Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XENEEJsMLUAv6S-FsXJfi_3dDMs.roa
File: XENEEJsMLUAv6S-FsXJfi_3dDMs.roa (raw, json)
Hash identifier: sy5r5dw7FzNtTG2ksQIR174TuzpaEcLb4bDBP/piRUA=
Subject key identifier: 5C:43:44:10:9B:0C:2D:40:2F:E9:2F:85:B1:72:5F:8B:FD:DD:0C:CB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F65551C53C03645A17B9C40924CE025B2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XENEEJsMLUAv6S-FsXJfi_3dDMs.roa
Signing time: Wed 15 Jul 2026 10:31:44 +0000
ROA not before: Wed 15 Jul 2026 10:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:55:1c:53:c0:36:45:a1:7b:9c:40:92:4c:e0:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 15 10:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4344109b0c2d402fe92f85b1725f8bfddd0ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:19:27:f9:6c:dc:60:7b:0a:f7:16:98:6c:
65:ea:26:5a:84:a1:17:88:95:e3:7b:2f:fb:f5:6b:
50:95:7d:fc:89:59:e4:a1:3f:d0:2d:06:92:dc:3b:
c3:1c:3d:65:f0:36:fb:3d:a5:a2:15:0b:6f:0a:74:
f4:97:79:86:ad:c6:79:95:9b:13:e9:6c:7d:4c:99:
96:e8:c7:51:1b:a7:20:51:96:38:95:4d:02:a5:9f:
13:68:e7:06:8c:31:5b:c6:d6:90:a2:9b:41:b4:dc:
d1:99:e2:4f:5f:4b:4e:b7:83:84:e1:6a:98:b1:28:
bc:71:26:ac:31:14:5a:d6:05:28:4c:91:df:e6:6a:
c6:f6:dd:83:81:11:67:45:6b:56:d4:b0:99:88:75:
c9:3b:6f:05:b3:12:fe:a6:d9:b5:76:77:96:3c:e4:
0f:c9:49:1e:73:13:cd:04:1d:3e:b2:e1:cf:dc:3f:
d0:92:fd:c7:29:3a:77:c9:66:5d:76:17:43:a7:cb:
61:b3:95:2e:56:0f:41:ba:c9:1d:8a:39:c4:1b:43:
7d:3b:bc:a0:bb:67:68:61:93:1a:06:0b:0b:33:20:
d3:c9:7b:ae:e3:1a:6d:3f:29:4d:22:1d:3a:c6:e7:
47:65:63:24:61:a2:01:58:e1:77:bf:78:1b:4c:ad:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:44:10:9B:0C:2D:40:2F:E9:2F:85:B1:72:5F:8B:FD:DD:0C:CB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XENEEJsMLUAv6S-FsXJfi_3dDMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:c980::/29
2a12:d080::/29
2a12:d200::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
50:73:9b:33:a2:93:26:be:ab:e9:3f:d0:d6:7b:fb:56:34:6f:
2c:e8:cc:26:8c:07:4d:fb:96:5b:a6:70:60:d1:52:65:74:1b:
e2:4f:dc:ba:fa:b8:12:dd:29:35:22:e6:6b:e1:9b:63:b5:be:
d0:ef:e8:4c:a1:74:9d:f3:05:89:8a:69:54:a3:f9:1b:e3:c6:
72:52:7b:69:7c:21:37:e2:c2:c8:53:42:6c:a2:66:a4:d6:ef:
77:39:04:af:0f:1e:09:b0:28:70:29:97:f4:1b:a1:1c:5c:09:
f7:ce:2f:d8:13:32:2f:4a:11:30:9f:9e:61:6f:ae:0b:9e:3f:
09:b0:a4:52:8a:0b:44:a0:fe:04:60:ac:b5:db:35:df:14:08:
3c:02:46:8c:b9:e2:c7:eb:5a:52:6a:f8:e4:6a:24:6f:95:3a:
ef:2b:85:48:99:bc:d7:0a:88:8d:d3:a5:1e:a6:8b:92:6a:29:
c1:1d:5a:84:05:30:ce:84:97:f7:9e:71:6e:f6:2c:50:35:a1:
9d:0c:19:c1:4e:c8:b9:51:5d:c0:0b:e4:0b:e9:14:89:fe:69:
7a:c3:30:e0:74:ed:78:54:be:88:21:f6:63:1f:e0:ac:d5:53:
04:8d:52:44:a4:79:8e:bc:e5:b1:d0:ce:9e:32:3a:12:0e:24:
ae:46:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:28 2026 by rpki-client