Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xEid9TRTMuR38kF-GQi6Rlivf6E.roa
File: xEid9TRTMuR38kF-GQi6Rlivf6E.roa (raw, json)
Hash identifier: zja4Roc3lsSMDY1uQdDE8Ylnbm0UvzaBy/yUWf02TGw=
Subject key identifier: C4:48:9D:F5:34:53:32:E4:77:F2:41:7E:19:08:BA:46:58:AF:7F:A1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E8281230B22A87E560D98DDE6BBA71544
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xEid9TRTMuR38kF-GQi6Rlivf6E.roa
Signing time: Mon 01 Jun 2026 09:26:01 +0000
ROA not before: Mon 01 Jun 2026 09:26:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7488
IP address blocks: 5.253.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:81:23:0b:22:a8:7e:56:0d:98:dd:e6:bb:a7:15:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 1 09:26:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4489df5345332e477f2417e1908ba4658af7fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:83:a9:97:2a:aa:d9:44:37:55:8e:c5:56:
a9:b0:df:4d:cf:1d:93:64:a5:38:ac:c6:a7:cd:f6:
6e:09:5e:ca:2f:e6:76:ec:74:76:35:75:ea:62:10:
90:8c:fd:65:06:19:e8:3d:7b:2d:87:d6:a0:1e:a2:
df:b3:a2:48:9b:41:62:34:35:10:17:54:30:5c:4d:
5a:6f:5c:c9:6d:78:05:10:48:6b:08:92:d2:c8:35:
80:0f:a1:23:bb:1c:1c:55:55:80:41:71:f7:cb:f5:
18:ab:d6:0d:a1:e7:2f:4f:a1:a0:f0:e7:97:20:af:
5f:f6:6d:a4:15:f8:c7:ee:44:1e:b0:4b:ca:66:8e:
75:d0:1b:68:63:ac:b8:b0:40:a9:94:c7:d7:ea:b4:
a2:f7:a3:a5:76:23:b9:96:4d:03:02:4e:55:09:ca:
23:c2:42:91:6e:85:2b:7c:dc:72:be:3c:c8:d9:91:
bd:20:c3:2a:22:02:02:42:1e:5a:38:91:f4:6f:5f:
93:2b:31:d8:a0:e4:fd:d6:f0:54:8e:9e:ef:eb:8e:
aa:ca:ad:de:04:30:c9:7c:01:14:18:f9:dc:a0:88:
4f:45:06:1a:b4:3b:30:40:01:76:8c:06:9c:92:57:
06:ed:c8:de:46:24:1a:24:94:53:3f:12:10:76:c2:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:48:9D:F5:34:53:32:E4:77:F2:41:7E:19:08:BA:46:58:AF:7F:A1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xEid9TRTMuR38kF-GQi6Rlivf6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:51:df:fd:b2:63:36:70:cf:18:3b:0f:0a:89:a4:ac:e5:5b:
2d:ce:12:5b:76:96:ce:b8:f8:7e:f3:b0:8c:39:c6:93:8e:5d:
4d:a0:d6:de:39:ea:60:f3:db:48:cf:5b:74:51:08:7b:c7:da:
07:5c:c6:3f:9e:ee:a6:57:45:63:fb:1d:53:56:e2:6f:f2:8b:
ae:58:8e:dc:ac:17:6b:34:6b:02:a7:a9:24:60:8d:0d:66:a8:
48:4e:d7:33:7e:fb:45:b9:1b:aa:ef:bf:90:c4:2e:b3:b9:0e:
41:84:15:fe:42:ab:10:90:b0:7a:26:dc:0b:10:e3:c4:a3:5a:
f4:1b:9e:b0:50:9d:cd:44:d3:e1:70:08:5b:06:4f:e0:34:a1:
0a:92:f2:b6:46:8e:23:97:1b:e1:27:d0:01:49:3a:61:05:7f:
d0:ab:de:0f:7a:85:34:61:ad:f1:59:02:e1:c5:cf:dc:8a:58:
9c:54:2c:b3:9e:32:c6:52:34:fc:98:07:aa:ba:a8:ca:ad:8a:
ac:6d:01:a4:15:49:41:20:83:77:e0:a0:b2:87:4e:2a:e5:a9:
0e:e9:cb:51:a4:ec:7c:08:e1:c0:2f:70:80:e8:17:03:18:68:
62:05:fb:da:1f:08:52:09:c0:f2:f7:3c:53:66:4e:bc:6a:8c:
2e:bd:db:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6CgSMLIqh+Vg2Y3ea7pxVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwNjAxMDkyNjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQ4OWRmNTM0NTMzMmU0NzdmMjQxN2UxOTA4YmE0NjU4YWY3ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQWDqZcqqtlEN1WOxVapsN9Nzx2T
ZKU4rManzfZuCV7KL+Z27HR2NXXqYhCQjP1lBhnoPXsth9agHqLfs6JIm0FiNDUQ
F1QwXE1ab1zJbXgFEEhrCJLSyDWAD6EjuxwcVVWAQXH3y/UYq9YNoecvT6Gg8OeX
IK9f9m2kFfjH7kQesEvKZo510BtoY6y4sECplMfX6rSi96OldiO5lk0DAk5VCcoj
wkKRboUrfNxyvjzI2ZG9IMMqIgICQh5aOJH0b1+TKzHYoOT91vBUjp7v646qyq3e
BDDJfAEUGPncoIhPRQYatDswQAF2jAacklcG7cjeRiQaJJRTPxIQdsJmuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRInfU0UzLkd/JBfhkIukZYr3+hMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEveEVpZDlUUlRNdVIzOGtGLUdRaTZSbGl2ZjZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf0mMA0G
CSqGSIb3DQEBCwUAA4IBAQCxUd/9smM2cM8YOw8KiaSs5VstzhJbdpbOuPh+87CM
OcaTjl1NoNbeOepg89tIz1t0UQh7x9oHXMY/nu6mV0Vj+x1TVuJv8ouuWI7crBdr
NGsCp6kkYI0NZqhITtczfvtFuRuq77+QxC6zuQ5BhBX+QqsQkLB6JtwLEOPEo1r0
G56wUJ3NRNPhcAhbBk/gNKEKkvK2Ro4jlxvhJ9ABSTphBX/Qq94PeoU0Ya3xWQLh
xc/cilicVCyznjLGUjT8mAequqjKrYqsbQGkFUlBIIN34KCyh04q5akO6ctRpOx8
COHAL3CA6BcDGGhiBfvaHwhSCcDy9zxTZk68aowuvdv1
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:12 2026 by rpki-client