Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa
File: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (raw, json)
Hash identifier: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=
Subject key identifier: 5E:35:95:82:4A:6A:81:32:44:5B:74:09:7B:F7:23:FE:0C:1F:D6:19
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019F35DBD8D1FB8F88E1891302F8142D9FE3
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa
Signing time: Mon 06 Jul 2026 05:17:08 +0000
ROA not before: Mon 06 Jul 2026 05:17:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210022
IP address blocks: 188.72.1.0/24 maxlen: 24
188.72.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:db:d8:d1:fb:8f:88:e1:89:13:02:f8:14:2d:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jul 6 05:17:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e3595824a6a8132445b74097bf723fe0c1fd619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:97:f0:d1:18:92:35:d9:c5:4a:b5:8f:75:
f3:73:fe:ac:56:21:fd:ea:93:50:b0:35:18:49:2c:
1c:65:08:75:0f:78:a4:42:fe:69:46:a7:5a:b4:da:
90:62:d4:48:53:06:87:71:d7:cf:09:f4:62:59:a9:
f1:a6:bd:2b:e1:80:00:d1:34:a3:06:0d:72:a6:6c:
63:be:1c:5e:b0:6e:aa:35:71:e8:b6:c5:59:09:6a:
96:e4:a7:5d:9d:9e:ed:e9:77:73:e9:1e:80:0c:0d:
4e:c9:e3:a5:c7:17:6e:ad:81:f4:18:72:e2:19:20:
e6:79:86:8e:83:f9:80:74:4a:0f:75:b6:dd:41:25:
c7:dd:57:6c:5f:3c:0c:20:7f:66:11:0e:a2:41:f9:
6f:06:18:fa:bc:ac:b5:03:e3:f3:ea:c2:c4:87:50:
9f:53:a7:87:67:3c:6e:00:8e:65:27:a6:42:34:f6:
b4:20:c8:4e:fa:99:4d:05:ee:1c:34:2d:70:ef:48:
b5:5b:79:a0:c4:b9:fb:0b:ee:40:d3:0f:c0:2a:48:
39:c4:8a:e7:85:7d:cf:f7:a5:9c:81:e4:9d:68:9d:
65:01:43:fa:bf:d5:62:09:6b:18:33:1f:fb:78:7d:
61:d7:07:c6:0a:5c:1b:54:cf:9d:04:1b:21:d3:f3:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:95:82:4A:6A:81:32:44:5B:74:09:7B:F7:23:FE:0C:1F:D6:19
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.1.0-188.72.2.255
Signature Algorithm: sha256WithRSAEncryption
ce:2e:35:8b:15:1a:e9:57:c3:b7:cb:98:cf:cf:06:50:94:03:
e6:a0:d3:15:51:7a:b2:b6:ec:1c:5a:7d:4e:f9:03:78:91:4b:
5b:52:bd:d1:4d:bc:be:c2:44:11:61:dd:ac:27:d7:ba:5b:86:
4c:5c:e5:c8:af:e0:0c:4b:59:87:8f:da:06:45:cc:00:bc:10:
cc:47:ab:ab:37:d7:c2:fa:df:b5:5c:65:e5:e8:b2:e7:c4:bb:
4d:a4:e5:f5:58:09:56:63:36:21:23:a8:38:ed:e6:d5:e6:b0:
36:fe:b1:d8:7d:0d:a3:5f:7f:83:b2:f7:3a:e0:d4:1a:71:ae:
e1:7b:cc:71:b1:86:24:dc:aa:97:e7:ed:0f:5f:d7:2a:2e:16:
a7:97:e4:13:c9:ce:c2:bb:89:a8:82:b7:dc:de:7e:99:53:1f:
2b:37:f5:4e:d4:fc:ac:90:7a:17:e2:48:06:c3:21:b3:5f:ad:
cb:f8:6f:a6:c4:e9:2f:d2:18:dd:ae:99:2e:88:f8:85:db:1f:
08:d3:92:a6:a5:f0:47:ca:7f:d9:51:75:d9:6f:13:2a:49:db:
3f:91:e3:0c:b9:90:29:ea:2b:cc:fa:fd:43:e3:8f:64:54:68:
fa:bb:4d:cb:ae:c6:d4:78:7b:8b:db:58:b2:8a:bc:d2:18:c6:
ca:43:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:54 2026 by rpki-client