Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xgl4ZSLDXTY2mokNSzt4aDxpTPo.roa
File: Xgl4ZSLDXTY2mokNSzt4aDxpTPo.roa (raw, json)
Hash identifier: 6ymRKgkJHd8Lttppv+zJxNIWzArt9XGr9UDc7xRGMz4=
Subject key identifier: 5E:09:78:65:22:C3:5D:36:36:9A:89:0D:4B:3B:78:68:3C:69:4C:FA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C9FD9F5E77FD2A2E9FA4A0D8D309F80B4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xgl4ZSLDXTY2mokNSzt4aDxpTPo.roa
Signing time: Fri 27 Feb 2026 16:06:27 +0000
ROA not before: Fri 27 Feb 2026 16:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44592
IP address blocks: 5.175.224.0/24 maxlen: 24
77.90.17.0/24 maxlen: 24
2a02:2fc0:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:d9:f5:e7:7f:d2:a2:e9:fa:4a:0d:8d:30:9f:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 16:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e09786522c35d36369a890d4b3b78683c694cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b1:73:e4:cf:b3:1d:08:7a:ba:40:75:98:d9:
05:44:5c:d9:e1:0f:02:63:86:c0:86:11:d4:5e:2b:
aa:2a:35:5e:a7:67:39:b1:9a:ae:93:6a:b6:c9:eb:
40:4f:8c:29:8a:14:b9:f5:7d:d1:e9:09:dd:55:cd:
43:56:47:46:85:16:34:77:74:d9:b4:43:0f:9b:d3:
10:8b:10:f2:3b:3f:2e:2f:53:bf:40:d4:51:64:98:
98:52:fe:f5:f2:91:c5:8d:31:89:21:fe:99:37:4e:
a8:ca:ab:b4:60:29:14:7b:d3:0c:7c:2e:21:e1:9c:
59:0b:70:24:70:62:81:ac:03:cc:e0:b4:ae:08:6d:
76:62:6a:28:67:5b:ab:49:25:1e:6a:a8:5d:ac:71:
4a:86:33:bc:6b:e8:4d:26:a7:09:41:c0:ee:2a:18:
ad:34:6e:ee:68:26:7c:ce:ee:c4:ff:2c:e0:92:c2:
a9:aa:82:60:35:fa:67:75:46:8b:dc:54:c4:12:32:
dd:f2:c1:42:cd:f7:94:76:75:23:8b:1c:4a:40:19:
97:60:e0:b6:c1:77:b5:d0:e9:62:f2:69:2b:d6:09:
b6:3c:fb:ee:a9:4d:b8:a4:69:7d:a9:4e:05:1e:02:
93:d8:2c:f0:03:13:9d:72:15:ac:29:07:61:45:87:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:09:78:65:22:C3:5D:36:36:9A:89:0D:4B:3B:78:68:3C:69:4C:FA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xgl4ZSLDXTY2mokNSzt4aDxpTPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.224.0/24
77.90.17.0/24
IPv6:
2a02:2fc0:1a::/48
Signature Algorithm: sha256WithRSAEncryption
39:73:bb:5d:3f:8d:2b:57:fa:1e:85:0d:57:07:2c:e0:d1:7e:
21:ca:2c:e1:fd:3a:7a:8e:56:b9:c7:9a:e1:25:f5:6b:4a:2c:
89:75:83:08:96:ae:84:ba:77:50:b2:b8:76:e8:33:9c:79:5f:
08:7b:38:b0:2f:e1:4b:5a:cb:61:20:ff:33:47:ad:66:38:d7:
3f:3f:f6:e2:a6:88:41:ef:1e:db:de:47:74:d2:c6:5c:9a:a8:
f9:88:8c:86:95:28:b7:dc:11:1a:c2:7e:37:6e:74:12:b7:3d:
eb:7a:81:86:76:21:3c:88:ca:77:8d:68:7a:60:4f:22:32:99:
d1:38:aa:46:a8:5a:4c:9a:40:85:6a:e8:55:8c:c7:a8:18:a4:
d5:b5:13:fa:98:aa:54:1c:39:a3:58:57:80:87:70:db:dc:2b:
30:df:ac:cc:89:b2:4d:d2:ca:b8:a8:e2:8b:64:10:ad:26:51:
5a:04:2e:56:09:af:03:01:e1:ea:ba:6c:10:f2:79:c9:05:d0:
46:80:3a:5a:a7:d1:11:14:e8:71:d8:af:39:5f:59:db:d5:4b:
a9:70:32:d8:00:f6:b9:a3:33:36:3c:a3:88:27:a4:ab:22:94:
b7:bb:1d:eb:2d:19:dc:f2:7e:c2:30:2b:ab:0b:42:45:10:36:
c1:c1:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:51 2026 by rpki-client