Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/xsPphQ3GxyftzicBBiCvf8PWiTg.roa
File: xsPphQ3GxyftzicBBiCvf8PWiTg.roa (raw, json)
Hash identifier: Lp9WrPLRboL43ORcpzFlINw0fU+XSE3Mcv99YXgLnFI=
Subject key identifier: C6:C3:E9:85:0D:C6:C7:27:ED:CE:27:01:06:20:AF:7F:C3:D6:89:38
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01A0A4EA34887DF56B7BE0DC2E835668A731
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/xsPphQ3GxyftzicBBiCvf8PWiTg.roa
Signing time: Tue 15 Sep 2026 11:53:27 +0000
ROA not before: Tue 15 Sep 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218676
IP address blocks: 82.119.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:ea:34:88:7d:f5:6b:7b:e0:dc:2e:83:56:68:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Sep 15 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c3e9850dc6c727edce27010620af7fc3d68938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:14:1b:6e:cf:d1:9e:17:de:3c:77:7c:52:
37:7c:c4:70:78:33:9d:e6:55:34:ee:20:80:68:fc:
26:8c:39:5a:3f:34:df:df:6c:45:de:b4:bb:f9:21:
b5:b4:5d:58:8e:3d:03:ec:ef:2d:78:81:84:2f:be:
cc:6e:68:5a:f3:00:b0:e5:09:f7:10:18:68:ce:d9:
48:fa:f8:1d:8a:bc:c1:85:d8:f0:44:96:62:51:5c:
66:6b:46:fd:ce:5c:31:37:7e:dd:6c:d0:6c:4d:01:
ea:21:7a:ce:dd:90:90:b8:fa:c9:8d:10:7c:e1:32:
22:b5:89:7b:19:f0:63:57:73:1e:09:51:33:c5:5e:
12:a5:9b:d3:de:c2:42:8b:27:13:7c:f3:03:f5:ba:
e3:61:c9:4c:91:7d:ea:4c:af:4a:2d:3e:48:23:2b:
d2:5b:79:fd:96:b9:28:4f:1b:85:5f:35:b4:f9:2f:
39:98:42:41:d4:6d:6f:73:6a:c6:d0:7d:1e:a3:27:
33:69:24:f2:26:da:54:fe:cc:e3:99:df:83:df:c9:
81:57:d8:e8:19:65:14:9e:a9:8e:7c:50:fc:42:f5:
be:e1:b1:e8:11:3a:fa:d0:da:eb:b6:df:2a:37:5f:
fa:c8:fe:3f:5b:b0:c4:a9:ef:7c:17:c7:bd:18:c4:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:E9:85:0D:C6:C7:27:ED:CE:27:01:06:20:AF:7F:C3:D6:89:38
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/xsPphQ3GxyftzicBBiCvf8PWiTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.72.0/24
Signature Algorithm: sha256WithRSAEncryption
da:bd:d7:c2:4e:3a:b1:ac:ef:c9:7e:2e:cb:18:c1:50:30:38:
a1:6c:bb:d3:98:91:12:89:a6:01:e7:b3:38:9f:f8:fc:23:cd:
2b:5b:16:ac:84:6b:48:fb:1f:50:58:19:46:be:c3:c8:35:ca:
3f:67:cc:75:40:af:77:86:91:2f:5e:7e:4a:56:26:f4:8f:f1:
0d:73:1b:3b:53:62:6a:e8:44:de:8d:ae:d8:eb:e0:d0:7b:0e:
43:6e:12:74:bb:ff:6e:77:d1:b5:e7:5b:a4:ed:9b:5d:d1:fb:
fc:c5:16:f5:b6:26:c1:21:6b:37:75:4f:00:24:46:04:46:9b:
fa:f9:a2:89:31:96:08:48:e9:42:d3:97:7c:6b:c0:e3:da:f6:
08:0d:72:bb:93:65:8d:59:c0:3b:af:e8:b9:10:83:69:9c:ce:
2d:2e:7c:31:25:a9:01:03:2e:63:a4:ea:a0:89:7b:5c:65:5b:
8e:1a:7c:fb:7d:b8:15:4f:70:82:a8:e9:cb:76:1b:06:43:c4:
f7:e1:12:c0:e4:50:83:1a:65:b3:b8:9f:b8:63:63:e6:09:f8:
1b:de:59:12:35:65:2c:5a:3a:c5:36:f6:a7:76:78:2e:b2:08:
a9:24:b4:73:fd:e7:fb:7a:0c:29:3d:4a:9d:58:b0:6e:bf:db:
1f:2d:70:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCk6jSIffVre+DcLoNWaKcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjYwOTE1MTE1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmMzZTk4NTBkYzZjNzI3ZWRjZTI3MDEwNjIwYWY3ZmMzZDY4OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+wUG27P0Z4X3jx3fFI3fMRweDOd
5lU07iCAaPwmjDlaPzTf32xF3rS7+SG1tF1Yjj0D7O8teIGEL77Mbmha8wCw5Qn3
EBhoztlI+vgdirzBhdjwRJZiUVxma0b9zlwxN37dbNBsTQHqIXrO3ZCQuPrJjRB8
4TIitYl7GfBjV3MeCVEzxV4SpZvT3sJCiycTfPMD9brjYclMkX3qTK9KLT5IIyvS
W3n9lrkoTxuFXzW0+S85mEJB1G1vc2rG0H0eoyczaSTyJtpU/szjmd+D38mBV9jo
GWUUnqmOfFD8QvW+4bHoETr60Nrrtt8qN1/6yP4/W7DEqe98F8e9GMTpGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbD6YUNxscn7c4nAQYgr3/D1ok4MB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEveHNQcGhRM0d4eWZ0emljQkJpQ3ZmOFBXaVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUndIMA0G
CSqGSIb3DQEBCwUAA4IBAQDavdfCTjqxrO/Jfi7LGMFQMDihbLvTmJESiaYB57M4
n/j8I80rWxashGtI+x9QWBlGvsPINco/Z8x1QK93hpEvXn5KVib0j/ENcxs7U2Jq
6ETeja7Y6+DQew5DbhJ0u/9ud9G151uk7Ztd0fv8xRb1tibBIWs3dU8AJEYERpv6
+aKJMZYISOlC05d8a8Dj2vYIDXK7k2WNWcA7r+i5EINpnM4tLnwxJakBAy5jpOqg
iXtcZVuOGnz7fbgVT3CCqOnLdhsGQ8T34RLA5FCDGmWzuJ+4Y2PmCfgb3lkSNWUs
WjrFNvandngusgipJLRz/ef7egwpPUqdWLBuv9sfLXCF
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:53:35 2026 by rpki-client