Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/XuPVDCotzHlj3lb_lOE7NOSPito.roa
File: XuPVDCotzHlj3lb_lOE7NOSPito.roa (raw, json)
Hash identifier: baZCCVrWNS9+G+RlcQkU24dkfJlXQ2RNZWZ0Ao+9ppk=
Subject key identifier: 5E:E3:D5:0C:2A:2D:CC:79:63:DE:56:FF:94:E1:3B:34:E4:8F:8A:DA
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01A110CD33C97DE41A8C485E798BD620423C
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/XuPVDCotzHlj3lb_lOE7NOSPito.roa
Signing time: Tue 06 Oct 2026 10:40:45 +0000
ROA not before: Tue 06 Oct 2026 10:40:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203487
IP address blocks: 2a04:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:cd:33:c9:7d:e4:1a:8c:48:5e:79:8b:d6:20:42:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Oct 6 10:40:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ee3d50c2a2dcc7963de56ff94e13b34e48f8ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:ec:48:85:6d:90:8d:da:99:bd:13:06:0c:
cf:59:17:84:ed:3c:93:ef:eb:2e:ae:0b:75:28:3a:
9d:3e:b7:ff:e8:42:48:6a:d1:62:fc:28:f7:22:b5:
14:fc:ce:52:05:3e:a4:fb:99:32:92:ba:8f:fa:91:
09:a9:c1:57:70:7e:d9:ce:08:b1:08:c2:68:17:f5:
aa:3b:26:89:87:76:9c:63:c8:d0:61:db:d4:bf:f2:
33:d1:69:af:ac:95:e7:ec:51:c3:b4:6e:23:1b:16:
ff:51:ce:08:a7:96:4f:a6:27:93:39:e2:8d:9c:cb:
8a:07:1b:d7:08:a8:29:5e:bb:19:a6:a4:da:56:01:
ea:30:b7:1c:97:38:c4:0d:10:d0:66:fb:92:ca:f3:
68:0c:13:e5:8f:15:0d:b9:9f:c0:29:6a:49:72:db:
cc:ce:ee:a4:56:ad:55:57:e4:b9:53:44:ce:c7:c0:
7d:94:82:fc:9a:a1:43:e8:d5:1b:1b:81:26:fc:d6:
60:3f:d8:99:46:b5:d9:b4:1c:4f:e1:9e:ee:2c:90:
5b:6c:3f:63:f3:d6:02:cf:b0:51:e8:da:70:2f:e3:
ab:85:7a:31:ea:c9:eb:8f:75:06:ab:7b:b6:34:a6:
80:98:e8:42:f8:d3:17:05:6b:f9:ac:67:a3:04:05:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:D5:0C:2A:2D:CC:79:63:DE:56:FF:94:E1:3B:34:E4:8F:8A:DA
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/XuPVDCotzHlj3lb_lOE7NOSPito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
4e:87:a9:3a:0f:03:75:95:d1:82:c4:be:29:c8:38:fe:e0:29:
d0:f0:c0:97:6a:16:80:65:47:d7:9a:61:a1:b9:1c:f4:fb:26:
4e:3b:8e:10:97:5b:dd:07:47:b3:e5:17:fb:6a:46:9a:b2:dd:
d6:63:61:02:dd:e9:79:8e:41:a3:56:35:ac:b4:99:cf:e6:60:
77:5e:cb:90:b7:c9:c3:21:12:f5:2c:2f:b2:c3:65:59:8e:54:
34:59:25:c6:ff:0a:f9:79:a9:d0:c1:ec:22:99:50:8b:70:a1:
55:54:ff:94:49:3c:40:cc:b1:e8:74:ca:2a:68:c7:97:80:d5:
da:f2:2d:0d:cd:4d:1a:0f:f5:54:8e:13:3d:e0:46:3c:30:71:
14:15:de:21:51:de:20:21:89:49:45:81:34:cf:cd:94:17:c7:
b2:cc:2c:6f:0f:45:0e:a6:b8:80:d3:ec:25:1e:06:ce:d1:98:
4d:7f:27:22:2b:d3:57:0c:2a:b4:2f:6b:18:ef:81:6d:81:4b:
50:7b:69:6c:4f:00:d4:e0:31:0a:9a:36:59:3d:71:2f:35:c6:
7c:51:4f:16:b4:e2:d0:c7:af:bd:3a:0b:e1:da:ff:28:5e:a9:
17:70:09:64:7b:ed:ff:08:d9:9a:dc:65:4e:99:de:0f:72:ec:
a6:d5:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:46:02 2026 by rpki-client