Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa
File: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (raw, json)
Hash identifier: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=
Subject key identifier: C6:37:D5:F4:C2:DE:4E:01:9D:56:F5:BB:1D:85:C8:CF:1B:EF:F9:82
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F236900E22C339D67AD592E38AA136920
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:e2:2c:33:9d:67:ad:59:2e:38:aa:13:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c637d5f4c2de4e019d56f5bb1d85c8cf1beff982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:c1:f1:c8:4c:9d:f5:95:8b:a4:d9:f4:ee:
5b:3b:28:72:2a:c5:04:c4:f2:1e:2d:ed:a3:43:4d:
ba:1d:1f:27:d4:94:ec:3b:96:70:5f:0f:e4:a6:c4:
e4:16:e6:71:ff:c3:e9:9f:6c:c6:f0:88:40:87:26:
1a:f1:a0:77:c9:11:0a:db:f9:10:0a:ba:9e:f0:44:
d6:54:d6:82:88:4c:0c:0b:1a:90:69:2f:e4:fc:19:
df:ef:9d:49:0a:13:ec:20:6c:a5:0d:67:59:8f:82:
82:7f:9e:5c:7e:9e:b6:7c:43:b8:7d:74:11:47:0e:
cb:6f:2f:54:ac:eb:a3:1e:72:ef:71:2a:b0:e0:bf:
38:70:6b:49:ba:e7:55:02:25:bb:31:80:b7:23:71:
ab:16:f7:22:6f:a8:48:45:7f:ac:9b:7f:c3:5c:4d:
46:ec:8c:70:b1:8c:19:b0:5c:7f:f6:f5:81:ce:71:
a2:aa:dc:48:5c:1b:48:0a:9f:d3:09:12:98:ec:f0:
eb:ba:1c:e3:94:3f:b1:b7:91:bd:75:ec:8d:c9:96:
ca:a8:a6:d0:11:af:99:5a:dd:37:6b:8c:fa:2e:a9:
d7:e2:15:4c:f9:72:16:ab:79:f4:9d:da:db:62:cb:
9b:65:5e:94:4e:29:c2:83:15:62:fb:5a:5d:43:49:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:D5:F4:C2:DE:4E:01:9D:56:F5:BB:1D:85:C8:CF:1B:EF:F9:82
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
Signature Algorithm: sha256WithRSAEncryption
84:04:68:3f:86:c6:be:5a:81:87:d3:e4:16:63:27:57:67:b2:
c2:09:f7:43:23:58:f2:5a:4c:1a:78:c2:8d:a0:e3:d6:ee:3f:
c1:3f:56:05:db:b7:2d:ab:e4:1b:0a:36:8c:2e:bd:b0:38:c6:
04:fb:a5:bf:ed:f6:dc:b6:07:2a:d9:3a:74:2c:c2:37:e0:eb:
3f:cc:30:d9:fc:7e:5e:4c:3f:f9:1f:2f:82:88:00:99:17:23:
45:54:f6:59:42:ae:ed:90:b2:fc:08:b5:86:a5:7f:13:ae:63:
a9:84:e0:3b:af:67:95:e3:3e:89:64:a4:38:5f:5a:eb:32:e0:
86:b0:26:49:d5:d5:06:48:5d:6f:2e:84:77:b0:a0:08:b6:1c:
51:c7:f6:77:a0:56:6e:a5:b9:18:b8:35:8f:df:88:c3:01:c6:
dc:d7:68:9e:01:e3:d2:3a:8b:42:15:bd:e6:c4:67:94:93:f9:
8e:53:82:2b:6d:97:a7:86:fd:0e:e4:4a:64:a9:fa:fc:24:b2:
93:74:93:b5:5f:45:ec:ce:6d:d7:e4:2e:9e:74:27:c3:17:3d:
bb:6c:37:31:40:9f:b2:37:46:82:20:87:07:83:24:b5:f1:74:
7a:39:50:8e:35:4a:11:4c:91:4b:c7:83:59:b3:c1:0e:98:43:
72:08:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:31 2026 by rpki-client