Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa
File: rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa (raw, json)
Hash identifier: JbhnUk6+5HxtHO4sN+DED43HcgG3ryZMySqa9ROUaUU=
Subject key identifier: AE:9C:52:C7:E2:AA:E5:9D:74:C9:46:18:AF:78:E5:63:50:93:8D:56
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 019C7473D0700127BFF450A7E405F1A7D734
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa
Signing time: Thu 19 Feb 2026 05:51:12 +0000
ROA not before: Thu 19 Feb 2026 05:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215655
IP address blocks: 45.86.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:73:d0:70:01:27:bf:f4:50:a7:e4:05:f1:a7:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Feb 19 05:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae9c52c7e2aae59d74c94618af78e56350938d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:8a:d5:56:1c:bf:64:61:07:59:1e:06:81:
b7:d1:f5:6b:1f:07:ea:2c:b2:8b:05:64:50:b5:da:
d0:66:cc:e0:11:20:e9:a3:8a:54:6a:d4:7d:47:7e:
68:cf:c7:8d:1c:9a:28:8a:56:f1:56:39:35:c2:9c:
e4:71:84:7e:3a:02:82:4a:d3:95:61:66:ef:69:97:
fb:ac:11:8e:42:82:99:64:a8:71:e7:ee:6e:10:ae:
47:8c:50:1f:bc:c4:07:4d:ee:4b:82:3c:3f:3a:52:
ec:22:78:07:50:fc:72:da:fc:85:c6:2a:c0:9a:27:
ad:ee:1b:90:c9:3a:7d:bb:c1:27:1f:29:06:28:e8:
aa:9b:ae:51:f0:ca:af:a7:16:08:8a:2f:a6:5f:5b:
1f:3f:5d:99:1e:4f:e4:a1:0f:c1:6e:ca:71:3f:54:
e6:5e:09:dd:d6:eb:4f:f4:83:9f:7e:b9:76:45:0c:
5c:1e:6d:6e:d8:60:c8:ca:58:db:68:71:c3:f8:4a:
ce:d4:0f:2a:1e:6e:67:72:fc:a6:19:1c:c3:5b:73:
bc:f1:e0:b9:9a:42:f3:fd:ce:e7:37:75:64:c0:b5:
df:2e:76:a4:25:d0:af:52:19:fb:a3:b5:56:2a:eb:
49:9e:f6:26:dd:c3:87:4f:be:a4:c5:d6:f4:c7:7d:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:52:C7:E2:AA:E5:9D:74:C9:46:18:AF:78:E5:63:50:93:8D:56
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.5.0/24
Signature Algorithm: sha256WithRSAEncryption
52:dc:05:a0:ff:ac:97:2e:23:68:ca:b8:18:50:57:b9:81:a8:
0e:e8:ac:f3:1a:55:e0:34:5c:ba:82:ab:48:89:d2:1c:eb:37:
84:b4:05:ac:ea:ad:1f:9d:6e:83:81:37:3b:57:f1:61:01:08:
af:cb:85:3c:9c:26:2c:07:76:cc:3b:a0:45:96:88:fa:62:00:
bb:7e:99:4f:b8:1f:0e:ed:28:e9:cc:0f:24:35:a1:c4:09:ce:
0c:85:91:f9:1b:d1:b0:d0:3b:65:0e:61:75:32:96:2c:bf:a7:
c8:7a:bd:0a:5a:49:38:b6:5c:2b:f3:4e:b0:f1:29:5c:fb:9b:
d0:ec:d0:56:ab:3c:6f:5a:db:ff:1b:4b:07:66:20:0a:bb:50:
20:60:09:f6:62:70:9b:ee:56:2e:4d:05:db:e0:cb:85:d7:47:
42:c9:b1:5d:62:31:30:83:92:31:ef:b5:a2:c2:2d:4e:93:ee:
47:c0:8f:f0:c6:07:1e:a8:43:ef:ea:29:4f:df:5e:7b:64:16:
4d:f9:35:63:41:c0:fe:58:bc:92:45:0b:a9:ce:d0:8e:ee:fa:
ab:02:7c:f4:1e:43:13:86:dc:25:e2:a5:5d:68:8b:a0:07:71:
ab:a5:9b:fd:5b:8f:d3:8f:77:af:40:fe:0d:fd:83:ba:fa:63:
4c:57:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:59 2026 by rpki-client