Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XU10Up54NlfJZXdbhWGu2X7Erak.roa
File: XU10Up54NlfJZXdbhWGu2X7Erak.roa (raw, json)
Hash identifier: fMmpb+a82SwkdG7LTk305x5yGs1biBm+7L5zLHvml9E=
Subject key identifier: 5D:4D:74:52:9E:78:36:57:C9:65:77:5B:85:61:AE:D9:7E:C4:AD:A9
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01A0A050DA22B1363935986345EAB1EE094F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XU10Up54NlfJZXdbhWGu2X7Erak.roa
Signing time: Mon 14 Sep 2026 14:27:28 +0000
ROA not before: Mon 14 Sep 2026 14:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218667
IP address blocks: 2a0c:b641:820::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:50:da:22:b1:36:39:35:98:63:45:ea:b1:ee:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 14 14:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d4d74529e783657c965775b8561aed97ec4ada9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:c4:44:55:b3:73:f4:b6:39:56:81:89:a7:
b2:c3:6e:f8:6f:a4:6f:dd:71:de:07:ff:e0:b5:06:
bd:d6:8a:f7:4a:73:b7:eb:32:87:8a:25:ca:c8:ed:
20:a9:3c:c3:f5:2d:66:93:36:4f:72:ac:91:28:49:
13:19:f2:fc:9d:83:3f:5f:46:ee:e4:c2:99:69:00:
d9:e3:36:c5:e8:5b:ff:16:4a:31:27:5f:ba:4f:9a:
0a:14:7b:f3:e3:d5:0a:df:6e:dd:04:88:03:59:86:
98:0e:52:74:e8:29:39:ee:4a:6d:e8:fa:93:d5:50:
85:9c:04:b3:45:1e:00:8d:44:c1:13:f0:46:9b:66:
11:54:89:b2:fc:01:19:94:69:e2:6f:c7:7f:a6:77:
a0:fa:b8:ea:07:0a:e8:9d:99:37:18:47:39:26:ce:
8e:8e:f7:3b:56:22:41:d6:d0:7b:6f:de:bb:4d:f5:
ba:04:db:bd:0c:35:6c:0c:82:76:ff:95:39:00:a8:
dd:eb:79:69:e4:ae:b9:4f:a3:ae:77:58:c4:41:82:
c3:7f:f2:00:5d:b5:b4:64:ba:d8:ac:de:cd:b1:c9:
f9:fb:96:05:ef:82:33:43:8f:a2:6f:9a:46:8b:7d:
88:cf:82:6f:e0:01:33:aa:b2:61:be:58:17:a9:d8:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:74:52:9E:78:36:57:C9:65:77:5B:85:61:AE:D9:7E:C4:AD:A9
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XU10Up54NlfJZXdbhWGu2X7Erak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:820::/44
Signature Algorithm: sha256WithRSAEncryption
70:a5:63:04:ce:31:a1:4d:13:b9:6a:21:05:51:d4:aa:8a:6e:
6e:5f:bd:17:c1:d8:6b:72:2b:72:11:ad:a3:df:01:98:2f:3e:
4a:3e:0c:15:d0:30:0e:86:4c:7a:88:de:83:7c:ce:29:e5:24:
2f:9b:b8:6e:f3:6d:7c:89:58:df:18:35:a2:03:07:22:3c:e3:
34:86:21:61:39:ff:c5:08:8d:8f:7b:42:66:fc:31:2a:0e:de:
a7:d4:7e:5b:86:60:c8:d8:1f:d4:b6:92:9e:83:50:23:b5:92:
22:88:13:75:6e:b4:4a:4b:28:91:9e:8f:0e:f7:99:fa:90:91:
1c:21:d9:3e:77:62:f3:fa:6a:e5:2d:d6:c7:c4:06:63:55:92:
e7:6c:c5:c5:70:52:67:1f:6f:71:9f:2c:25:52:18:2c:a0:9c:
97:d0:fe:01:7b:8e:b1:64:9d:66:2c:40:92:d8:8a:ec:78:bb:
1f:36:6b:ef:79:f2:aa:17:c9:f8:b3:f3:32:2d:3e:db:65:d0:
bd:77:b1:99:49:61:12:fd:24:d6:90:f5:48:d2:a8:d1:a1:20:
7e:90:e0:56:15:05:5f:40:45:f0:07:fb:69:e1:e3:ff:2d:22:
76:c7:a9:ac:e4:06:21:15:d4:18:48:cb:70:79:d3:e2:93:4e:
57:35:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:05:22 2026 by rpki-client