Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/XyAb9wzaDXbr0agW7bIqyNHL3Ko.roa
File: XyAb9wzaDXbr0agW7bIqyNHL3Ko.roa (raw, json)
Hash identifier: KGy9cRBI+Zq5rgY0GYYAXNF5Ntid8E9RQu4i37MRruk=
Subject key identifier: 5F:20:1B:F7:0C:DA:0D:76:EB:D1:A8:16:ED:B2:2A:C8:D1:CB:DC:AA
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F67E79E78C0E98A251B3D723D1D29F01
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/XyAb9wzaDXbr0agW7bIqyNHL3Ko.roa
Signing time: Thu 01 Oct 2026 08:04:38 +0000
ROA not before: Thu 01 Oct 2026 08:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49090
IP address blocks: 82.144.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7e:79:e7:8c:0e:98:a2:51:b3:d7:23:d1:d2:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f201bf70cda0d76ebd1a816edb22ac8d1cbdcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:45:65:36:7a:03:44:5a:ac:b9:e6:2a:c1:
91:61:28:3f:78:d1:1f:ce:1b:e2:2c:ec:c3:fb:48:
5f:ae:85:d3:b0:09:dc:60:fc:ab:1d:75:ce:ad:74:
03:c2:e4:98:4b:82:2f:19:d7:76:24:81:f6:a7:54:
89:43:08:8b:e9:dd:a2:86:0e:e0:1e:39:f6:fb:3f:
b9:27:fa:9d:ba:9f:d9:7b:33:78:2d:b3:79:6c:7e:
1a:ce:33:c8:0d:ab:15:21:59:fb:8d:13:bf:22:c2:
25:11:b9:ff:04:dd:e6:6d:c2:f5:56:60:19:30:55:
83:be:8e:39:82:62:26:e6:0f:26:54:c9:3b:be:01:
f7:b1:ef:b9:67:44:0e:df:04:c5:da:cf:63:fe:3b:
35:f3:42:b7:a6:6f:f8:4c:91:6e:8b:c1:43:32:2a:
3a:96:ad:c0:f2:ca:51:6c:70:87:5e:ab:56:f8:64:
94:52:94:00:21:b9:d5:54:00:66:ec:75:10:00:a6:
d2:ff:f1:69:58:95:88:0d:92:5f:e8:2f:98:07:27:
7e:08:7c:dc:6b:e8:92:c6:a1:8c:c6:68:a6:de:55:
a4:d0:33:d0:82:c8:24:ff:30:af:e6:49:86:9b:2a:
67:d3:58:71:4d:61:06:71:e0:da:43:d3:a9:e8:68:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:1B:F7:0C:DA:0D:76:EB:D1:A8:16:ED:B2:2A:C8:D1:CB:DC:AA
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/XyAb9wzaDXbr0agW7bIqyNHL3Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:32:c6:2d:e0:8c:4f:06:21:fb:2f:b0:50:43:6d:33:5b:e7:
a1:50:98:79:90:6f:eb:3f:eb:3f:14:24:39:15:07:fc:95:df:
33:67:a6:cf:a1:5b:51:1c:14:bc:a2:7c:e3:b7:b6:43:8b:f4:
43:c8:55:23:d1:00:2c:a5:60:b4:b6:a7:d0:10:62:dd:03:44:
0a:46:dd:68:26:e1:98:50:32:fd:1e:02:9b:b0:c7:f7:96:22:
aa:b1:19:cd:aa:b8:16:ad:37:ea:23:33:38:5f:96:b6:04:2d:
b2:c4:95:ba:8b:3b:e0:0c:99:52:25:a1:09:f7:36:31:77:74:
d6:fe:ff:47:6d:fa:c7:7e:e9:20:76:d0:32:1d:11:c0:ae:27:
18:05:9f:45:f3:74:f7:6b:39:29:38:2e:4a:a3:8c:d2:3a:91:
ac:75:7e:25:35:30:c2:39:f6:09:e1:0c:14:28:04:24:83:77:
9d:0b:12:11:97:08:80:3f:a1:12:d2:83:77:5a:8b:03:2c:e0:
3e:a3:99:54:55:30:ce:84:a7:cb:92:66:a7:c6:a5:d1:38:3c:
76:ff:ba:a0:6a:72:a6:48:67:60:e0:64:9b:a9:95:67:3a:8c:
4b:bd:ef:6f:56:50:34:09:c0:2b:65:c4:dd:8d:69:2c:f0:e1:
39:31:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:21 2026 by rpki-client