Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/XHxiBSVzvTw-dCwas2J4bFKSAhU.roa
File: XHxiBSVzvTw-dCwas2J4bFKSAhU.roa (raw, json)
Hash identifier: liDTMpdPhE+d6WAzbMGbLRw8JgenbEC/JfzGupFtPH0=
Subject key identifier: 5C:7C:62:05:25:73:BD:3C:3E:74:2C:1A:B3:62:78:6C:52:92:02:15
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A0F4321C873788FD83973FC228FEA1B59A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/XHxiBSVzvTw-dCwas2J4bFKSAhU.roa
Signing time: Wed 30 Sep 2026 21:21:59 +0000
ROA not before: Wed 30 Sep 2026 21:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 87.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:32:1c:87:37:88:fd:83:97:3f:c2:28:fe:a1:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 30 21:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c7c62052573bd3c3e742c1ab362786c52920215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:69:fa:b9:3c:1d:50:e0:22:02:c0:a1:74:
07:d6:c7:1b:ae:18:e4:1d:80:fa:bc:60:ee:5c:61:
c4:c5:5f:d8:af:52:2a:fa:a1:42:dc:00:7a:c5:2a:
44:4b:e8:97:85:85:ee:a4:6f:a5:38:0d:2b:f3:4d:
5b:fa:59:92:de:6f:73:95:a3:e5:d3:a1:f2:86:85:
ef:61:12:2e:70:49:64:ba:07:4b:f6:cd:07:93:44:
2b:0d:07:f5:e3:8f:e2:9b:93:35:cd:ba:d4:e9:1b:
0a:99:94:e5:21:5a:d8:0e:07:c7:a5:e7:c2:34:7b:
a7:89:4b:6c:a5:c1:66:3d:df:bf:22:35:2f:c1:0c:
d0:b7:27:13:55:9a:0d:8f:89:55:be:ee:b9:a7:0d:
ab:4e:b7:d0:b4:15:9e:48:0e:b0:c1:89:5e:a9:8d:
e2:e7:a2:41:25:c0:b9:67:51:1a:f6:1b:72:e8:bc:
d3:89:3e:94:71:6c:e7:1a:7b:5c:b2:fc:30:6b:0d:
22:ee:9d:d7:c0:85:db:fc:09:b1:9b:02:bd:39:3c:
7f:43:7b:74:a6:0b:34:3c:ab:47:3f:28:b3:42:67:
79:76:7b:f7:92:9c:3a:47:f5:25:15:cb:fc:a4:83:
e9:fe:b5:7b:eb:ef:9d:b5:d7:d4:94:22:d2:85:47:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:62:05:25:73:BD:3C:3E:74:2C:1A:B3:62:78:6C:52:92:02:15
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/XHxiBSVzvTw-dCwas2J4bFKSAhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.101.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3d:12:50:fb:15:b1:a4:60:82:11:bf:d0:dc:b5:81:ed:2d:
56:39:d2:03:97:fc:a4:c2:a9:b0:43:26:e6:0f:da:89:e2:43:
bc:97:7d:24:d9:76:6d:c7:d8:94:d4:e5:e6:24:30:6d:af:4b:
80:b8:fc:ae:47:ad:0d:c9:44:af:7b:27:8b:8c:f4:ae:e1:bc:
8e:96:dc:55:85:44:f1:34:72:02:35:5b:a5:cf:0a:33:4a:ff:
96:9a:b5:98:ae:47:a5:1e:e5:ae:be:07:b5:a0:c9:40:b7:68:
f3:0a:5b:98:f8:5b:a9:a9:72:2b:cf:18:66:52:b2:ad:1d:df:
70:27:fa:35:e3:5d:51:6d:b1:e2:bd:aa:8d:72:ab:4c:4e:24:
93:d5:89:8f:c7:8a:97:04:97:66:c0:b1:18:c5:a7:4a:9a:47:
9c:a9:15:52:56:77:63:73:2f:a3:f4:87:d9:42:ac:25:fa:c6:
f4:96:2e:51:af:d5:78:58:4b:37:ac:76:ba:2d:b3:fb:93:8a:
2c:dd:2e:c4:9a:bf:f3:26:1e:60:e9:ef:70:ee:e8:db:ff:74:
8d:5f:b4:19:48:f2:80:4e:30:95:e9:69:80:79:b2:a4:30:66:
b1:71:59:06:02:fb:e4:1b:f2:87:5f:6f:e4:e0:c4:a9:cb:e9:
1a:1b:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:57 2026 by rpki-client