Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/Xly4VLCyL4qx8pSp8FuBHSdiGps.roa
File: Xly4VLCyL4qx8pSp8FuBHSdiGps.roa (raw, json)
Hash identifier: jb5/yBQShc5nvMqwZkFvyoehznPlqSgb+AtitziDdAI=
Subject key identifier: 5E:5C:B8:54:B0:B2:2F:8A:B1:F2:94:A9:F0:5B:81:1D:27:62:1A:9B
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019C35B30E14AE8F264371C4E632DEF73915
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/Xly4VLCyL4qx8pSp8FuBHSdiGps.roa
Signing time: Sat 07 Feb 2026 01:24:12 +0000
ROA not before: Sat 07 Feb 2026 01:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61436
IP address blocks: 77.91.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:35:b3:0e:14:ae:8f:26:43:71:c4:e6:32:de:f7:39:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Feb 7 01:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e5cb854b0b22f8ab1f294a9f05b811d27621a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:e6:55:95:2b:37:df:76:71:36:7d:06:ee:
b4:1d:fd:40:00:ef:25:bf:f7:6a:09:8c:87:6a:3f:
a0:3e:bf:c2:b5:52:1a:41:9b:9e:37:9a:12:c2:ac:
73:80:57:bc:47:91:32:87:18:2f:2c:71:91:09:f1:
11:ab:7d:5a:40:bd:3a:3a:25:b3:99:ff:2a:41:40:
4c:47:71:c4:20:12:6b:19:3c:d4:0a:40:75:30:32:
a8:12:49:ec:87:2b:d5:45:75:b9:50:81:c9:04:58:
78:3e:3d:05:27:23:9b:2f:91:bf:9d:a4:aa:0a:63:
af:94:ac:6c:9a:17:6d:71:48:c8:19:06:f9:0d:6f:
22:c4:58:ec:8d:dc:f4:e5:7c:1d:e6:ca:93:ce:e5:
3e:9f:c8:6e:df:38:d1:6c:39:cf:1c:44:8d:64:76:
4e:e1:74:8b:d3:df:10:83:32:6b:55:be:33:ca:4d:
b6:72:6c:f9:c2:77:b1:d0:aa:27:54:b6:07:4e:a8:
ed:42:08:82:0d:b5:dd:d9:8a:9c:04:99:2a:a9:0a:
f5:7a:d1:1e:82:ad:99:49:d4:0a:05:d1:60:84:e6:
7f:3f:97:60:11:5e:65:ef:36:0e:cb:a1:e3:fd:84:
e6:6b:1c:47:8c:00:88:95:e8:e0:6e:17:16:4c:54:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:B8:54:B0:B2:2F:8A:B1:F2:94:A9:F0:5B:81:1D:27:62:1A:9B
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/Xly4VLCyL4qx8pSp8FuBHSdiGps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:99:63:14:f0:04:e6:cc:8b:e3:83:69:1d:46:5a:97:3b:28:
bb:e4:82:48:07:ad:d7:13:0a:2e:a7:67:19:21:96:13:49:fa:
6c:ef:f1:00:7a:69:91:d6:a4:2a:82:f4:ca:7b:67:5d:6f:50:
c9:b3:24:8b:aa:d8:4c:8e:1c:fd:ab:3c:66:f9:ec:b1:49:10:
9a:ca:7f:1b:71:a2:e1:a1:af:2e:27:ea:18:b9:af:c3:94:e6:
90:93:0e:40:a0:9c:18:2b:47:01:05:f3:39:fa:a2:67:5a:18:
fa:e1:f7:42:86:be:1d:1f:d9:5f:5a:10:70:f2:48:e9:c5:5c:
cf:61:39:3b:34:e5:51:20:72:34:ea:aa:45:4b:ed:3d:98:4f:
ce:22:79:f3:8a:6d:61:a3:51:f2:03:a9:e2:ed:68:e9:b7:08:
93:be:11:1b:3c:dd:29:bb:c0:d8:ca:df:8a:2b:59:64:e9:ad:
e5:c0:f7:c5:69:ad:35:ef:55:3a:c5:7f:c5:46:03:1d:9f:9c:
85:c3:43:22:25:d4:4c:69:03:14:12:4d:53:cb:2a:cd:94:1c:
0a:b4:d4:44:60:3c:f7:11:9f:44:37:30:7a:72:56:31:3b:4a:
3f:59:ed:26:9f:76:ea:d0:a3:9e:73:8e:22:d9:6f:6c:63:de:
9b:32:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:51 2026 by rpki-client