Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/XlpVEpCaKbvVp_iIY2abwrGuU7A.roa
File: XlpVEpCaKbvVp_iIY2abwrGuU7A.roa (raw, json)
Hash identifier: PuO/riDrTsvlx5rAd1GX11Jvzo3pxxNGOivQ4nq5cYA=
Subject key identifier: 5E:5A:55:12:90:9A:29:BB:D5:A7:F8:88:63:66:9B:C2:B1:AE:53:B0
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A082A59FF87F344795956A0B9A1C0EBC68
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/XlpVEpCaKbvVp_iIY2abwrGuU7A.roa
Signing time: Tue 08 Sep 2026 20:11:27 +0000
ROA not before: Tue 08 Sep 2026 20:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205719
IP address blocks: 88.210.62.0/24 maxlen: 24
153.79.168.0/24 maxlen: 24
153.79.169.0/24 maxlen: 24
153.79.170.0/24 maxlen: 24
204.62.120.0/24 maxlen: 24
207.89.20.0/24 maxlen: 24
207.89.21.0/24 maxlen: 24
216.162.45.0/24 maxlen: 24
2a14:a087:2::/48 maxlen: 64
2a14:a087:5::/48 maxlen: 64
2a14:a087:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:a5:9f:f8:7f:34:47:95:95:6a:0b:9a:1c:0e:bc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 8 20:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e5a5512909a29bbd5a7f88863669bc2b1ae53b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:e8:aa:40:dc:00:7f:3e:b7:ce:3c:d4:e3:
24:a0:5b:a7:6b:8e:df:76:9b:ad:8c:c9:63:94:ec:
0c:f6:77:43:4f:3f:7c:df:91:11:9d:0c:47:7c:37:
4d:7a:66:aa:80:9f:6f:3f:71:4b:0e:b2:ed:50:c3:
2e:2e:13:5b:a1:8f:af:cf:5d:8c:e9:d1:df:e4:88:
8e:14:27:e7:80:18:ad:87:da:48:e0:71:a0:f2:a4:
cb:5f:b4:75:31:89:f2:3d:ab:7a:4d:8f:3e:cd:f9:
3f:db:a4:e5:50:f7:f1:53:b5:5d:26:58:6c:60:be:
62:24:5a:05:03:37:c6:ca:03:95:73:a9:ca:72:a1:
cb:a7:bd:e4:8a:dd:10:3d:b7:b0:64:fa:95:2a:80:
25:6e:83:37:c0:f8:09:72:3e:ed:dd:dc:9a:1e:ef:
9a:74:d4:0d:2f:1e:cf:e0:91:74:78:30:0b:aa:00:
b4:0a:61:a9:7d:14:9a:94:3f:a5:cd:48:2f:3c:41:
be:3b:ec:17:3a:8c:5f:12:58:cd:3d:85:92:fe:70:
dd:33:50:fe:38:a4:72:31:af:a4:49:31:e4:bc:3e:
48:16:92:b1:92:0b:51:24:dd:49:98:b1:11:83:53:
f7:d1:36:bc:fa:74:3d:b4:ff:0a:9f:7a:95:05:a6:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5A:55:12:90:9A:29:BB:D5:A7:F8:88:63:66:9B:C2:B1:AE:53:B0
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/XlpVEpCaKbvVp_iIY2abwrGuU7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.62.0/24
153.79.168.0-153.79.170.255
204.62.120.0/24
207.89.20.0/23
216.162.45.0/24
IPv6:
2a14:a087:2::/48
2a14:a087:5::/48
2a14:a087:a::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b5:c7:2d:66:ad:56:b5:3e:ce:30:84:14:c2:eb:02:5e:a5:
13:da:f0:fc:6c:66:a9:1f:d1:63:ef:64:72:6b:5c:3f:3f:7a:
db:2e:d9:ad:9b:ea:5e:2a:8e:f6:ea:7c:bb:5b:33:51:ab:db:
ac:9d:c1:80:5a:0c:ce:7e:3b:42:15:4e:d7:ae:c9:f6:be:0d:
5e:b1:ab:c9:be:f7:14:b7:f9:d6:11:25:ca:d0:94:ed:ea:05:
c9:1a:2f:a2:5c:34:ab:ff:9d:58:5d:42:0c:cb:c3:be:d7:e9:
72:ec:d8:09:14:18:19:74:5a:e4:a2:8d:07:a4:57:71:6a:8d:
36:46:9f:c0:40:69:b8:07:51:5e:ac:ea:1f:68:10:8e:e6:bd:
02:7c:b1:a0:1c:d0:35:6c:0a:03:7c:f3:af:f5:2c:4e:a5:56:
0a:36:5b:7d:85:d3:a7:f0:e0:2a:b7:c1:4d:ca:12:0e:bf:26:
19:c0:7e:91:86:ec:60:ff:93:76:7e:ec:5a:06:b4:84:f6:5e:
66:c0:eb:5f:b4:fa:0a:b6:7a:84:76:de:04:94:76:fb:a6:f2:
e5:df:34:80:a1:24:64:fc:98:56:82:8c:56:4f:be:5a:bf:09:
5c:c6:58:93:38:d7:14:76:63:82:71:40:2a:4d:b1:12:81:31:
44:72:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:18 2026 by rpki-client