Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/XzYex_ieQvekeO6Eu8AhysaHXCM.roa
File: XzYex_ieQvekeO6Eu8AhysaHXCM.roa (raw, json)
Hash identifier: Uh2DSfJ3JPw4zmLr56LoU47sN4sjUalmk5csq0JOUMk=
Subject key identifier: 5F:36:1E:C7:F8:9E:42:F7:A4:78:EE:84:BB:C0:21:CA:C6:87:5C:23
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019B78350BC6C97DC67FF0AFFE89669600A2
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/XzYex_ieQvekeO6Eu8AhysaHXCM.roa
Signing time: Thu 01 Jan 2026 06:18:20 +0000
ROA not before: Thu 01 Jan 2026 06:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15471
IP address blocks: 88.158.0.0/16 maxlen: 24
194.153.232.0/24 maxlen: 24
2a03:fa80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:0b:c6:c9:7d:c6:7f:f0:af:fe:89:66:96:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Jan 1 06:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f361ec7f89e42f7a478ee84bbc021cac6875c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:f3:ed:26:cd:05:b1:5d:9f:2a:99:e4:4c:
53:86:cc:a4:fb:75:fb:3f:49:7a:2d:d3:1b:06:7d:
80:8d:8a:e2:a4:f1:dd:61:33:13:2d:71:92:32:83:
d0:8f:de:f6:f2:98:aa:3d:29:9d:56:2e:19:fe:ad:
48:d4:ae:de:22:68:40:67:3d:a7:92:38:97:3e:56:
b4:41:97:0b:d8:0a:62:53:77:a4:d8:d8:71:0f:db:
05:e7:aa:d5:3f:78:2f:35:1b:98:c5:02:f0:f8:4c:
5e:9b:26:67:7a:d7:d1:d4:7d:42:1d:91:d5:b8:35:
d5:08:4f:01:13:a2:e7:ef:5e:65:bd:04:71:a2:8f:
99:12:fe:df:1e:49:de:9c:a7:e3:9a:9c:92:96:f6:
ad:b6:83:b4:e6:84:af:29:e1:7b:c2:22:1e:d4:ac:
4e:72:64:43:64:be:23:1e:11:eb:d1:69:f1:af:a8:
4b:3f:9f:41:d9:cb:f3:5a:72:d2:24:0d:e0:ed:80:
dc:3e:ee:25:4e:46:46:24:b8:d9:b0:ad:82:a7:fb:
f1:bb:ee:12:2f:ef:71:d3:38:10:5c:77:c5:00:c1:
18:95:91:30:88:db:02:42:e3:7d:2d:d6:0b:74:0c:
36:70:fc:98:11:1e:a0:5e:b4:27:bc:44:02:d9:eb:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:1E:C7:F8:9E:42:F7:A4:78:EE:84:BB:C0:21:CA:C6:87:5C:23
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/XzYex_ieQvekeO6Eu8AhysaHXCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.158.0.0/16
194.153.232.0/24
IPv6:
2a03:fa80::/32
Signature Algorithm: sha256WithRSAEncryption
85:ee:32:73:41:3d:1b:cf:20:63:91:32:e9:48:3b:3c:c7:cc:
bc:02:8a:ea:48:b9:ee:a6:1a:00:9d:f4:85:9d:22:e1:43:af:
52:67:02:ae:4c:da:32:be:b3:51:c6:cc:e8:eb:c7:f8:51:de:
bd:8e:93:2d:36:3b:fb:70:81:e5:d9:5c:58:b0:4c:04:01:4b:
02:19:0f:b3:41:fc:e7:a8:47:0a:4a:68:12:cb:0f:0b:88:05:
a9:ff:0a:6c:e8:8b:68:66:ac:f3:29:77:09:96:ad:ff:79:93:
59:b7:f0:50:66:cc:4d:de:39:bb:b5:4f:7e:19:20:c9:95:ab:
6b:ac:4e:79:f7:98:e1:df:cd:41:64:78:fc:55:b6:9e:fb:cd:
a8:f4:d2:56:23:19:74:3b:d6:4c:3d:ee:b2:4c:6a:ed:a3:75:
15:0f:f1:80:66:03:11:5e:0c:ca:31:a1:74:69:77:9a:38:21:
cf:6d:b7:2a:d9:fa:1a:b3:dc:b8:9d:22:ab:5b:60:80:df:90:
a1:f6:4f:4a:d0:9c:fc:f8:e9:5d:f6:fb:ce:a4:35:78:cc:c4:
e4:33:e3:d1:48:88:b3:28:1b:a9:12:12:15:cf:89:73:f1:b5:
c8:be:b6:3e:3a:ea:8f:91:15:d0:c3:03:11:e5:66:18:f2:0b:
5c:99:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:52 2026 by rpki-client