Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/XZZS0J9cNFB34TPouF3k8-ZfCvw.roa
File: XZZS0J9cNFB34TPouF3k8-ZfCvw.roa (raw, json)
Hash identifier: /aqeE5gEnv2LBAY7p2JR8leoHcxdA9dbAKTDFlT19hs=
Subject key identifier: 5D:96:52:D0:9F:5C:34:50:77:E1:33:E8:B8:5D:E4:F3:E6:5F:0A:FC
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C2F73DF261BF740EAE61A88AFE4F3
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/XZZS0J9cNFB34TPouF3k8-ZfCvw.roa
Signing time: Thu 02 Jul 2026 11:17:20 +0000
ROA not before: Thu 02 Jul 2026 11:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3258
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:2f:73:df:26:1b:f7:40:ea:e6:1a:88:af:e4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d9652d09f5c345077e133e8b85de4f3e65f0afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:42:17:e4:7d:f4:06:50:8b:43:79:fc:d5:
23:48:1e:be:54:3e:66:06:7c:2f:03:e1:80:5f:48:
75:2a:c2:fc:de:f1:c0:5a:f3:87:b4:d3:d1:60:b7:
91:c5:14:79:18:50:ae:f4:ca:f3:b3:62:9f:b6:22:
b4:22:5b:43:ba:1e:be:54:ab:02:3b:b8:f6:53:60:
ca:48:f4:cd:72:8f:31:34:f0:04:c9:2a:58:c7:19:
01:0a:01:67:40:52:b0:c2:dc:a1:51:b5:10:dc:9b:
67:9e:fa:70:5b:f2:e5:7f:a4:9a:81:a3:1a:0e:05:
9e:93:73:70:ae:0b:72:0e:94:32:11:63:99:ba:99:
9a:a3:7d:ac:9a:42:21:06:13:01:09:dd:10:d9:0e:
c4:37:b8:82:c9:c8:5f:19:e7:5c:35:e6:c6:0a:e2:
83:37:97:27:6e:f9:aa:54:81:d6:7b:6d:d3:3e:59:
7f:cc:75:0f:e0:5d:9b:47:9e:df:2b:af:cb:8b:a1:
99:35:38:c0:4b:16:7b:33:cf:21:84:c0:3e:5f:bd:
3c:08:ca:43:f4:aa:ec:dc:6d:ef:bd:b4:5e:38:ff:
6e:59:17:f7:63:dd:7a:a1:7c:2c:7f:59:7f:bf:d6:
8c:8d:9f:e3:f3:4a:01:90:34:a7:cd:a1:f7:05:fb:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:52:D0:9F:5C:34:50:77:E1:33:E8:B8:5D:E4:F3:E6:5F:0A:FC
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/XZZS0J9cNFB34TPouF3k8-ZfCvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
79:a5:f0:0e:9e:e1:e7:be:44:8d:99:e3:ee:d3:30:c2:0d:9c:
69:ba:19:ed:6a:07:c7:5c:c8:e5:fb:99:0f:5c:22:5b:ab:e2:
80:82:ca:db:07:81:ec:3b:66:f7:c8:32:57:5c:5d:67:7f:7c:
7b:9e:39:21:4c:ff:93:fe:c2:42:dd:a4:1c:50:da:53:2e:7e:
8d:42:7f:2c:d8:be:91:2c:4d:99:a4:e5:19:9c:8b:a7:09:5a:
90:3c:16:1f:b5:59:2b:ce:1c:03:d9:f4:f6:93:ae:ab:49:b0:
4e:ad:40:b4:83:53:26:6d:c9:32:49:af:cb:2e:9f:3b:27:12:
88:03:0d:c5:87:63:91:93:ab:62:be:08:08:2a:6f:b7:08:74:
8d:6e:93:4b:67:c4:2a:33:bc:68:a3:ad:67:a5:fe:d7:da:82:
98:dc:ae:f6:b5:9d:ee:5e:aa:2f:c6:87:61:f8:f6:f1:ee:75:
3f:b5:7b:51:f6:92:17:54:17:9c:63:a9:77:4a:0c:06:fa:c6:
6b:a8:80:7e:64:32:69:12:ab:7b:a2:72:9a:70:d7:8b:93:c2:
6f:0b:99:47:a9:23:0a:c8:e6:59:f5:94:61:57:1a:66:2d:b4:
6c:77:ec:27:75:48:72:e7:c2:57:32:5c:76:41:1d:18:14:98:
56:20:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:51:17 2026 by rpki-client