Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/XxU53iskn-ghQrysuCl7QV5EIVs.roa
File: XxU53iskn-ghQrysuCl7QV5EIVs.roa (raw, json)
Hash identifier: oqxXXhRu60oNNFxZKXkIA3Jy2yC1dlqRqHIbYUOutog=
Subject key identifier: 5F:15:39:DE:2B:24:9F:E8:21:42:BC:AC:B8:29:7B:41:5E:44:21:5B
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 01A0C62C4CA0C5918136F5A6BDA9907B09C2
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/XxU53iskn-ghQrysuCl7QV5EIVs.roa
Signing time: Mon 21 Sep 2026 22:53:07 +0000
ROA not before: Mon 21 Sep 2026 22:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43766
IP address blocks: 185.216.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:2c:4c:a0:c5:91:81:36:f5:a6:bd:a9:90:7b:09:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Sep 21 22:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f1539de2b249fe82142bcacb8297b415e44215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:d3:06:51:cb:d0:ba:94:90:ce:b4:79:47:
5b:0a:63:01:48:5c:5e:6f:25:40:00:75:9c:71:cc:
47:1f:00:e4:d6:d1:8f:2b:3b:4b:28:c3:db:2d:43:
6c:0f:5c:66:93:dd:85:a9:ff:26:e6:ca:9d:89:a5:
01:2a:b3:54:02:ba:a7:7e:9c:96:53:aa:43:90:54:
5d:44:a3:24:8a:bb:1c:91:5e:66:0f:be:3a:8e:25:
42:8f:a8:f6:14:03:1d:d0:d0:3c:a9:72:86:c6:42:
71:06:bc:39:e0:f5:59:26:8f:8d:ce:8f:23:13:29:
94:b9:3f:76:39:04:ea:11:22:f8:a3:c9:e9:7b:03:
f6:ad:f0:2f:71:07:92:72:b4:54:3d:c8:51:41:b6:
0a:25:9c:bb:42:df:58:1f:da:a7:12:76:9f:2c:30:
5a:69:51:6e:fc:f7:4a:2b:50:28:64:38:b8:b0:ee:
52:64:43:f0:a9:3c:55:62:96:80:9f:e8:76:67:c0:
cc:7f:98:4f:87:93:b1:e1:62:da:79:7b:17:ad:75:
fb:5b:89:ff:02:c9:be:df:88:c5:12:df:36:6a:ee:
a2:a2:ac:07:64:6a:ea:c3:25:91:99:1c:18:59:fc:
a7:0a:51:0d:43:2a:e1:e3:a8:82:f0:4a:5d:4f:09:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:15:39:DE:2B:24:9F:E8:21:42:BC:AC:B8:29:7B:41:5E:44:21:5B
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/XxU53iskn-ghQrysuCl7QV5EIVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.40.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8c:5a:45:2a:cc:b7:b8:7c:2d:4d:7a:ea:a1:08:7b:92:1a:
62:d9:11:1d:e0:93:b7:d3:8d:c0:52:77:f9:a4:08:60:28:37:
f4:04:35:1c:f2:c5:0a:29:bf:c1:2e:0a:3a:cf:22:71:54:53:
35:d2:77:68:ac:33:b0:37:35:f6:33:1c:2d:89:86:fd:0a:80:
55:77:c2:cf:22:ac:7d:b1:39:87:38:ad:f9:28:f5:c3:81:a9:
ec:68:32:aa:52:b9:37:ff:b3:b0:04:b3:50:93:ff:6d:12:f6:
02:d4:60:13:d6:4c:ae:16:79:bd:e5:c1:2c:ba:16:d1:49:79:
21:e3:9d:ad:62:34:ba:07:89:1c:0f:36:43:f0:13:17:e4:90:
45:72:a7:1b:ac:c7:bd:ba:6a:00:10:eb:4e:12:c4:a5:6e:27:
bc:f6:d8:64:20:b1:6a:dd:7f:97:35:35:3f:fa:85:90:d1:cc:
f8:09:e2:51:db:52:bb:ca:a0:fc:a1:f3:c1:ca:69:af:a0:09:
e4:fb:23:25:35:7c:42:cc:56:27:7c:81:4a:b0:c6:8e:15:a7:
b9:49:97:4c:82:6f:c4:44:6d:a4:5f:68:3d:b5:38:fb:e5:92:
a1:d5:99:1d:a0:be:a4:1c:22:eb:e8:1d:28:43:89:c4:56:a9:
03:8f:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:59:49 2026 by rpki-client