Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XmPsmHMxFazDvM2xbGaLp3fLVyQ.roa
File: XmPsmHMxFazDvM2xbGaLp3fLVyQ.roa (raw, json)
Hash identifier: JOOfK4OL+DmFI900GBlmjqXTXRIIUFiLNMdSmLjsg38=
Subject key identifier: 5E:63:EC:98:73:31:15:AC:C3:BC:CD:B1:6C:66:8B:A7:77:CB:57:24
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0DD675F78065C56888AB3FAB6A856DA67
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XmPsmHMxFazDvM2xbGaLp3fLVyQ.roa
Signing time: Sat 26 Sep 2026 11:08:54 +0000
ROA not before: Sat 26 Sep 2026 11:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399452
IP address blocks: 195.252.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:67:5f:78:06:5c:56:88:8a:b3:fa:b6:a8:56:da:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 26 11:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e63ec98733115acc3bccdb16c668ba777cb5724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:87:fc:3b:89:09:8a:bc:a3:9c:72:03:cb:
88:68:ed:7f:fe:3d:39:8e:a1:a9:67:a2:a0:95:e0:
ef:4e:89:75:ab:11:9f:47:a1:d5:68:60:08:f1:30:
57:a2:19:78:2c:4c:2e:ea:4b:0b:ec:70:39:e9:ef:
9d:8f:17:21:c8:7a:e2:3a:7a:99:9e:10:7f:8a:24:
13:b0:32:4b:92:57:6d:c5:19:5a:25:8e:c7:59:9b:
db:b2:ac:99:aa:02:fa:6d:ee:fb:a9:94:fd:63:4d:
a3:ce:6a:7e:d5:fe:bb:62:42:58:7c:d6:34:fc:64:
77:7a:bc:86:3f:cf:fe:09:9c:60:c7:c5:cf:60:ec:
54:fe:14:ae:46:e6:ef:75:f7:19:ae:39:3b:e3:87:
4a:09:6f:e6:bf:2f:f7:64:75:e8:af:9c:5f:59:a8:
6f:64:03:5c:ff:1b:1f:0a:40:e0:cf:a6:c6:99:ba:
94:2f:cd:3f:21:15:16:8b:97:47:86:a7:d5:77:88:
45:25:db:3a:3e:41:b9:7c:c8:18:d6:36:a1:d5:bd:
90:66:e3:07:97:95:98:94:95:da:e3:f9:e2:f6:5d:
37:4b:d2:74:2c:e0:5e:14:31:47:b3:0b:23:b4:6b:
69:06:59:fd:b4:78:8f:6e:06:4d:1d:80:96:ab:9d:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:63:EC:98:73:31:15:AC:C3:BC:CD:B1:6C:66:8B:A7:77:CB:57:24
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/XmPsmHMxFazDvM2xbGaLp3fLVyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.182.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dc:ff:76:7f:cf:a4:81:87:88:aa:65:75:86:b0:46:2a:ed:
1e:3b:2a:30:5d:d5:a5:20:b5:1e:fe:07:21:52:d8:a4:50:1e:
93:4b:c8:5a:38:90:e7:e4:79:38:8c:b8:ae:7f:d6:e9:e5:f4:
21:34:6b:a4:c7:cd:9b:20:27:44:e6:3e:37:64:ee:4a:1a:e4:
be:83:c5:92:14:7f:21:5e:a1:6d:1c:00:34:36:29:79:de:bd:
a7:37:c4:b0:3f:01:1e:df:89:01:77:70:01:49:c3:80:15:e6:
c8:71:3e:b3:7a:ab:18:1e:d3:04:f8:09:94:83:70:1d:8e:2a:
23:30:93:53:c2:fa:3a:d3:87:22:89:e6:08:47:78:fa:bf:eb:
95:74:9b:6e:aa:0c:05:27:bc:49:7c:c5:46:55:e8:e7:19:b2:
fa:3f:84:11:11:d6:40:80:9f:5a:03:34:02:8e:89:1e:d8:70:
2b:9a:65:d5:66:07:d9:cd:3c:99:6f:f2:90:ad:0e:0d:ae:df:
7b:0c:3c:05:f4:93:6c:d0:68:6f:5a:64:14:c1:a6:b7:de:ef:
26:a5:c2:1f:61:32:f7:7a:79:4b:c5:21:ac:4a:4d:bb:1c:be:
4d:3c:aa:d5:1c:f8:10:bd:2f:e5:d9:18:05:c8:8a:9d:1c:c1:
aa:2e:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:38:56 2026 by rpki-client