Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/XhT-4APTELgjULu5pwHQO4PtpmM.roa
File: XhT-4APTELgjULu5pwHQO4PtpmM.roa (raw, json)
Hash identifier: +CkSHkW8ztUh8xHxuRZq43ecyQw3TY89oxatBJGHLhU=
Subject key identifier: 5E:14:FE:E0:03:D3:10:B8:23:50:BB:B9:A7:01:D0:3B:83:ED:A6:63
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 01A0F18BE98D2E64D7521EA928AA37E44D7C
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/XhT-4APTELgjULu5pwHQO4PtpmM.roa
Signing time: Wed 30 Sep 2026 09:01:13 +0000
ROA not before: Wed 30 Sep 2026 09:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 217.9.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:e9:8d:2e:64:d7:52:1e:a9:28:aa:37:e4:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Sep 30 09:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e14fee003d310b82350bbb9a701d03b83eda663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:5b:e7:1d:43:ec:d9:fd:69:06:93:6b:de:
42:63:ca:5d:d8:6f:1c:73:3e:83:40:8d:97:dc:1c:
93:d1:fe:ba:b9:8a:b5:7b:e8:6b:26:c0:75:0b:07:
55:cc:c0:cd:cf:3f:96:40:6d:48:e1:5b:40:cd:6b:
7b:2f:53:05:a2:1e:b4:5e:fb:b4:04:11:38:01:33:
b7:40:a0:e6:76:8d:e9:4e:5f:b2:e4:ad:5f:5f:88:
d8:6b:88:c2:48:b0:bf:d2:f2:16:cc:8d:08:02:da:
93:d3:37:93:2d:63:5b:e9:92:d7:46:a5:c6:09:23:
a6:ba:52:1d:d6:1b:1f:12:e1:9d:c0:80:94:b5:87:
bb:04:58:3f:35:fa:29:b8:a7:33:5a:54:e4:04:49:
80:a4:9a:cc:fb:e0:3e:68:d2:b4:84:fb:62:ff:f9:
85:2a:cf:0c:6d:e2:86:6e:b4:23:4f:92:d7:4d:1e:
05:9a:8a:3a:75:a7:e8:0e:4a:95:cd:ee:05:02:f4:
7a:5e:ed:a1:45:90:b2:83:3e:a3:ce:aa:f1:9a:4b:
56:78:c0:94:93:fd:14:40:8a:81:be:70:7c:56:3a:
1f:47:17:df:c5:e4:c5:0e:d8:37:cb:d8:fd:f9:b1:
35:0f:22:ee:44:95:53:06:90:f8:67:15:fe:6a:a6:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:FE:E0:03:D3:10:B8:23:50:BB:B9:A7:01:D0:3B:83:ED:A6:63
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/XhT-4APTELgjULu5pwHQO4PtpmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.12.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2d:90:a6:b1:d2:19:4a:2e:a3:77:58:bc:bd:4c:3b:00:ac:
34:c0:de:47:82:9b:29:e7:04:36:4d:20:7f:e3:49:01:de:61:
ae:0e:57:74:ea:04:a9:11:59:37:99:31:8e:74:f7:4d:65:62:
c5:c0:a7:c5:55:44:cd:83:27:af:96:13:9a:38:2c:d2:2f:97:
5d:08:58:3e:70:21:84:b1:c6:d5:8c:ee:bb:6d:3c:93:72:9f:
9c:d2:77:1f:d7:ff:db:e1:83:5e:3c:67:53:2a:44:ee:2e:8a:
c0:44:81:aa:cd:ec:78:42:e4:0b:30:e8:bd:f1:c3:41:c0:1e:
8b:fe:6a:2f:7e:17:f0:5e:16:68:9b:44:62:59:77:20:88:4e:
4d:f4:4e:70:44:f9:b6:5b:9c:e4:0c:cf:ce:33:9e:d7:33:4e:
f5:34:20:88:0f:fe:85:4b:57:36:9b:04:e4:bd:78:87:33:82:
1c:8d:e2:4c:b5:2c:15:3c:c3:24:41:32:5b:69:8a:ec:e3:32:
6e:68:3a:c6:a9:1c:75:5f:d8:39:24:b9:6a:5e:90:63:a7:6f:
9f:df:87:f2:19:64:0f:d0:31:9a:cf:cf:b2:5c:96:7a:03:6a:
af:2a:d4:7f:e1:b6:d8:48:13:b0:6f:b8:9a:17:01:14:d0:6a:
c8:fc:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:46:13 2026 by rpki-client