Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/xnPtBprlW7ByFkk94boZ3ieoZYw.roa
File: xnPtBprlW7ByFkk94boZ3ieoZYw.roa (raw, json)
Hash identifier: cG2BXmdDk03+etJMnp2WURUvWfVQuYGe2WLtJJwW8Lo=
Subject key identifier: C6:73:ED:06:9A:E5:5B:B0:72:16:49:3D:E1:BA:19:DE:27:A8:65:8C
Certificate issuer: /CN=2952e05ea60933c47ed523e567ee1a6c7dff9fc2
Certificate serial: 01A07B4F28CC649928030EB454A7A81F9814
Authority key identifier: 29:52:E0:5E:A6:09:33:C4:7E:D5:23:E5:67:EE:1A:6C:7D:FF:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/xnPtBprlW7ByFkk94boZ3ieoZYw.roa
Signing time: Mon 07 Sep 2026 09:59:40 +0000
ROA not before: Mon 07 Sep 2026 09:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 195.200.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:4f:28:cc:64:99:28:03:0e:b4:54:a7:a8:1f:98:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2952e05ea60933c47ed523e567ee1a6c7dff9fc2
Validity
Not Before: Sep 7 09:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c673ed069ae55bb07216493de1ba19de27a8658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:d9:0a:ae:3a:69:90:1d:e4:ef:af:bb:09:
f1:26:fb:11:c7:39:47:4c:1f:5b:ca:97:89:ef:62:
9d:02:86:90:02:09:70:5d:5e:a9:02:92:51:d9:46:
57:f7:d5:67:d1:da:8d:46:49:07:19:3f:f1:40:63:
f3:a0:d5:dd:56:d2:68:38:90:60:ca:50:53:6c:f8:
1f:0b:df:23:7e:bf:8b:81:c1:aa:be:2e:76:04:0b:
26:da:3a:0e:0c:b6:7a:7b:a2:60:41:51:89:5a:f2:
18:74:58:b2:04:95:99:3f:a1:6e:ce:0b:d0:45:a0:
f9:8e:3d:e4:b6:f0:88:c3:aa:38:71:0e:f3:a1:a6:
5a:67:54:dd:e9:4a:80:0f:d8:3b:1e:06:d2:3e:d8:
b9:c2:22:9f:8d:17:29:97:aa:1e:dd:90:4c:75:09:
a3:71:bf:5e:c8:1c:62:1a:9c:d5:d3:7d:3c:6f:bb:
8e:31:d7:8b:0b:c5:b7:fa:e4:44:74:86:43:9d:23:
ba:eb:4d:dc:e8:3e:49:66:81:64:bb:f8:bd:30:4e:
95:95:7d:89:8d:01:96:a6:b2:5a:46:a0:7e:03:0d:
62:0e:04:bf:c1:5f:df:92:57:d5:2d:9b:bb:70:c0:
fe:3b:69:fb:eb:f9:1b:c0:b8:3f:af:78:f9:b0:6c:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:ED:06:9A:E5:5B:B0:72:16:49:3D:E1:BA:19:DE:27:A8:65:8C
X509v3 Authority Key Identifier:
keyid:29:52:E0:5E:A6:09:33:C4:7E:D5:23:E5:67:EE:1A:6C:7D:FF:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/xnPtBprlW7ByFkk94boZ3ieoZYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.82.0/23
Signature Algorithm: sha256WithRSAEncryption
91:27:d9:16:2a:63:0e:95:5c:b5:1c:fd:56:91:f4:bc:14:6c:
cb:e1:fa:7b:bb:24:6d:e1:1c:df:32:67:af:82:29:13:e1:2e:
5b:81:67:f8:07:f3:b5:d8:d6:b0:3e:31:a1:bc:27:d0:8e:af:
fb:26:88:9f:17:05:2f:f3:10:d9:41:e5:49:c9:9b:80:05:ba:
64:db:01:16:48:28:8b:9a:96:aa:d4:c9:36:de:41:db:93:d7:
52:f0:b4:36:b6:30:ff:72:4a:ba:67:48:7f:98:59:ed:f5:1e:
ce:9f:48:ce:64:03:36:99:7e:ea:43:f2:ca:ab:b8:b5:d6:90:
20:a9:5c:36:6a:52:42:ea:60:41:22:f9:35:3b:44:28:d2:48:
a7:5c:a1:0c:1b:35:ec:d0:f2:0f:5b:31:7b:13:b8:ce:16:ac:
1a:1a:b4:f8:ad:62:93:c8:7d:36:f3:ed:4f:65:1d:3a:d1:cd:
89:92:62:d2:fd:55:1c:b7:30:b0:a7:17:2f:4d:05:fc:64:82:
2a:fb:3f:b0:ba:48:b5:0b:8b:10:c9:eb:ab:71:96:57:ae:e6:
b3:bb:5d:91:41:d0:45:e5:3c:fe:a1:21:01:b4:c1:8d:1a:d8:
78:7a:ab:5a:6c:21:3f:48:ec:42:5c:2e:8e:5d:d3:c0:55:16:
b8:30:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:51:19 2026 by rpki-client