Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/X5vTmjxUrTYCIj74YQviTSTiu8w.roa
File: X5vTmjxUrTYCIj74YQviTSTiu8w.roa (raw, json)
Hash identifier: XIF5WNqHwDwxNXQlpFpoqXl0LYJ6rvEV9aWoVjzN03M=
Subject key identifier: 5F:9B:D3:9A:3C:54:AD:36:02:22:3E:F8:61:0B:E2:4D:24:E2:BB:CC
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A116AAFB5FD23AE41B25C3AADC9DE3AACA
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/X5vTmjxUrTYCIj74YQviTSTiu8w.roa
Signing time: Wed 07 Oct 2026 14:01:06 +0000
ROA not before: Wed 07 Oct 2026 14:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 201.7.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:fb:5f:d2:3a:e4:1b:25:c3:aa:dc:9d:e3:aa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 7 14:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f9bd39a3c54ad3602223ef8610be24d24e2bbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:72:d4:06:ee:36:de:1b:42:54:5f:30:df:
49:a7:e8:05:ef:7d:2d:d4:6c:cb:a5:00:54:d1:29:
2d:58:56:9e:36:e3:ac:ed:73:d4:4e:66:69:bb:99:
1c:1c:64:4a:93:f0:2f:60:1b:f6:3b:86:b5:f6:19:
47:32:ae:4c:ac:1d:e6:36:7e:bf:58:86:5c:23:6b:
52:0d:04:11:56:86:7c:23:45:c4:6a:5b:15:9d:93:
d0:8b:99:a2:c8:14:9a:95:13:3d:49:34:9d:e5:6a:
89:ae:9f:3b:a1:93:13:e4:ff:f7:d6:84:4b:02:8d:
bd:c2:5e:81:46:0c:3a:95:8d:d4:60:22:79:b1:c2:
c1:ef:74:9f:80:9a:42:7b:49:16:20:33:c4:35:25:
ac:62:a0:7b:60:17:d0:22:4b:b5:bc:8c:f5:7a:5a:
5c:4c:42:ec:14:e1:61:18:c2:56:d6:8f:75:a7:2e:
c0:cf:a0:66:75:85:c5:20:4e:1a:1e:a6:a0:fd:9f:
42:e4:bd:7a:64:7d:54:0c:5f:08:92:fc:02:9f:17:
27:f1:bd:32:3f:4e:6f:4e:d7:82:b2:25:08:df:c0:
6e:5f:8c:ac:d7:f0:34:df:12:47:44:25:3a:11:80:
17:2b:5e:75:18:9d:40:ee:6c:91:39:26:5a:6b:ff:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:D3:9A:3C:54:AD:36:02:22:3E:F8:61:0B:E2:4D:24:E2:BB:CC
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/X5vTmjxUrTYCIj74YQviTSTiu8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.19.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e3:9d:3d:e6:be:98:68:d6:36:78:1f:9c:b3:8b:d2:31:07:
0e:69:36:7d:34:b9:8a:61:24:9f:46:f1:b0:28:15:d9:7c:b3:
05:37:00:1a:b6:b5:67:33:03:6e:36:c9:3d:31:f4:84:be:79:
80:93:9d:32:e8:4f:70:a8:ae:53:f4:c2:5b:c4:a0:f7:33:c4:
b7:58:77:59:52:4d:38:b5:a0:58:f4:af:23:59:5f:bd:fc:23:
4b:9a:bf:0f:aa:dc:bd:4a:c1:76:04:11:8f:9b:78:57:84:69:
55:a0:48:1b:9b:6b:69:84:e8:c4:9d:b5:66:94:e3:8d:d4:91:
7c:40:fa:cc:7b:54:f8:55:12:ad:9c:cd:e5:5a:ba:12:8e:24:
b0:d7:aa:f2:80:3d:e1:8a:aa:2f:dc:22:40:15:c4:cb:d4:3f:
77:15:e1:21:cd:69:1f:29:a4:ca:f4:d7:bb:91:8b:a2:d9:a0:
6f:53:5a:e6:c3:a7:6c:83:18:06:36:23:ca:6e:8a:7d:f0:39:
c2:71:98:a5:11:44:f6:f3:4c:1b:de:7f:f5:85:d0:97:7e:08:
9c:33:66:df:d8:31:ff:a8:7a:b8:84:49:fe:23:2f:bd:b8:66:
f0:e5:14:dd:ae:d0:86:96:33:e7:4c:21:fb:39:90:57:ac:9e:
82:c8:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:46:20 2026 by rpki-client