Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XJ-D02Whd7EQVqh2dHVBWvWfnPw.roa
File: XJ-D02Whd7EQVqh2dHVBWvWfnPw.roa (raw, json)
Hash identifier: LFTNZBG9gzSjQtdFWVQVE4xtluN9DWmrqLG0fkfHyqU=
Subject key identifier: 5C:9F:83:D3:65:A1:77:B1:10:56:A8:76:74:75:41:5A:F5:9F:9C:FC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A162EBCC1942248180078057F86EDF2F2F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XJ-D02Whd7EQVqh2dHVBWvWfnPw.roa
Signing time: Thu 22 Oct 2026 09:23:02 +0000
ROA not before: Thu 22 Oct 2026 09:23:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213367
IP address blocks: 2a0c:9a40:e180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:eb:cc:19:42:24:81:80:07:80:57:f8:6e:df:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 22 09:23:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c9f83d365a177b11056a8767475415af59f9cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:8c:1e:fb:aa:3a:bf:2e:31:e0:b3:7c:87:
61:b2:ef:4f:51:c8:3b:8e:39:db:62:d2:d6:b3:c1:
7a:a3:37:5f:73:45:b6:92:d6:0f:36:00:79:a2:b1:
74:d1:81:60:7e:58:98:2c:d8:31:33:5d:cc:19:bb:
7c:12:0b:97:73:b0:f8:a0:16:2b:10:42:f9:17:62:
64:4e:de:5c:ad:55:be:63:2f:77:98:07:78:d1:89:
0d:8b:6f:15:ef:9a:c9:ee:22:6b:96:8d:5a:a0:ca:
c4:e0:e9:90:b9:4f:92:ff:24:f4:cf:5a:93:7a:23:
d8:46:30:ca:a7:19:50:50:64:79:eb:99:2a:37:f3:
a8:93:bb:9b:94:ac:13:e1:f9:26:93:4a:c8:1e:81:
25:80:a9:d5:a6:e9:ef:70:66:7c:7c:71:fb:97:b8:
e6:66:5d:56:3e:16:af:c3:85:28:32:99:29:90:af:
33:ab:61:ff:5e:cc:0a:9e:11:84:e8:30:5f:50:46:
3c:ca:39:f6:b2:0d:18:9e:e0:74:c0:7c:cc:a9:ab:
6d:2c:8a:1e:08:fb:0d:9a:4b:d4:f6:f8:c1:87:41:
ef:99:64:f5:43:ee:95:d1:55:e1:0a:ad:fb:50:01:
68:13:98:d6:d9:02:4e:c7:c6:88:45:a5:b2:7d:2a:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:83:D3:65:A1:77:B1:10:56:A8:76:74:75:41:5A:F5:9F:9C:FC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XJ-D02Whd7EQVqh2dHVBWvWfnPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e180::/48
Signature Algorithm: sha256WithRSAEncryption
a4:1d:e6:70:ea:38:76:a2:59:8c:d4:05:e1:aa:b6:dc:c3:18:
aa:fb:bc:0d:29:0f:0a:99:6d:c6:fa:34:d7:8f:90:c2:36:44:
e4:48:e3:ae:de:0b:95:bf:1a:6a:c3:61:dc:4b:82:86:7c:7e:
8e:58:96:af:a9:8c:2a:a0:a3:0b:ce:73:75:25:17:5a:0a:90:
55:39:a2:98:88:56:17:14:02:67:5d:e2:4d:86:76:14:3c:2e:
55:46:c7:ac:00:de:41:e2:e0:ac:c3:e0:fa:65:5a:32:10:02:
8f:34:4e:51:58:f5:86:36:dc:bc:c1:5e:0d:bc:d6:03:f0:60:
11:71:fe:a3:6d:d1:f8:17:70:4a:18:90:84:ff:dd:22:9c:14:
eb:74:40:62:38:1e:b7:b6:5e:cc:4b:43:3d:12:dc:ec:39:30:
ff:a9:a9:f4:af:e1:3c:f4:60:3e:b3:af:ec:ce:76:d1:8c:c2:
5a:14:9d:89:4d:13:cf:b2:dd:38:00:05:28:30:6a:ce:ad:3d:
88:9a:50:70:b9:2e:63:dc:07:54:90:cc:ea:a8:d7:74:b3:89:
03:36:2f:ed:fb:ff:1b:82:c8:14:6e:69:11:22:2a:f0:49:27:
30:90:75:2f:bf:1d:ad:13:aa:16:b5:b3:d0:c0:ba:c0:44:8f:
06:6f:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:10 2026 by rpki-client