Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/XZSvF1-oCwgkEvyaA1zcCmMQRoQ.roa
File: XZSvF1-oCwgkEvyaA1zcCmMQRoQ.roa (raw, json)
Hash identifier: 7a2EYboJJn6eoh9awdDzHi5JfGRJnf5woWJ2uiIzujI=
Subject key identifier: 5D:94:AF:17:5F:A8:0B:08:24:12:FC:9A:03:5C:DC:0A:63:10:46:84
Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial: 01A1216340D974829FC37BECB385BC34E68C
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/XZSvF1-oCwgkEvyaA1zcCmMQRoQ.roa
Signing time: Fri 09 Oct 2026 15:58:35 +0000
ROA not before: Fri 09 Oct 2026 15:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218443
IP address blocks: 80.173.138.0/23 maxlen: 23
85.137.31.0/24 maxlen: 24
2a0d:3c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:63:40:d9:74:82:9f:c3:7b:ec:b3:85:bc:34:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Validity
Not Before: Oct 9 15:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d94af175fa80b082412fc9a035cdc0a63104684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:f2:a7:eb:33:e7:06:36:8d:64:88:71:86:
35:07:54:21:91:f4:f3:c6:b3:a2:15:a3:a0:a5:53:
ab:9b:80:b1:f0:6d:88:b4:bb:6c:51:f8:58:f1:3c:
67:17:a1:10:c7:47:a1:dc:92:83:a2:8a:0a:29:88:
aa:70:a0:8d:da:da:ce:cf:d4:8f:4c:81:98:a1:18:
03:9b:bb:8d:7c:b4:3a:e2:9a:59:29:b2:e8:71:0b:
f2:67:b8:7e:43:66:dd:e4:bd:d2:d1:48:3c:e7:92:
77:4c:8e:6c:67:e7:c8:df:c9:8f:6d:45:b9:80:88:
71:10:c6:1a:be:53:86:e1:f3:65:de:61:72:df:92:
61:bb:0d:9a:ee:98:6c:36:fa:67:72:67:30:2a:74:
7f:bd:91:ee:e8:98:fb:4b:a5:aa:03:51:b2:82:7c:
ca:63:b2:7d:de:2f:39:f8:97:09:7a:c8:45:98:9b:
80:b0:c9:84:bf:d5:20:9e:4e:db:7d:ba:ff:31:d8:
37:09:1d:1d:7b:aa:6d:a8:c6:a9:64:99:f7:91:81:
be:3a:84:fe:ad:79:c0:25:38:ea:ef:66:ba:92:5e:
2e:17:27:3b:72:05:68:80:5b:2e:d3:34:17:d8:6c:
43:d6:4c:4b:5d:2a:12:38:21:8c:dd:ee:d9:b6:27:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:AF:17:5F:A8:0B:08:24:12:FC:9A:03:5C:DC:0A:63:10:46:84
X509v3 Authority Key Identifier:
keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/XZSvF1-oCwgkEvyaA1zcCmMQRoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.138.0/23
85.137.31.0/24
IPv6:
2a0d:3c0::/40
Signature Algorithm: sha256WithRSAEncryption
9a:d0:1e:45:cb:71:a8:9d:d4:04:7f:ea:84:95:c0:1d:11:01:
4a:e5:df:98:f8:a1:0a:93:f6:9f:3b:9f:a7:b2:07:62:2f:07:
d1:5f:ae:9a:12:3e:33:de:e9:79:0a:e8:59:ea:b7:ab:e2:e8:
bd:f5:85:46:ac:53:a9:8f:37:dc:e0:c8:30:df:71:0d:a6:3b:
5b:d0:5b:fd:42:d6:52:6e:37:8d:4a:9c:05:24:04:04:b9:ef:
19:a4:d8:97:8b:3c:19:34:d4:e6:7e:66:70:76:ec:0b:58:76:
e6:d2:c2:21:e8:01:4a:e0:a2:b3:a8:69:5f:a1:34:91:d4:9d:
b1:0c:c6:5d:38:63:f3:3e:b2:89:6c:8f:46:2e:c3:4c:c8:75:
21:0d:f7:78:ef:4e:ed:27:79:16:b5:51:7a:3b:ef:52:14:9d:
31:bd:a1:61:8a:0c:a6:8b:90:79:fb:fe:02:6e:45:71:35:89:
4e:2e:02:26:42:84:0d:8e:58:89:10:7c:21:6d:c5:b8:3b:05:
51:c4:d1:4d:6c:eb:07:ca:17:55:96:53:3a:ef:2d:b2:be:43:
c6:b1:ff:48:25:cd:ad:35:97:ee:a0:bb:de:e7:5e:50:5e:ed:
9b:8a:f8:f2:52:eb:a7:40:d0:7a:97:3d:61:21:1f:bf:64:c4:
04:17:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:38 2026 by rpki-client