Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/XPXDfE9hEmFV-YuIeeVt-4so_xE.roa
File: XPXDfE9hEmFV-YuIeeVt-4so_xE.roa (raw, json)
Hash identifier: Hs1aR29Ma+KpcNcgPkHRaTKZ5zjrxvKn0RGwSVclVio=
Subject key identifier: 5C:F5:C3:7C:4F:61:12:61:55:F9:8B:88:79:E5:6D:FB:8B:28:FF:11
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A015E38AE89D7E45568986050051AF1F04
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/XPXDfE9hEmFV-YuIeeVt-4so_xE.roa
Signing time: Tue 18 Aug 2026 17:20:28 +0000
ROA not before: Tue 18 Aug 2026 17:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9354
IP address blocks: 2.17.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:e3:8a:e8:9d:7e:45:56:89:86:05:00:51:af:1f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 18 17:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf5c37c4f61126155f98b8879e56dfb8b28ff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:58:ae:b6:8d:a9:7f:1c:19:73:4c:39:cb:
c6:93:f6:bb:63:9e:c4:f5:69:9a:e9:70:c5:af:36:
08:23:2c:71:52:75:79:de:ad:c2:03:ed:90:48:44:
d6:3a:76:2d:74:fc:c2:07:16:96:f4:97:0b:66:11:
bf:95:d2:f5:19:72:c5:5b:a5:86:ae:50:41:c6:b9:
07:57:d5:9e:37:ba:b4:da:9b:e2:35:44:41:ea:15:
f2:ef:6b:12:ce:83:6d:3f:cc:70:52:df:05:a5:25:
2b:45:4a:b7:bc:f5:7d:5c:cc:a6:05:29:06:6f:3b:
ff:93:e0:3b:3a:57:c8:9f:52:e8:13:70:23:e2:d6:
47:c7:a0:59:ae:6a:59:38:68:f0:14:ab:5d:06:8c:
c3:1d:de:56:ff:d9:44:19:3b:a2:b0:57:e7:fd:71:
48:02:7f:05:fa:8c:ab:37:20:22:1e:1a:1b:b6:a8:
4e:55:6f:95:e1:e5:1b:91:0f:37:ec:6a:e1:cd:4d:
d3:1b:d4:4e:b8:04:23:0d:fe:9b:82:58:b7:bc:14:
63:e9:e3:aa:79:dd:23:3c:f5:01:06:e7:50:55:4e:
22:fa:b2:99:64:61:be:4f:90:d6:13:46:20:0d:eb:
07:52:22:e6:bb:a7:a7:51:5a:9a:8b:28:57:4f:7c:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:C3:7C:4F:61:12:61:55:F9:8B:88:79:E5:6D:FB:8B:28:FF:11
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/XPXDfE9hEmFV-YuIeeVt-4so_xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.16.0/22
Signature Algorithm: sha256WithRSAEncryption
56:81:45:c6:fb:8a:15:f5:68:6b:b9:ef:ac:10:95:bb:67:ca:
43:3d:17:71:46:10:10:d4:6f:9a:c6:a1:89:f9:82:54:40:89:
91:ff:fd:84:0a:c9:fd:7a:91:47:a3:3d:3b:ed:c6:56:d2:09:
a3:f9:d9:f6:17:f0:d2:3d:12:ef:86:a7:1a:1e:71:7e:e2:76:
7e:37:17:56:e6:a9:c5:06:85:40:07:90:b5:ea:05:1a:bb:f1:
e8:80:d6:96:42:bd:c8:0e:2b:45:f5:35:43:30:55:79:25:9b:
bc:80:52:32:f0:e4:ea:1a:b1:dd:2f:02:ef:2c:ef:dc:8a:68:
c2:8c:87:86:9d:58:e7:ce:0f:fe:b1:d2:db:e4:97:a6:62:c3:
b2:f0:d5:d4:0b:49:50:c0:8a:a3:69:b1:23:54:a3:dc:c5:65:
10:ed:3a:76:9c:0d:1e:ba:1d:0c:a4:e7:05:2b:7a:45:82:c8:
0f:15:d6:ff:15:6e:c1:a6:b9:26:65:dd:63:e4:40:4c:ed:61:
46:a5:f3:80:2d:0e:ca:f4:26:95:1d:ac:40:a1:ca:c8:be:c0:
cc:c9:ef:ed:9c:ae:7f:7a:a0:67:92:85:46:8a:2d:7a:ab:79:
b3:4b:4d:5e:fb:cd:44:71:5d:c2:66:76:7b:55:08:3b:bf:dd:
50:68:af:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAV44ronX5FVomGBQBRrx8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjYwODE4MTcyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2Y1YzM3YzRmNjExMjYxNTVmOThiODg3OWU1NmRmYjhiMjhmZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxBYrraNqX8cGXNMOcvGk/a7Y57E
9Wma6XDFrzYIIyxxUnV53q3CA+2QSETWOnYtdPzCBxaW9JcLZhG/ldL1GXLFW6WG
rlBBxrkHV9WeN7q02pviNURB6hXy72sSzoNtP8xwUt8FpSUrRUq3vPV9XMymBSkG
bzv/k+A7OlfIn1LoE3Aj4tZHx6BZrmpZOGjwFKtdBozDHd5W/9lEGTuisFfn/XFI
An8F+oyrNyAiHhobtqhOVW+V4eUbkQ837GrhzU3TG9ROuAQjDf6bgli3vBRj6eOq
ed0jPPUBBudQVU4i+rKZZGG+T5DWE0YgDesHUiLmu6enUVqaiyhXT3zqpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFz1w3xPYRJhVfmLiHnlbfuLKP8RMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvWFBYRGZFOWhFbUZWLVl1SWVlVnQtNHNvX3hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAhEQMA0G
CSqGSIb3DQEBCwUAA4IBAQBWgUXG+4oV9Whrue+sEJW7Z8pDPRdxRhAQ1G+axqGJ
+YJUQImR//2ECsn9epFHoz077cZW0gmj+dn2F/DSPRLvhqcaHnF+4nZ+NxdW5qnF
BoVAB5C16gUau/HogNaWQr3IDitF9TVDMFV5JZu8gFIy8OTqGrHdLwLvLO/cimjC
jIeGnVjnzg/+sdLb5JemYsOy8NXUC0lQwIqjabEjVKPcxWUQ7Tp2nA0euh0MpOcF
K3pFgsgPFdb/FW7BprkmZd1j5EBM7WFGpfOALQ7K9CaVHaxAocrIvsDMye/tnK5/
eqBnkoVGii16q3mzS01e+81EcV3CZnZ7VQg7v91QaK8c
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:21 2026 by rpki-client