Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XvIw3NX3oZeAIXEtZUh5I93ixoM.roa
File: XvIw3NX3oZeAIXEtZUh5I93ixoM.roa (raw, json)
Hash identifier: rN0xDfAAX2JYlO2shCb8O4lPDvcsKo7yyxKHdyE5AWU=
Subject key identifier: 5E:F2:30:DC:D5:F7:A1:97:80:21:71:2D:65:48:79:23:DD:E2:C6:83
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EBB6F91C4661D7E988DCB7DB49F39FD4D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XvIw3NX3oZeAIXEtZUh5I93ixoM.roa
Signing time: Fri 12 Jun 2026 10:45:11 +0000
ROA not before: Fri 12 Jun 2026 10:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56322
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:6f:91:c4:66:1d:7e:98:8d:cb:7d:b4:9f:39:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 12 10:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ef230dcd5f7a1978021712d65487923dde2c683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:e2:45:50:d3:98:65:14:60:6e:2b:47:55:
00:e7:cd:4a:9a:b2:70:b4:4c:93:3c:eb:4c:f4:7a:
9e:ae:08:01:be:a3:11:96:bf:f8:69:af:0b:73:60:
97:57:82:2d:92:fb:98:92:b8:81:88:ca:86:30:f2:
21:1b:c6:69:dc:6c:7b:20:5f:82:ad:4d:72:47:16:
d4:71:d7:c2:3f:68:97:5f:b9:8e:45:fd:5a:68:22:
c8:85:1a:23:23:d3:6e:36:2a:59:42:85:a0:6a:a0:
21:4f:ae:95:3c:7a:bf:5a:11:48:7f:c1:50:6d:23:
30:d4:af:6e:06:5b:fa:37:cb:f5:ab:d2:aa:a9:26:
6b:c3:bc:a2:4e:28:d4:bc:58:9e:d8:aa:1c:5b:c1:
23:a2:ae:40:a8:07:44:24:01:a2:e2:d9:83:d8:ec:
92:e9:fd:aa:59:3e:8d:1b:39:8f:d5:3e:a7:f8:80:
70:fb:40:97:c0:f8:c1:08:f9:fb:c4:87:6b:1b:7b:
10:ad:9b:93:d7:93:50:2f:0a:ad:b1:02:f7:79:8b:
72:e0:5b:95:37:50:e8:f6:23:ef:c3:6e:fc:36:ca:
f7:ef:a0:e3:8a:b3:89:eb:26:a1:76:9b:64:0b:63:
50:ed:45:23:0e:29:eb:fc:d8:24:13:9f:6a:77:f2:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F2:30:DC:D5:F7:A1:97:80:21:71:2D:65:48:79:23:DD:E2:C6:83
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XvIw3NX3oZeAIXEtZUh5I93ixoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:22:4a:03:51:10:c7:5b:3d:42:ad:f5:4e:c4:b7:55:38:4b:
20:ce:1e:80:f6:8d:ea:46:2a:c5:a7:19:10:e4:50:65:ee:27:
99:3f:6a:d5:e0:56:3d:33:44:45:da:8e:36:b2:51:d2:89:87:
7d:7f:c2:47:80:e2:dd:60:fc:37:c1:00:0d:e3:90:55:40:27:
6e:ff:be:6a:94:b0:4a:8a:93:a3:3d:12:76:30:96:af:d4:f1:
4d:33:85:2d:76:31:84:f7:57:e0:d8:e2:48:a9:b1:94:52:16:
ff:9b:af:65:53:c7:cb:a8:16:15:ff:05:d1:18:1f:bb:b3:66:
95:14:f6:46:b2:1d:75:db:71:d1:7e:96:d2:80:f3:77:11:f3:
f9:e3:4e:67:9c:e4:0a:8a:e1:e6:05:f9:74:3b:6a:80:02:41:
ef:ea:b3:20:1e:96:9f:55:80:c9:38:92:b0:0f:ed:d3:05:53:
cb:f0:aa:1c:90:f4:ab:45:bf:98:29:6f:f6:be:a5:55:55:ca:
87:c4:86:9c:71:97:da:d1:2c:64:f9:9b:f3:a7:43:72:df:c7:
c5:d3:7c:c4:fc:df:c0:49:4f:c4:43:7f:69:00:b4:7d:cb:5d:
10:54:ad:b8:25:41:54:03:8d:46:4f:37:82:8d:a3:fc:93:93:
ac:47:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:51 2026 by rpki-client