Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XE1FJVevVw_6AZaTGH5Xt7NpGbQ.roa
File: XE1FJVevVw_6AZaTGH5Xt7NpGbQ.roa (raw, json)
Hash identifier: iZsElA0NH4jRMAFz51LnZXOdtAORvc5BPwLbpXxzIVA=
Subject key identifier: 5C:4D:45:25:57:AF:57:0F:FA:01:96:93:18:7E:57:B7:B3:69:19:B4
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019F4B5AB888247F7ADDFC24D4D0E9B661D8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XE1FJVevVw_6AZaTGH5Xt7NpGbQ.roa
Signing time: Fri 10 Jul 2026 09:27:44 +0000
ROA not before: Fri 10 Jul 2026 09:27:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219236
IP address blocks: 2a0c:9a40:8bd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:5a:b8:88:24:7f:7a:dd:fc:24:d4:d0:e9:b6:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 10 09:27:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4d452557af570ffa019693187e57b7b36919b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:5a:82:b2:0e:45:c3:50:d5:f0:38:79:4b:
f2:93:3d:87:12:7c:12:97:2e:91:84:b9:34:de:6a:
7c:d1:35:25:f6:30:4d:68:1c:77:41:ce:12:1f:9f:
07:65:4f:24:7e:52:eb:56:35:56:a2:23:f5:63:78:
b9:da:11:60:2a:4f:b4:5c:e4:6f:e3:29:a5:58:cc:
f7:87:3f:87:13:2f:1e:e9:2f:ba:23:29:ac:52:55:
be:ea:7c:b2:d2:4a:4a:06:ee:e2:58:a8:49:72:43:
19:46:da:51:67:b7:99:3f:c6:f8:77:2c:95:f4:2f:
1c:38:5a:5e:c6:50:07:8e:cf:13:ea:72:de:da:d8:
87:1b:2d:d7:eb:01:1d:0c:ea:05:dc:8c:dc:93:33:
8d:ac:af:29:c3:d6:8c:a4:dd:1d:1c:1c:e8:02:d4:
bf:3e:4b:9c:76:f9:5e:33:a1:ed:ba:d2:16:1d:6e:
a2:2c:41:ae:f8:91:2a:2a:85:b4:7a:3a:c7:a3:6b:
5e:14:92:3b:12:00:71:76:4d:b0:85:d3:8e:64:d1:
fa:4c:af:dd:f6:68:90:f2:af:fe:aa:93:da:35:4e:
05:f1:ea:92:b5:4d:59:07:e4:cf:99:b0:f6:d7:ab:
38:d7:a0:b3:3a:12:9d:65:cb:ce:1a:1e:c7:b8:3d:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:45:25:57:AF:57:0F:FA:01:96:93:18:7E:57:B7:B3:69:19:B4
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XE1FJVevVw_6AZaTGH5Xt7NpGbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8bd0::/48
Signature Algorithm: sha256WithRSAEncryption
97:a1:f3:09:28:94:70:d2:8b:a9:d1:13:73:6f:fb:99:bf:62:
8a:59:76:86:14:50:8d:68:e1:ed:e1:99:df:e5:33:a8:5c:5c:
13:fc:a2:d7:db:87:de:f6:de:86:91:a5:8b:ce:eb:d0:82:53:
80:a1:aa:be:a4:74:c4:89:85:6f:0c:dd:b9:e7:2b:e0:56:36:
f1:ce:a9:02:49:18:9d:43:eb:4b:b3:ad:ed:d7:cf:eb:a7:ad:
32:a4:e5:56:31:a3:58:fc:5e:59:7f:54:e9:55:89:42:30:3c:
2f:d9:91:d9:2d:42:c6:2a:a6:ac:d6:e7:84:0f:fc:86:6b:f3:
db:40:ea:4f:47:58:8d:30:50:ed:e8:ff:ce:65:f3:cc:21:94:
43:7f:57:00:fd:3b:2f:7a:44:5d:bb:78:ec:84:7a:4f:6a:88:
7f:b1:7a:1e:5e:0c:d7:15:7f:ce:81:55:60:a2:b2:8c:13:e8:
59:f3:a3:17:b8:31:18:6a:c6:ff:22:10:93:7f:e0:a0:5a:bf:
c5:42:ec:6f:8d:9e:04:52:09:16:a1:20:0f:fe:0d:3e:2e:1a:
7c:99:4d:f9:41:95:81:93:d8:d4:af:da:0a:75:3c:28:e1:20:
c4:95:e8:a3:00:f3:b0:31:c1:90:83:4e:a4:0b:03:98:4c:2f:
20:55:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:20 2026 by rpki-client