Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/XE1hA9GoSwCCQTzlrJPud8rwosk.roa
File: XE1hA9GoSwCCQTzlrJPud8rwosk.roa (raw, json)
Hash identifier: YUFGp3JRLfRJAoIp1SDL1Gd34rSXV9G2A1bQuPoViQw=
Subject key identifier: 5C:4D:61:03:D1:A8:4B:00:82:41:3C:E5:AC:93:EE:77:CA:F0:A2:C9
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019C74870A84421B6B842DD90CDE87CEEBBC
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/XE1hA9GoSwCCQTzlrJPud8rwosk.roa
Signing time: Thu 19 Feb 2026 06:12:12 +0000
ROA not before: Thu 19 Feb 2026 06:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208233
IP address blocks: 45.130.36.0/24 maxlen: 24
45.130.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:87:0a:84:42:1b:6b:84:2d:d9:0c:de:87:ce:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Feb 19 06:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4d6103d1a84b0082413ce5ac93ee77caf0a2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:58:19:a0:5b:35:7a:fb:ff:9f:b8:3d:10:
c7:fd:93:fc:02:02:f5:bb:1f:5e:91:b1:2d:41:74:
73:45:fa:8d:bf:ea:66:ee:1a:52:43:94:da:b9:d2:
48:0e:fa:5d:83:98:a4:7c:ab:57:12:ba:88:98:42:
b7:b1:78:b3:6e:ad:a6:b7:eb:80:3b:7c:be:28:84:
dc:69:0c:af:01:d0:9c:f2:d5:6c:b4:9e:9a:18:3f:
5c:0e:8a:b3:33:4e:3f:8e:22:81:80:e8:d5:23:48:
bf:e1:9d:c7:cc:b7:08:b5:e6:9b:eb:9f:78:3a:20:
a9:83:72:c7:22:f0:ff:3b:97:54:39:26:0c:4e:e1:
31:9a:2e:2f:2d:be:2f:46:00:74:27:6d:fd:55:9e:
be:17:4a:0c:e8:8c:36:7b:86:05:02:d8:ae:11:08:
09:8e:7a:8a:bb:fd:de:75:41:7b:1f:80:8f:55:e1:
29:92:37:e6:1e:a9:f5:02:c3:83:1f:66:40:3a:c8:
39:f7:c7:1a:62:15:51:f2:4a:93:5e:28:92:b1:1e:
08:86:3b:62:8e:e4:8e:39:c1:e4:76:1f:1d:90:ef:
92:2a:a2:1d:1f:f8:a5:d3:c6:73:6f:04:d0:e4:bb:
17:7e:e2:df:75:0f:5b:fd:d4:37:8f:6c:9f:b9:45:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:61:03:D1:A8:4B:00:82:41:3C:E5:AC:93:EE:77:CA:F0:A2:C9
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/XE1hA9GoSwCCQTzlrJPud8rwosk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.36.0/23
Signature Algorithm: sha256WithRSAEncryption
85:19:60:d5:75:2f:1b:33:49:63:af:ff:2c:24:ef:b3:cf:c0:
41:41:4d:8c:37:15:d9:0e:c4:f7:cb:9a:3a:01:0c:04:36:ef:
31:0d:fc:81:2a:c0:d0:6a:6c:50:78:09:f6:a3:d6:9a:0c:52:
72:71:80:ac:2c:c0:9a:78:c0:b5:9e:ab:d7:3b:7b:6e:ce:2b:
51:f8:ca:d5:77:43:a0:7b:9f:b4:d6:18:24:4d:4f:c0:53:41:
54:d7:2b:86:67:e4:d2:87:6d:66:61:75:66:78:a7:7c:bb:c1:
a3:6f:4a:d9:2e:e9:64:be:b5:9e:67:39:a5:c4:e9:a1:6b:fb:
24:d1:a2:be:d4:37:b4:8c:ae:17:ab:40:ea:c2:4f:68:64:32:
7a:9b:02:0d:3f:c7:03:84:00:d3:f7:c6:ae:96:1c:d7:32:ad:
37:d8:fb:a8:a8:83:ee:c2:fd:97:f7:d4:61:1c:cd:ee:78:e7:
b4:03:6e:79:73:ed:b0:0c:29:5c:90:66:f6:12:09:0e:35:9a:
5b:51:6c:f8:14:ea:f0:53:3f:96:b3:a8:f2:33:c3:91:00:5e:
7d:54:9d:95:f7:1d:a8:ca:24:ed:cc:1f:a6:52:e6:03:36:92:
5c:d6:b3:be:0b:37:01:4b:2c:2e:6b:ce:ae:1c:5c:e4:65:5f:
9b:c0:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:08 2026 by rpki-client