Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/XC8Kc5mTk7fezpKSbjB-kbqsKvo.roa
File: XC8Kc5mTk7fezpKSbjB-kbqsKvo.roa (raw, json)
Hash identifier: M3kIgDZZDu2U8kGSDYDggwFey+teEHBCeu/XLvDao3w=
Subject key identifier: 5C:2F:0A:73:99:93:93:B7:DE:CE:92:92:6E:30:7E:91:BA:AC:2A:FA
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A140DC43C028925FF43712083E83581A2D
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/XC8Kc5mTk7fezpKSbjB-kbqsKvo.roa
Signing time: Thu 15 Oct 2026 18:38:59 +0000
ROA not before: Thu 15 Oct 2026 18:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206007
IP address blocks: 178.251.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:dc:43:c0:28:92:5f:f4:37:12:08:3e:83:58:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Oct 15 18:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c2f0a73999393b7dece92926e307e91baac2afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:fd:91:24:cf:19:e8:92:83:e5:bb:02:ec:
79:3c:c0:aa:db:b6:76:cc:74:5b:ee:3d:b2:48:04:
8d:36:ac:b3:9e:59:96:33:3f:da:f2:96:3e:1c:4b:
48:d2:b6:9e:e4:d3:a2:33:ad:ad:b7:ea:7f:c2:0b:
75:24:b7:72:53:d1:49:cd:89:96:e2:f1:83:76:a6:
6f:6f:cd:b9:e3:48:73:ca:e2:52:f2:b5:ed:65:75:
ee:51:63:11:50:c8:18:2e:28:b1:1f:87:00:df:38:
05:bd:23:e8:d8:0d:fd:dc:96:93:2d:57:c1:15:18:
92:5d:65:d7:48:3d:15:14:1e:f4:cd:b5:45:4a:f7:
2c:58:c7:06:e1:72:e8:04:75:07:0f:81:77:b6:1c:
c2:1c:d1:11:96:0b:6a:07:c7:f6:b9:85:65:84:00:
a3:23:a3:42:35:f1:76:b0:18:ad:63:ab:05:cf:6a:
68:60:78:2e:57:45:48:3a:77:89:72:86:9b:92:1c:
2d:70:3a:dd:56:e4:af:ef:34:ee:2b:dd:ee:4a:64:
53:b7:61:61:1d:ee:3f:8c:e6:43:92:90:4c:4b:e7:
94:12:84:60:90:97:4b:19:70:2d:65:31:ad:67:bc:
d0:43:ba:50:74:7e:8c:16:45:3e:9b:f6:26:70:b9:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:0A:73:99:93:93:B7:DE:CE:92:92:6E:30:7E:91:BA:AC:2A:FA
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/XC8Kc5mTk7fezpKSbjB-kbqsKvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.207.0/24
Signature Algorithm: sha256WithRSAEncryption
45:13:82:d1:01:0c:c4:35:1c:58:3b:9b:aa:82:06:39:e0:40:
b5:dd:34:5c:80:6d:a5:f4:0c:49:0d:8d:ab:97:25:12:79:94:
45:d1:7e:79:f0:68:05:54:b8:fc:7e:ad:41:1a:02:f1:de:1b:
94:e8:fe:e4:53:75:a4:75:6b:ce:eb:eb:ff:18:5e:b7:13:36:
fc:a8:46:59:9a:bf:72:43:cf:6f:59:2a:52:7d:13:70:d1:e5:
e9:e5:7d:33:1a:ef:33:80:27:21:36:aa:00:dd:d1:47:1d:34:
80:84:f1:7d:e3:67:25:73:7d:29:58:d2:94:00:2f:62:f6:1d:
66:5c:de:e5:40:4a:b4:88:b4:cd:aa:b4:6d:b9:72:69:8a:5c:
ac:04:a3:ab:30:31:ed:98:ea:5f:b9:e7:29:97:21:6f:af:b0:
25:5a:32:0c:d0:1c:23:92:ac:f2:d4:08:b0:f7:65:b3:c1:c8:
95:ad:09:65:0f:cb:e3:6f:84:dd:f6:01:26:3c:f2:67:cf:84:
4f:9f:30:9d:c0:ef:10:9d:90:3a:5e:0e:6a:57:db:b5:d5:ea:
9d:c6:ea:84:b4:bf:63:0e:1d:cd:47:83:e8:0c:70:11:d3:fd:
81:62:e8:7f:36:df:2b:0a:de:7e:da:d7:28:66:16:e5:f6:9a:
e8:46:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:32:50 2026 by rpki-client