Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/xwaJ0j0PDYZzctmdgSjPPLZf004.roa
File: xwaJ0j0PDYZzctmdgSjPPLZf004.roa (raw, json)
Hash identifier: wfHg7ouP4BOK33dNMmLPp9b7vL2GlP6yDgg+LDAcYSM=
Subject key identifier: C7:06:89:D2:3D:0F:0D:86:73:72:D9:9D:81:28:CF:3C:B6:5F:D3:4E
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A0AE32EB6EEC2E1A04FA433CBA5303CDAB
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/xwaJ0j0PDYZzctmdgSjPPLZf004.roa
Signing time: Thu 17 Sep 2026 07:09:27 +0000
ROA not before: Thu 17 Sep 2026 07:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.208.0/22 maxlen: 22
5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:32:eb:6e:ec:2e:1a:04:fa:43:3c:ba:53:03:cd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 17 07:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c70689d23d0f0d867372d99d8128cf3cb65fd34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:51:fd:32:f0:db:51:61:3e:42:61:74:c1:
dc:99:f8:ef:c4:12:69:e1:a4:91:cb:71:3d:83:0c:
85:0e:0c:7e:36:9c:bb:00:c5:6d:02:2f:a7:ac:e3:
03:79:cd:83:4e:b8:a6:fe:73:79:50:d0:56:40:9a:
25:57:67:52:1e:8f:49:27:7d:d8:87:98:91:f7:77:
b8:a5:7d:ac:56:b1:1b:3b:28:81:36:bd:84:8d:2a:
a7:2f:3b:3d:7f:4a:da:56:ab:50:51:bc:87:35:f3:
1f:4e:d2:0c:a6:2f:cb:05:dd:90:b7:24:0f:a2:81:
83:66:2f:f1:61:f6:ca:da:24:da:45:4e:03:cd:73:
44:a4:6e:5f:49:70:f2:16:5c:90:10:82:b0:5f:da:
3f:f7:9c:1c:bb:af:14:28:11:85:a7:a5:1e:ce:f1:
e0:ae:ae:6d:05:6a:32:b5:b0:b4:a0:5c:db:2e:7a:
60:e1:7e:84:68:05:ad:39:49:eb:1a:13:c7:23:4c:
84:2f:55:0c:07:df:b8:66:6e:c2:1c:bf:92:0f:10:
6d:8e:76:23:e1:8c:2c:ed:e4:37:dc:07:3a:aa:87:
35:bd:21:59:14:67:7d:da:f1:88:fd:63:33:83:bd:
db:53:07:49:a2:2e:8f:9c:07:3e:52:c3:a1:1c:bc:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:89:D2:3D:0F:0D:86:73:72:D9:9D:81:28:CF:3C:B6:5F:D3:4E
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/xwaJ0j0PDYZzctmdgSjPPLZf004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/22
5.10.216.0/24
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b3:97:10:9b:f3:35:df:05:44:69:72:63:02:25:45:ab:d0:
eb:05:67:aa:a6:f5:d4:e6:ac:f4:93:10:c0:c4:ad:a8:85:b3:
3f:9b:01:4c:ae:2d:43:63:40:91:00:5c:b7:7e:92:a0:83:bd:
23:8a:23:b8:3b:c4:c6:82:a7:bf:f4:1b:d7:52:80:85:2c:4e:
f8:ed:a2:0d:1e:9e:e5:a9:ef:62:c3:fb:8f:a8:f1:b5:de:82:
f7:46:3b:72:2b:89:cc:fb:f6:cf:65:81:03:1e:20:c7:b2:bb:
98:f8:a2:47:cb:42:1e:97:1f:1f:c1:0a:a7:e3:88:a7:b3:9a:
d4:3a:9f:0f:8b:44:0e:12:5e:fd:d9:35:45:28:83:71:21:f2:
f4:18:8b:95:bc:3e:b4:53:a4:ce:9b:35:e3:81:74:96:33:86:
04:25:fd:08:1c:53:4c:7c:0f:de:87:b7:1d:cc:24:71:d9:7c:
bd:f6:74:ce:9e:17:04:65:72:16:04:31:db:79:d4:ee:00:fc:
fd:e6:3f:e2:c1:a3:58:48:14:33:d6:26:8e:55:4a:09:e2:8f:
76:7a:c0:09:89:e3:5b:7c:f5:a0:62:34:d8:21:f4:f5:a2:50:
a8:cc:d1:55:a8:15:f6:ca:f3:e6:4c:f8:6e:33:76:9b:32:f4:
23:c8:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:05 2026 by rpki-client