Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-XzFZjjk3PnBZhiHN2u30QB0vEE.roa
File: 1-XzFZjjk3PnBZhiHN2u30QB0vEE.roa (raw, json)
Hash identifier: 1/ytGJ+M6CR6p6IjmR4vjfslcqBvL/BgWxpDnYxW6Ho=
Subject key identifier: F9:7C:C5:66:38:E4:DC:F9:C1:66:18:87:37:6B:B7:D1:00:74:BC:41
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019F903314EFA018A5186FA209A2F2998BD7
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-XzFZjjk3PnBZhiHN2u30QB0vEE.roa
Signing time: Thu 23 Jul 2026 18:18:14 +0000
ROA not before: Thu 23 Jul 2026 18:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219157
IP address blocks: 195.123.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:33:14:ef:a0:18:a5:18:6f:a2:09:a2:f2:99:8b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 23 18:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f97cc56638e4dcf9c1661887376bb7d10074bc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:0d:0b:c4:c0:2b:4c:56:f9:2b:f2:a6:cc:
50:f6:d6:46:2e:76:35:90:b4:81:31:12:d6:2c:e4:
22:ca:d3:a4:0b:f1:f1:45:8a:bd:73:3f:e2:94:78:
f8:a4:55:87:10:63:b6:66:5a:8b:f9:ca:a9:3b:53:
db:b8:b7:6c:7b:7b:b8:71:12:a7:3e:a4:98:a1:ca:
a1:50:cb:f8:46:8c:5b:ce:3b:c9:bd:93:81:df:0c:
92:0e:bb:86:ff:74:4c:24:46:5b:9a:dc:be:0f:5f:
3f:9b:0e:b6:1a:90:0a:f3:b0:de:c6:79:48:21:81:
94:02:b7:e0:94:ed:22:10:fd:50:14:62:ee:2b:b9:
be:77:40:66:f2:1f:87:b9:2b:de:16:bf:12:ff:ab:
df:2a:75:01:80:9c:5a:9f:76:34:17:d5:3b:92:47:
b8:04:cc:00:1c:a8:be:f6:44:3f:fc:27:62:7b:e3:
77:35:4c:01:6c:df:ef:9a:fe:54:37:ee:22:c3:b5:
8e:73:20:d8:ed:53:3f:cf:a4:f4:ab:b6:65:30:96:
3e:bc:57:b7:42:ca:6f:e7:5f:6f:61:20:9f:33:1d:
dd:a6:13:52:34:22:60:b4:df:ed:18:fc:4d:ae:48:
9a:48:81:0f:b6:de:98:76:9e:5c:aa:92:2e:cf:a7:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:C5:66:38:E4:DC:F9:C1:66:18:87:37:6B:B7:D1:00:74:BC:41
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-XzFZjjk3PnBZhiHN2u30QB0vEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.188.0/24
Signature Algorithm: sha256WithRSAEncryption
47:68:75:08:8a:30:07:9a:82:23:e2:ea:82:44:6a:8b:61:81:
ad:c2:a2:5c:6b:e1:1a:1f:bd:91:1c:e3:89:51:09:b8:d1:3d:
25:a6:1d:3b:26:37:42:03:2d:1b:60:34:5c:15:1c:b2:2d:48:
e8:5c:88:d4:1d:26:fd:b1:a5:62:c3:b9:38:b2:6b:ad:a2:e3:
7b:c2:63:41:18:b7:8a:be:e1:21:37:7f:77:7f:68:d9:23:a1:
23:09:59:23:64:e4:27:c1:1f:f6:8a:73:c9:1a:0a:43:47:f8:
09:1a:89:61:1a:37:50:fd:10:d1:92:3c:46:f1:a3:f4:6c:b4:
61:f7:f4:0e:aa:fe:6b:ca:36:50:ee:80:3e:7f:4e:d1:57:32:
83:61:28:a0:01:fb:f1:ac:af:58:e6:4c:28:06:aa:ae:61:ba:
2c:18:2a:1b:e7:8e:ef:52:8d:f3:cc:36:39:e7:38:26:9b:36:
a4:4c:34:a2:b0:61:4f:b9:ed:b1:38:da:00:95:02:80:07:2a:
99:48:4c:21:44:69:b7:c8:07:fe:6c:ae:9f:29:73:7c:52:b3:
67:77:17:4d:10:9f:a8:e4:c5:05:50:f5:f5:78:76:63:f7:d8:
e3:78:f9:94:2a:91:d3:f3:11:52:0e:c0:8f:fb:96:3b:dd:3a:
04:40:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:07:36 2026 by rpki-client