Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/YxXsZlINFbnQqhmq0BwCtCd3rCY.roa
File: YxXsZlINFbnQqhmq0BwCtCd3rCY.roa (raw, json)
Hash identifier: oiaRCOkv2kOFQFoBqvT4f+V4BdFJ/TUUb8JSZ+N2nWE=
Subject key identifier: 63:15:EC:66:52:0D:15:B9:D0:AA:19:AA:D0:1C:02:B4:27:77:AC:26
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 019B7C7FAA63443B09364438543F6384A2F7
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/YxXsZlINFbnQqhmq0BwCtCd3rCY.roa
Signing time: Fri 02 Jan 2026 02:18:20 +0000
ROA not before: Fri 02 Jan 2026 02:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39078
IP address blocks: 81.25.80.0/21 maxlen: 21
217.68.32.0/20 maxlen: 20
2a06:3640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:aa:63:44:3b:09:36:44:38:54:3f:63:84:a2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Jan 2 02:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6315ec66520d15b9d0aa19aad01c02b42777ac26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:54:e0:39:62:e5:9a:13:c6:c3:4b:55:e3:
14:5e:e9:a5:bc:d5:a2:ef:84:04:00:94:29:48:47:
fa:32:ae:ef:34:49:42:28:89:89:e6:f7:af:c3:06:
79:6a:29:8a:ce:d7:70:bf:fe:c4:57:52:f1:3b:3f:
98:b6:a8:fb:aa:03:81:c9:68:dd:52:7d:d7:4b:60:
0d:a7:55:c1:49:c8:be:3c:dd:ba:bb:61:ac:e1:5f:
fc:47:f6:b5:e4:71:83:1b:e3:c7:34:a8:fc:55:f7:
88:87:23:db:46:02:cf:e6:7f:9e:18:ea:60:a1:0a:
93:49:67:f6:24:d2:c6:fc:ed:53:50:1e:18:6f:eb:
8c:58:73:f1:7b:26:63:ab:9f:7d:37:cd:49:9d:b4:
30:a5:49:87:22:bc:8a:27:b4:64:23:96:8f:84:63:
37:8b:21:5b:f1:79:d7:bf:4e:e9:42:b8:92:d1:e8:
3a:c8:d6:d5:b6:07:9e:68:37:21:09:e5:fd:6b:73:
dd:90:85:eb:2f:bd:93:a4:18:f7:3d:28:7c:12:4d:
4a:e3:5f:9d:09:e6:e1:8a:4f:a2:05:bb:9d:62:99:
f9:04:af:16:03:3d:b4:88:3e:2c:6f:26:32:da:b7:
d8:cb:3f:1c:34:a8:f6:ff:0f:0a:8d:50:1d:14:b4:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:EC:66:52:0D:15:B9:D0:AA:19:AA:D0:1C:02:B4:27:77:AC:26
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/YxXsZlINFbnQqhmq0BwCtCd3rCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.80.0/21
217.68.32.0/20
IPv6:
2a06:3640::/29
Signature Algorithm: sha256WithRSAEncryption
7d:86:77:e2:47:84:b4:a3:e5:51:02:57:d6:1c:bf:62:c1:13:
f4:91:9a:9a:fa:25:e7:bd:1d:96:d6:d8:2e:ce:32:74:2f:be:
5f:d3:2d:41:e2:60:88:38:e3:f9:ef:1b:22:9f:64:52:03:27:
08:31:0f:f6:e5:77:e2:f9:3d:63:0c:f7:d8:e1:58:c6:4a:81:
97:f4:5d:63:7e:27:6e:39:89:2a:62:0a:1b:1a:3a:64:f2:57:
22:47:85:e5:7f:d7:a4:21:31:a0:64:f5:30:e3:f4:d5:30:7e:
ba:95:b4:5f:b6:e1:14:92:1a:2f:52:d9:f8:69:88:8b:e8:6f:
88:70:0f:bc:ae:8b:21:f8:01:4f:c4:ab:75:d0:5d:4f:d1:79:
d6:90:37:c0:f0:b1:d7:e5:a3:e6:96:1e:d0:97:2a:d6:61:bf:
fd:e6:eb:2c:01:8e:19:5b:cd:7b:f3:7e:79:b0:66:3c:65:3e:
80:74:b9:74:1d:e8:08:2c:fd:dc:46:09:b6:29:d5:34:ad:87:
1a:c6:08:b6:b6:4d:c1:c1:87:3a:8e:d2:d5:b7:27:f0:db:80:
f2:21:95:e7:0d:14:69:18:07:ab:e4:72:25:a1:9e:05:b9:3f:
e8:9d:ff:81:20:9b:5d:c5:e1:b0:d9:f3:31:04:31:ea:a6:5d:
2c:f5:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:42 2026 by rpki-client