Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xJcSYU94K5jt_ivJFiMsle809Hw.roa
File: xJcSYU94K5jt_ivJFiMsle809Hw.roa (raw, json)
Hash identifier: Ahcjs1hZbBxdInemIQY/K59iHfp9XLQMFrNrIw2tDxU=
Subject key identifier: C4:97:12:61:4F:78:2B:98:ED:FE:2B:C9:16:23:2C:95:EF:34:F4:7C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A1342400B6A5C1BF4C0375DE238ACC51ED
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xJcSYU94K5jt_ivJFiMsle809Hw.roa
Signing time: Tue 13 Oct 2026 07:22:16 +0000
ROA not before: Tue 13 Oct 2026 07:22:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 45.149.24.0/24 maxlen: 24
89.251.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:24:00:b6:a5:c1:bf:4c:03:75:de:23:8a:cc:51:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 13 07:22:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c49712614f782b98edfe2bc916232c95ef34f47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:3e:ed:ea:df:f9:01:65:ef:e7:87:03:2d:
f7:6d:77:0e:c6:63:88:e4:da:63:0e:84:c8:4b:63:
ce:d7:c9:97:84:4f:fe:4e:f1:da:7d:51:4f:98:b7:
63:75:20:21:49:3c:12:b2:70:09:47:a3:e6:81:e3:
5c:dd:24:c3:0d:65:e3:91:1a:0e:8e:32:23:d6:a1:
6f:5d:c8:96:56:e4:36:4a:d6:85:ab:ad:5f:8b:17:
16:c8:2b:f4:a7:4f:be:61:73:56:ce:45:59:70:a0:
f1:df:3b:73:17:96:cf:5d:dc:85:ad:f8:4d:88:32:
c4:ca:7d:46:77:29:1b:91:a9:8b:ec:40:1e:ea:21:
5b:0f:04:11:e0:62:d5:e0:f7:4f:68:8e:bd:ba:f9:
47:a1:1e:3a:22:53:aa:12:1d:6a:6f:21:d7:6a:f9:
08:79:16:07:1c:00:78:24:e5:98:7f:f6:16:9a:1d:
0c:96:f1:5c:fd:96:7c:4e:3b:92:f6:20:01:0c:89:
47:6e:11:00:4f:fa:2e:1d:e6:20:3b:1a:96:bf:b3:
13:fb:65:d3:8b:33:d8:d6:49:79:1f:4f:09:8e:ff:
2a:b6:b8:bc:10:65:be:a5:13:e4:8a:63:df:b7:3a:
11:c9:30:15:fd:68:c3:9b:63:75:f0:12:d8:77:4b:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:12:61:4F:78:2B:98:ED:FE:2B:C9:16:23:2C:95:EF:34:F4:7C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xJcSYU94K5jt_ivJFiMsle809Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/24
89.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ef:98:68:26:51:34:88:0b:10:a4:be:cd:99:6f:0f:6a:4c:
26:97:28:8a:93:e3:60:4c:d7:4b:ce:86:39:04:b9:21:28:7c:
d9:9c:97:31:87:b9:96:27:46:d9:84:cb:8e:57:d9:7a:97:80:
37:32:11:81:b2:6a:2e:aa:09:ce:f1:33:eb:fc:6b:77:f7:8c:
71:8f:82:dc:78:22:4e:d0:40:61:ff:b1:d0:56:83:76:b6:bd:
e5:59:ab:86:8b:c6:40:93:54:7d:ca:61:07:05:a2:ee:2a:82:
6f:2b:dc:aa:c0:3c:42:ad:6f:f2:63:65:0d:05:dd:1b:d9:b8:
7b:05:b3:c0:f2:13:f9:50:11:a5:00:06:8a:ae:2b:31:14:b6:
60:52:37:a2:a8:9b:32:67:0a:ed:a8:22:8c:27:7c:e0:e3:fd:
d7:2c:6a:e9:dc:9e:e9:44:a5:e6:fb:90:c7:7c:ab:c2:61:e9:
24:51:27:7c:51:40:f5:e8:b2:6d:f0:dc:eb:06:03:d1:49:3d:
3e:e0:2f:63:e5:03:69:d5:49:5e:16:b7:2b:0a:c4:70:8b:3f:
89:85:b9:1d:08:8f:00:6f:7a:2c:e2:23:ec:c9:6f:e7:64:7a:
b2:1f:e7:44:00:af:de:33:30:c1:67:2d:e2:2f:b1:7a:68:d3:
c3:9f:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:43:50 2026 by rpki-client