Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/XRbYp6FDnp1AtNuZXLrfLub5nuc.roa
File: XRbYp6FDnp1AtNuZXLrfLub5nuc.roa (raw, json)
Hash identifier: SgUgHK8CB2wAUJD4MixZKl+/Cz+SEY/Xajfx5TX1zsA=
Subject key identifier: 5D:16:D8:A7:A1:43:9E:9D:40:B4:DB:99:5C:BA:DF:2E:E6:F9:9E:E7
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A07AE061AEF2033049A0A20D9651CA02BD
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/XRbYp6FDnp1AtNuZXLrfLub5nuc.roa
Signing time: Mon 07 Sep 2026 07:58:40 +0000
ROA not before: Mon 07 Sep 2026 07:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 194.152.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:e0:61:ae:f2:03:30:49:a0:a2:0d:96:51:ca:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 7 07:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d16d8a7a1439e9d40b4db995cbadf2ee6f99ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:61:d3:87:3c:89:e3:3e:b1:74:d0:17:4d:
d8:7e:f3:2e:84:d7:69:d0:3f:05:91:8a:1f:07:d9:
b0:51:27:76:b6:df:da:91:12:23:e1:11:69:01:df:
e7:cc:cf:9b:be:38:b5:7d:a6:ab:96:44:39:15:82:
97:ce:b0:f4:49:e2:77:de:51:44:cf:d8:b7:c9:6f:
70:77:d4:9f:e6:fc:0e:5c:3b:a7:64:f3:c2:88:a5:
6c:5e:d0:1d:a3:07:8c:3b:b3:b3:81:46:10:1e:3f:
09:29:91:ea:dd:39:b9:30:fe:48:06:8b:2c:c5:da:
66:d3:d5:de:04:3d:52:54:82:37:80:c3:cd:45:ed:
15:d6:e8:8c:87:23:b3:35:34:50:6f:1b:fd:f5:70:
5d:7a:c0:b1:9d:89:41:5d:a8:8c:c0:12:75:cc:01:
40:99:03:b8:af:c7:52:21:82:f6:5b:cf:2c:34:7c:
84:01:e0:64:f5:bf:db:d2:a1:3d:e9:7b:4a:44:a3:
ed:df:21:bb:6f:d3:7f:3d:f7:9a:ac:54:e7:de:82:
d2:54:92:44:ec:19:c3:9e:e2:1a:0c:c0:08:90:70:
87:bc:77:a6:42:ca:6a:02:37:ae:b6:ce:33:bb:1c:
84:57:39:6a:a7:f4:38:d5:00:91:b0:80:54:f9:0d:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:D8:A7:A1:43:9E:9D:40:B4:DB:99:5C:BA:DF:2E:E6:F9:9E:E7
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/XRbYp6FDnp1AtNuZXLrfLub5nuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.144.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d0:18:59:16:03:33:c4:ea:c6:a4:4e:34:d7:40:26:5a:6e:
d5:b3:d1:77:16:aa:8e:c7:8e:9c:89:1d:8d:e2:3f:0d:e8:ee:
06:1f:12:c5:4c:6d:7b:fe:12:29:8c:82:f1:45:1d:53:8c:31:
03:10:ff:d1:db:90:0b:f6:45:2c:a9:ee:60:0e:0b:71:78:25:
97:8d:cd:9a:e7:41:71:84:85:6f:a7:45:ab:39:99:de:b2:dc:
56:0a:d5:7b:0f:74:3f:99:8f:89:a3:5c:b2:7f:33:d1:68:2b:
49:a4:be:3a:7c:81:4e:7c:35:78:88:34:a2:fd:ff:fd:4d:4e:
87:5e:15:1c:c7:fd:4e:37:2b:07:de:1e:f8:99:7a:22:fa:c3:
e4:6a:7c:be:68:75:2e:75:99:86:0c:0b:1d:a8:90:89:ff:48:
12:cc:b8:ce:a3:29:51:a0:96:3d:cb:3c:b1:90:36:fd:34:9b:
58:4e:2f:a1:29:e9:c6:2c:87:64:92:89:d9:3f:c3:9e:ac:b5:
1a:c3:0b:ef:eb:b0:94:f9:9c:c6:6b:67:0b:2e:86:2e:5c:81:
d3:7b:7f:8c:de:9e:65:a0:93:df:45:dc:7d:36:82:04:83:35:
23:b9:5c:4c:61:57:d9:25:ea:9c:4c:2e:1f:3a:2f:9b:50:8c:
52:be:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:45:16 2026 by rpki-client