Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/xCTkLKibXwn7kJuskGFKNRORLDI.roa
File: xCTkLKibXwn7kJuskGFKNRORLDI.roa (raw, json)
Hash identifier: HzbQo8dOuYm/UXqOkIfkXlPnBODZYHsqopp3VQ9t2D8=
Subject key identifier: C4:24:E4:2C:A8:9B:5F:09:FB:90:9B:AC:90:61:4A:35:13:91:2C:32
Certificate issuer: /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial: 019DD9A9FBAFE9BF5D31ACFE2EE6BB3C5597
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/xCTkLKibXwn7kJuskGFKNRORLDI.roa
Signing time: Wed 29 Apr 2026 14:34:49 +0000
ROA not before: Wed 29 Apr 2026 14:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59651
IP address blocks: 146.19.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:a9:fb:af:e9:bf:5d:31:ac:fe:2e:e6:bb:3c:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
Validity
Not Before: Apr 29 14:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c424e42ca89b5f09fb909bac90614a3513912c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:23:4c:4d:dc:3d:9d:a8:e7:1b:da:f6:5d:
29:3e:0b:e3:c2:ea:42:92:4a:59:08:2e:c3:c8:83:
07:cc:67:89:51:a1:f5:57:7c:76:10:f6:14:ce:ee:
d7:8f:ed:e3:12:01:b1:67:ea:c4:ce:be:f8:77:b5:
82:8c:00:e4:59:46:ae:87:68:9d:23:46:49:b1:ba:
92:d5:af:68:bb:85:c5:69:e2:fa:17:ed:19:44:ee:
c3:b6:19:5a:11:ed:bb:ee:aa:d9:85:be:db:3a:87:
1c:23:39:a6:ad:cc:bc:60:8e:d4:2a:7a:00:fd:d5:
96:d2:f9:3c:be:6e:77:5c:65:d6:00:57:58:24:d2:
f3:e1:c0:8a:47:0b:de:93:20:e5:b2:9f:ef:e2:d6:
9d:ad:84:4f:84:c4:62:b9:6d:c3:ee:e6:61:77:f8:
52:65:6a:fb:ff:dc:4c:1a:c9:08:54:fa:95:55:60:
37:35:49:72:ea:dd:68:01:b1:cc:95:31:a7:3e:49:
cd:5a:13:db:68:49:30:ec:f3:9b:63:f6:82:32:c7:
67:25:69:6b:07:3f:d5:a1:9e:ad:51:1c:4f:f9:f4:
58:b8:a6:7d:35:98:a6:7f:0b:f3:b2:23:e0:61:8e:
2b:db:a0:2d:d1:91:50:28:00:be:7a:f0:5d:4c:68:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:E4:2C:A8:9B:5F:09:FB:90:9B:AC:90:61:4A:35:13:91:2C:32
X509v3 Authority Key Identifier:
keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/xCTkLKibXwn7kJuskGFKNRORLDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6d:15:2f:3c:31:92:e7:a2:de:73:09:4d:94:e7:a3:0f:b7:
be:ca:00:4a:a8:bf:8f:a0:7c:5d:04:d5:91:c6:be:2d:21:56:
8e:68:55:66:fd:21:64:a0:b1:4a:ab:dc:28:e0:ae:dd:c7:01:
d9:00:0d:a5:b3:c0:92:79:3d:c1:57:60:c4:7e:58:76:a3:3f:
6c:99:89:50:cf:05:28:82:e3:75:31:3a:91:fd:e3:01:aa:6d:
9d:f8:02:60:13:1a:e9:8d:16:9d:9f:39:37:d4:dc:dc:fd:f0:
cb:0a:d5:3c:a8:ca:5a:54:1a:f2:2b:c2:29:88:50:73:aa:8f:
8b:44:d2:9a:b4:6e:19:1e:8d:1f:65:ee:37:0e:e3:ec:47:d2:
cb:81:56:c7:8a:d0:18:d8:52:85:f3:dd:03:dc:b9:81:bb:10:
75:c0:bf:e9:62:7e:9b:63:20:a1:3c:ec:f5:a1:0e:e3:b5:bf:
79:f8:35:16:58:ae:75:b9:fa:fa:14:8e:a5:f0:e9:90:c3:80:
ce:1c:b9:86:db:03:f5:16:63:6b:87:b9:db:ca:9c:32:38:a9:
e2:cf:7b:fc:85:2f:18:7f:5e:1f:0d:d8:0c:ad:97:52:50:af:
21:53:ac:1b:08:4a:27:73:2a:d9:4e:2e:13:d5:c8:11:6e:a7:
5f:ec:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:35 2026 by rpki-client