Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/xa5mNxjnEXhMEBCuJ9F9OKU0x5k.roa
File: xa5mNxjnEXhMEBCuJ9F9OKU0x5k.roa (raw, json)
Hash identifier: cwK0iR42E3FrGLL4IaVUQLUTweJIpxrxUB3kIXhU5z8=
Subject key identifier: C5:AE:66:37:18:E7:11:78:4C:10:10:AE:27:D1:7D:38:A5:34:C7:99
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF2580C6D1BC7F46B7295BDE58F749D
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/xa5mNxjnEXhMEBCuJ9F9OKU0x5k.roa
Signing time: Thu 10 Sep 2026 20:11:27 +0000
ROA not before: Thu 10 Sep 2026 20:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f2:58:0c:6d:1b:c7:f4:6b:72:95:bd:e5:8f:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5ae663718e711784c1010ae27d17d38a534c799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:23:28:38:88:5a:20:a4:47:58:77:4d:9e:
f3:21:b0:03:e8:82:de:e1:77:0f:54:c9:ef:5a:f2:
9e:5e:b0:e9:b5:69:ae:72:e8:ad:20:23:ca:e8:5f:
6b:c3:10:a4:ca:60:ea:6c:a6:24:fc:bf:76:c8:f8:
76:fb:35:a8:9c:ce:09:5d:83:61:3a:45:c8:49:7f:
90:99:43:23:55:12:1e:67:f3:a4:8e:65:f1:0f:91:
34:ea:dd:2a:6d:06:19:a3:ff:28:35:bd:72:c6:ed:
48:37:01:08:3e:e2:06:18:b2:64:32:34:47:8c:61:
a8:0a:d4:46:c2:ee:63:5a:9f:bd:8e:42:70:7f:49:
b3:14:d9:d3:9d:8e:3b:00:ba:90:3f:66:a2:ff:d2:
fa:3a:07:ba:dd:d8:88:35:5d:68:d1:fe:cf:c0:5f:
09:58:ba:4d:5a:6c:e0:e3:89:28:f9:dc:4c:a0:d5:
61:c9:bd:0b:19:6c:fd:a2:0c:12:fd:c7:31:5e:43:
3a:9c:47:45:0e:75:27:77:f5:c9:a7:42:e3:ec:c4:
62:ed:ed:c4:9e:4a:6e:22:48:8e:f2:e6:05:e0:05:
fb:e6:ed:04:dd:b2:8b:ff:a7:6d:76:76:8c:af:78:
eb:1e:25:49:48:84:82:0f:74:71:3c:56:7a:9c:65:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:66:37:18:E7:11:78:4C:10:10:AE:27:D1:7D:38:A5:34:C7:99
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/xa5mNxjnEXhMEBCuJ9F9OKU0x5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
21:eb:f9:8f:45:75:bc:ca:fd:69:d3:d9:f5:0f:f3:c4:23:10:
9c:fc:20:46:da:4e:3f:4e:04:60:c6:5e:fa:20:cf:4f:31:cf:
51:05:52:da:64:74:91:d0:d9:0a:a5:09:7b:44:fe:42:a8:34:
51:53:f2:36:9b:37:f6:81:81:ff:f6:48:62:d6:b6:81:d6:0c:
27:40:11:46:ac:1d:79:c6:d0:5b:b4:65:5f:bc:0a:10:f2:67:
28:da:02:54:61:ca:e1:72:41:67:b2:15:59:ba:ef:50:07:e1:
46:7c:e2:85:17:b6:c5:ab:72:5d:80:2d:ce:cc:8f:10:ba:e4:
82:28:c2:ff:e0:53:b1:42:9c:ec:60:c6:51:7e:03:36:af:c3:
08:e7:b1:d3:d3:f1:01:3b:cb:4e:fb:f0:4d:e6:64:7b:45:24:
dc:4f:8a:ba:35:e8:8d:c1:69:f9:74:08:ad:ca:07:8a:7e:7b:
e5:8e:62:60:f2:a1:47:9a:02:72:b0:c8:6f:27:73:72:9c:d4:
e9:54:3a:60:b5:8a:e0:3c:60:44:1c:59:4c:84:ef:d2:21:6d:
04:40:ee:0a:21:39:24:bf:a5:b0:eb:7a:44:c8:98:1f:a7:0f:
41:9f:35:79:d7:f3:27:5c:b7:6a:64:f5:cd:76:95:f7:3d:06:
64:73:ba:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCM8lgMbRvH9Gtylb3lj3SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwOTEwMjAxMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWFlNjYzNzE4ZTcxMTc4NGMxMDEwYWUyN2QxN2QzOGE1MzRjNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOYjKDiIWiCkR1h3TZ7zIbAD6ILe
4XcPVMnvWvKeXrDptWmucuitICPK6F9rwxCkymDqbKYk/L92yPh2+zWonM4JXYNh
OkXISX+QmUMjVRIeZ/OkjmXxD5E06t0qbQYZo/8oNb1yxu1INwEIPuIGGLJkMjRH
jGGoCtRGwu5jWp+9jkJwf0mzFNnTnY47ALqQP2ai/9L6Oge63diINV1o0f7PwF8J
WLpNWmzg44ko+dxMoNVhyb0LGWz9ogwS/ccxXkM6nEdFDnUnd/XJp0Lj7MRi7e3E
nkpuIkiO8uYF4AX75u0E3bKL/6dtdnaMr3jrHiVJSISCD3RxPFZ6nGWMKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMWuZjcY5xF4TBAQrifRfTilNMeZMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEveGE1bU54am5FWGhNRUJDdUo5RjlPS1UweDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiYzMA0G
CSqGSIb3DQEBCwUAA4IBAQAh6/mPRXW8yv1p09n1D/PEIxCc/CBG2k4/TgRgxl76
IM9PMc9RBVLaZHSR0NkKpQl7RP5CqDRRU/I2mzf2gYH/9khi1raB1gwnQBFGrB15
xtBbtGVfvAoQ8mco2gJUYcrhckFnshVZuu9QB+FGfOKFF7bFq3JdgC3OzI8QuuSC
KML/4FOxQpzsYMZRfgM2r8MI57HT0/EBO8tO+/BN5mR7RSTcT4q6NeiNwWn5dAit
ygeKfnvljmJg8qFHmgJysMhvJ3NynNTpVDpgtYrgPGBEHFlMhO/SIW0EQO4KITkk
v6Ww63pEyJgfpw9BnzV51/MnXLdqZPXNdpX3PQZkc7rn
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:42 2026 by rpki-client