Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/XNdh_7iXFteUhdTSauAzw8Uzsic.roa
File: XNdh_7iXFteUhdTSauAzw8Uzsic.roa (raw, json)
Hash identifier: Is7nAY4phsaI02dTDHxcL61wtBa88W43wtk4lrRcslk=
Subject key identifier: 5C:D7:61:FF:B8:97:16:D7:94:85:D4:D2:6A:E0:33:C3:C5:33:B2:27
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01A10BB160F0DD273830C11559B155DFF890
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/XNdh_7iXFteUhdTSauAzw8Uzsic.roa
Signing time: Mon 05 Oct 2026 10:52:16 +0000
ROA not before: Mon 05 Oct 2026 10:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8280
IP address blocks: 151.236.29.0/24 maxlen: 24
212.52.16.0/24 maxlen: 24
2a03:f80:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b1:60:f0:dd:27:38:30:c1:15:59:b1:55:df:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Oct 5 10:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cd761ffb89716d79485d4d26ae033c3c533b227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:82:85:7b:19:6a:4c:7d:74:f8:85:79:06:
4b:a4:0b:6a:15:69:13:2e:3b:9d:78:3b:ea:8c:22:
5b:05:ad:b4:61:4e:73:2f:b7:69:f5:b6:59:96:38:
6a:8e:a7:ca:58:35:f3:48:b3:94:0e:5a:76:95:f4:
77:2e:27:39:ea:e0:14:15:57:c3:b8:82:98:93:ef:
62:74:6c:25:4f:d7:63:00:0a:79:b7:4c:a5:22:17:
53:84:73:2a:57:63:dc:b6:14:b4:0f:15:2c:69:5e:
f1:5a:8f:ec:ae:eb:4a:48:20:5f:3c:6c:77:d9:c7:
e3:20:22:7f:52:e4:6f:76:15:86:74:56:1c:ad:0f:
24:5e:7c:55:b9:8d:d7:60:3c:35:bb:b2:fc:f5:c9:
fc:d8:e5:5d:c2:54:c2:e2:1a:fd:29:50:41:2a:2f:
56:b9:53:0a:46:31:f2:b5:e6:98:7d:26:ed:46:91:
db:fb:c0:5e:b1:a7:41:e9:2c:8b:61:59:06:19:8e:
2d:2e:96:3e:40:c7:a4:37:bf:d6:6d:c8:ce:8c:fd:
a5:58:00:df:34:bb:85:f6:92:8e:6c:df:a8:66:7d:
65:a4:dd:65:c5:73:19:ab:8b:e6:7c:e2:e8:fb:24:
c7:fe:4d:58:59:c6:64:44:d4:c4:08:cb:13:65:79:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D7:61:FF:B8:97:16:D7:94:85:D4:D2:6A:E0:33:C3:C5:33:B2:27
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/XNdh_7iXFteUhdTSauAzw8Uzsic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.29.0/24
212.52.16.0/24
IPv6:
2a03:f80:30::/48
Signature Algorithm: sha256WithRSAEncryption
5f:9a:09:ad:6e:46:0a:ca:29:1f:81:f2:0b:fe:c0:17:9f:c1:
80:b4:b9:b4:b3:2b:59:69:9c:ee:71:94:8f:6f:b8:48:f7:c8:
81:cf:c9:9b:d6:2e:bf:1b:a2:dd:9c:2c:8d:79:91:b7:b4:1b:
52:8c:a7:a4:2a:12:28:d2:49:0d:60:5e:79:c0:4d:7b:4e:60:
93:d2:91:db:69:cd:14:e3:64:69:f3:ba:2e:1f:1b:da:78:9c:
51:0b:26:fa:46:e5:34:d5:52:62:f7:48:51:19:85:e5:97:8e:
b9:bf:2e:29:0c:fd:bc:8f:43:f3:96:f3:ec:58:61:70:ae:32:
ae:f7:f2:9f:c7:f1:f1:bc:3e:80:46:a5:62:00:3b:80:62:9c:
6c:55:47:fd:e6:b1:66:ed:77:f6:b7:a5:66:85:63:73:7c:dd:
c7:7a:5e:c1:fe:a0:49:47:51:55:bc:09:c1:3b:cd:71:f2:04:
fd:78:0e:f1:40:ec:51:d8:dc:a4:1f:e7:4f:95:33:ad:be:b5:
74:ea:73:16:dd:46:36:8d:74:a8:29:60:dc:9c:8a:2d:92:1e:
f6:c6:02:f7:da:62:df:de:35:1c:35:76:e7:2e:4c:e0:ca:f0:
e8:be:c7:dc:76:bc:3e:28:ec:52:09:8a:f0:d9:50:be:38:e1:
d8:1d:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:07:53 2026 by rpki-client