Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/XrDTmDzs64c5qX1gh7L5krKuVkE.roa
File: XrDTmDzs64c5qX1gh7L5krKuVkE.roa (raw, json)
Hash identifier: 1JVzR17fJnA+go53ILZNeVknKR2J/wMTrwUVn89IGUg=
Subject key identifier: 5E:B0:D3:98:3C:EC:EB:87:39:A9:7D:60:87:B2:F9:92:B2:AE:56:41
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A0A8AD571ACF91C2DA737FC41D2714AEB4
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/XrDTmDzs64c5qX1gh7L5krKuVkE.roa
Signing time: Wed 16 Sep 2026 05:25:27 +0000
ROA not before: Wed 16 Sep 2026 05:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.178.110.0/24 maxlen: 24
185.5.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:ad:57:1a:cf:91:c2:da:73:7f:c4:1d:27:14:ae:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Sep 16 05:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eb0d3983ceceb8739a97d6087b2f992b2ae5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:3d:57:24:2b:00:47:f6:64:f2:cb:5f:63:
f3:df:e7:93:6c:d3:95:4c:44:39:90:87:0f:e7:0c:
74:06:49:9d:bc:05:56:6c:cc:3d:2a:f4:cf:af:80:
4f:01:19:66:33:b6:0d:d0:a7:de:50:d4:14:10:60:
f3:52:90:25:e5:f4:4f:ab:40:81:50:09:eb:e1:4b:
14:09:36:d6:fa:49:bd:84:01:2a:21:c3:ff:bd:5f:
92:d6:e3:36:62:65:9d:75:2d:e7:4e:b7:16:06:fd:
04:68:53:1c:31:9b:06:1f:b8:73:aa:c5:0d:5f:ec:
af:dd:ec:37:23:b2:63:f2:1f:c4:02:1a:c1:ab:24:
e9:fb:0f:c0:1c:e1:0d:7d:4b:0e:28:db:a9:fd:63:
28:a5:83:44:c8:0f:57:66:53:c5:6c:81:06:00:2d:
a5:c4:fd:c1:c1:50:af:ed:4b:c2:76:a6:8c:3d:eb:
8c:93:d1:24:e1:ce:e3:06:44:43:77:ed:80:50:f9:
ac:09:22:d9:f4:0b:98:07:62:6d:e5:6f:88:d1:9f:
0b:2d:f2:57:83:89:13:8d:9a:fa:77:44:0b:55:3d:
68:9f:29:df:5c:90:3b:d7:c6:a4:b9:62:ee:00:52:
1e:e7:83:40:4e:fb:0c:18:63:3e:34:21:6a:c0:40:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:D3:98:3C:EC:EB:87:39:A9:7D:60:87:B2:F9:92:B2:AE:56:41
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/XrDTmDzs64c5qX1gh7L5krKuVkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.110.0/24
185.5.39.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f6:e8:d1:1e:97:5d:be:91:67:c6:22:dc:92:aa:ac:9e:26:
88:6d:e2:af:9b:7f:54:5f:24:e2:5b:5e:f4:38:5d:24:43:f7:
aa:f3:60:63:c2:f3:68:53:79:b7:ab:94:2d:c0:47:79:1d:68:
34:0e:19:31:84:42:76:40:b2:f1:c1:8d:46:97:80:05:7c:6d:
d5:b0:14:ee:78:38:d9:75:f7:a2:46:60:d8:cb:ed:2c:62:cf:
d8:5c:b0:2b:cf:d2:c0:f6:50:d4:34:41:62:06:7d:02:3c:cc:
36:bb:5d:ac:c7:c5:4d:34:82:c2:d2:09:c1:e3:e1:ab:3e:a1:
7e:89:2a:35:14:95:e3:ab:ef:0d:75:55:7e:b2:68:a6:e9:4a:
14:30:45:6a:fd:65:f5:8c:e0:46:9e:ef:d8:cd:40:9c:0d:59:
70:8b:5b:37:7f:1a:8f:39:dc:4f:46:19:61:ac:9e:16:f2:e7:
42:cc:3a:f3:b0:5a:a5:f2:93:c3:18:bb:f9:9d:e6:35:d5:0a:
bc:52:a4:09:6e:5d:7f:41:05:4e:41:ff:3a:52:30:31:cd:9c:
0d:e5:d9:59:91:70:c2:ee:33:0f:08:57:fd:67:4d:42:57:43:
e2:67:eb:e6:23:94:23:2c:16:a4:35:2b:6c:3a:18:40:69:da:
b5:58:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:00:54 2026 by rpki-client