d5hM=
Subject key identifier: 75:7D:55:8F:56:60:FE:FE:3B:0A:A6:9C:64:DD:54:B9:1B:55:CB:B3
Certificate issuer: /CN=63672c32119256811cfeff5e7c3629119365c419
Certificate serial: 019F2368B1F500513B569BC3E44FCD813878
Authority key identifier: 63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198980
IP address blocks: 194.125.242.0/23 maxlen: 23
194.125.242.0/24 maxlen: 24
194.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b1:f5:00:51:3b:56:9b:c3:e4:4f:cd:81:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63672c32119256811cfeff5e7c3629119365c419
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=757d558f5660fefe3b0aa69c64dd54b91b55cbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:9b:e5:2a:56:18:aa:55:58:d9:cf:a8:a6:
99:60:e2:4b:b7:58:ba:3a:1e:76:08:dc:13:fc:c5:
73:dc:bc:f2:19:03:d9:7e:ba:ec:16:55:7a:8c:d2:
78:eb:3a:bd:5f:10:5f:4a:cf:6b:20:3b:0f:29:46:
70:29:16:5a:21:f8:83:22:d6:9e:71:26:8d:c5:82:
95:3d:43:3d:43:71:4d:51:9c:26:8c:2e:4b:1d:e9:
ca:eb:84:0d:d3:ea:04:27:29:4d:43:f9:3c:64:7f:
19:34:b1:8f:bb:56:23:bb:6d:1e:29:b2:c4:b4:eb:
96:f9:bd:e1:19:25:52:62:eb:21:b6:13:5b:e9:ef:
40:af:a1:1e:24:a9:6f:30:3b:77:dd:02:3f:fa:6a:
20:16:b3:f7:33:a0:29:fd:c5:06:9b:0c:c9:89:be:
a0:07:93:e7:09:e1:8b:d3:f6:04:d5:0d:18:68:bb:
a2:68:18:32:c2:9e:a0:a4:54:ff:a5:a7:2f:e6:1c:
5b:70:16:56:2a:29:a5:0c:09:31:ee:aa:ea:c4:51:
ea:4f:4c:30:a4:e4:c4:b0:3f:c5:d9:3d:a7:c9:4e:
a4:33:e3:73:0c:3e:71:e3:6b:c6:dc:d5:20:fe:a7:
34:88:d3:7a:a6:87:4c:34:4a:c3:fd:05:00:86:e7:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:55:8F:56:60:FE:FE:3B:0A:A6:9C:64:DD:54:B9:1B:55:CB:B3
X509v3 Authority Key Identifier:
keyid:63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.242.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:14:c8:d7:80:ae:e5:96:e1:fb:04:a3:fa:05:52:be:70:1a:
8c:cd:e0:e3:72:10:7c:cb:29:2e:01:c5:61:0f:ea:bd:02:f3:
33:b2:60:98:97:24:05:a6:aa:a9:44:e4:c1:01:9f:3e:cb:fa:
c1:8b:c5:01:86:45:93:6a:2a:41:a4:94:7a:72:f3:72:07:6f:
4e:b3:86:39:e1:c0:d5:6b:d1:78:5f:eb:d7:3b:60:b5:a6:31:
04:ba:d5:d5:2a:fd:b9:a1:c4:30:dc:ad:bd:23:23:b5:76:ee:
db:21:d2:28:dd:55:91:02:cc:e8:03:ef:4c:5a:b0:d7:d8:eb:
fd:11:e3:85:a8:01:26:7f:bd:54:75:b5:5e:d6:82:c8:16:42:
39:1c:fb:b3:d2:da:f2:df:04:d0:b4:8b:22:ea:83:8c:c2:d5:
ba:36:f6:9f:90:d5:26:17:ed:c8:dc:54:e4:30:ec:dc:df:d6:
4c:64:65:9d:0d:ff:ee:55:7a:96:3b:c0:eb:fe:68:13:d7:50:
05:58:11:76:de:02:64:b2:ff:04:c0:23:c3:f1:40:94:06:68:
6b:e0:b6:2a:c5:e8:8f:37:95:55:a0:1c:d2:bf:d2:dc:c2:c0:
6f:7e:e4:78:26:c2:10:5e:23:85:5c:a2:a2:96:ed:2e:11:3e:
87:e5:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:07:39 2026 by rpki-client