Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/xg9EKgVJs0Fjrqc4cHnj6n-3KG0.roa
File: xg9EKgVJs0Fjrqc4cHnj6n-3KG0.roa (raw, json)
Hash identifier: v1AWji1Dtq0zt7qjRgX8kZkxAXLvPA+uzLa8g7AutO0=
Subject key identifier: C6:0F:44:2A:05:49:B3:41:63:AE:A7:38:70:79:E3:EA:7F:B7:28:6D
Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial: 019F64F98B89C705E8CEDC52BA5E0E04BD4C
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/xg9EKgVJs0Fjrqc4cHnj6n-3KG0.roa
Signing time: Wed 15 Jul 2026 08:51:43 +0000
ROA not before: Wed 15 Jul 2026 08:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205207
IP address blocks: 77.237.81.0/24 maxlen: 24
92.242.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:f9:8b:89:c7:05:e8:ce:dc:52:ba:5e:0e:04:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Validity
Not Before: Jul 15 08:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c60f442a0549b34163aea7387079e3ea7fb7286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:8c:1e:25:d1:87:3d:d5:fa:4a:91:85:1c:
33:cf:0f:66:3e:e3:64:f4:0c:8e:4f:a9:80:1f:02:
c6:b8:34:ac:24:7c:d1:da:0f:4f:ff:fc:72:ff:94:
c3:3b:76:5f:81:5a:b5:0e:8c:56:df:d5:2d:db:7f:
86:55:36:cd:be:55:c2:47:bb:a9:5d:27:c0:98:f3:
80:35:fa:58:d6:a4:12:26:35:df:8b:57:eb:25:66:
1c:49:6e:64:36:d1:0e:d1:98:0d:0e:2a:5c:98:25:
12:63:5d:3c:0c:25:03:22:3d:79:25:07:0a:ba:d2:
71:5e:fc:64:77:0c:eb:99:1a:1c:46:db:7e:2c:1b:
cd:7a:7a:ae:c1:4b:5c:d7:d9:21:7d:59:4f:e0:a9:
22:d4:10:61:93:6b:72:31:97:81:d7:3c:5a:1f:6a:
37:8f:c6:65:e0:05:2e:98:f7:e6:7a:db:02:e1:e3:
54:ab:10:f1:74:5d:9d:13:c6:e2:6f:e1:00:c9:be:
bd:f0:ab:fb:f1:83:db:8b:83:89:7a:55:3b:f7:99:
bc:56:31:3f:2b:5b:4a:86:c3:c7:92:71:d5:a6:3e:
4f:16:23:ee:4e:13:24:b4:0d:0a:a3:94:39:6a:18:
1e:f2:0d:bd:a3:68:26:6b:32:3d:99:5c:42:5d:fa:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:44:2A:05:49:B3:41:63:AE:A7:38:70:79:E3:EA:7F:B7:28:6D
X509v3 Authority Key Identifier:
keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/xg9EKgVJs0Fjrqc4cHnj6n-3KG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.81.0/24
92.242.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:87:b7:32:65:ec:13:46:98:67:e4:55:78:68:7c:23:8c:12:
d1:a8:be:ec:a3:3e:96:13:f7:f7:99:76:38:01:fe:53:99:12:
f9:60:4f:75:bc:db:44:e8:cf:a0:25:e3:03:e6:07:d2:27:8a:
37:9a:75:40:fc:47:c5:7f:08:f0:53:24:ee:51:72:bd:25:ea:
8e:b6:5c:ac:f9:a3:7e:e5:e3:6c:ed:c2:ea:b6:cb:b0:39:89:
6e:88:7a:d5:76:98:07:4f:64:39:2d:8c:d0:e2:c5:a6:32:d9:
f5:bd:60:2e:4e:00:28:0a:2e:31:00:c9:40:74:4c:36:e8:00:
c4:c3:1a:19:3d:f4:35:91:53:ff:ec:6c:27:cd:a8:33:e8:50:
e5:3b:15:72:5a:2c:70:9c:f3:5d:0e:50:e4:2b:a1:93:ba:b5:
7c:74:a3:ad:d1:12:18:01:61:7d:a4:28:33:a4:aa:7e:4b:c9:
8f:bf:18:4e:37:de:7f:90:ce:90:ab:2e:19:e2:7b:d7:b7:3f:
09:63:44:f8:90:5d:ae:65:d7:66:c3:da:97:b8:09:84:66:e1:
80:3d:a9:57:ad:ee:23:75:38:62:17:9b:12:e1:30:96:31:af:
72:41:67:a0:98:0a:a4:99:99:54:28:12:be:5a:34:0d:ea:2f:
19:cb:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:11:03 2026 by rpki-client