Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xa-j-GEpMci5U2Q7sJRM6VuJfFw.roa
File: xa-j-GEpMci5U2Q7sJRM6VuJfFw.roa (raw, json)
Hash identifier: /Lqkds5JY0FBaBxcP4SRD3uTPhRaEsTTqpBLfuhEm8Y=
Subject key identifier: C5:AF:A3:F8:61:29:31:C8:B9:53:64:3B:B0:94:4C:E9:5B:89:7C:5C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F92C1B05F0F926F278B7C480F68E75F41
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xa-j-GEpMci5U2Q7sJRM6VuJfFw.roa
Signing time: Fri 24 Jul 2026 06:13:14 +0000
ROA not before: Fri 24 Jul 2026 06:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 212.189.24.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:c1:b0:5f:0f:92:6f:27:8b:7c:48:0f:68:e7:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 24 06:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5afa3f8612931c8b953643bb0944ce95b897c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:26:f6:9d:4c:95:1c:c4:cf:f9:21:1a:2b:
52:84:2c:d9:37:26:a9:33:94:c8:d0:77:3f:eb:04:
d5:33:1d:12:88:18:ac:16:3c:ef:21:f6:2c:8d:c6:
3a:be:98:b9:90:5f:32:fb:5c:5c:7a:9e:9e:09:c6:
72:f7:ea:21:e9:5a:47:8f:43:f9:c4:06:58:e7:7a:
95:1d:df:73:da:08:31:17:ba:2c:e9:e5:41:80:2e:
6a:90:94:a9:5d:70:aa:a0:6a:65:a7:1a:6f:9d:09:
56:14:24:48:aa:f7:8c:78:f7:eb:10:98:4a:13:ad:
5d:4c:8c:f5:f8:9f:01:be:b9:45:6d:e1:33:82:39:
5e:a9:11:68:14:6a:a2:0e:15:9f:80:6c:a4:68:a7:
7e:f5:b6:ce:95:9a:77:ce:9e:35:0b:5a:50:43:f9:
5f:b2:e9:88:ee:0b:61:9b:a5:f0:5e:a4:dc:a0:69:
e4:b7:27:a1:bc:e7:ad:20:b4:43:8a:ff:9a:ad:83:
a1:43:92:d8:61:d9:52:f8:7d:eb:b1:3b:14:9b:1e:
a7:9b:8c:43:c8:6e:d4:05:c5:ce:7d:37:c6:4e:65:
b5:a8:d7:6c:2d:95:8e:f3:30:d6:7a:bb:46:a3:74:
12:c2:56:0d:6f:70:63:42:45:38:93:ff:26:72:6b:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AF:A3:F8:61:29:31:C8:B9:53:64:3B:B0:94:4C:E9:5B:89:7C:5C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xa-j-GEpMci5U2Q7sJRM6VuJfFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.24.0/24
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:be:1d:85:02:c0:7d:06:b2:78:c5:9d:9f:8a:4a:df:30:ad:
4a:4a:34:1c:11:55:55:e9:78:e1:e0:9d:28:7f:2a:ee:4c:ee:
24:fe:aa:3e:d7:04:8c:e0:c5:dd:29:70:4a:5d:24:e1:e1:d1:
64:17:5c:02:e8:3d:cc:17:de:09:da:03:58:a7:97:5c:40:51:
26:39:7f:40:bc:9f:83:a8:0d:82:8a:c4:49:e6:4f:2c:3e:48:
56:ad:8a:fa:cd:71:7d:01:0e:fc:ab:2e:ac:10:85:aa:6b:4f:
88:cb:7a:72:b4:cc:75:a2:45:42:75:66:55:d6:94:4f:13:7e:
69:9c:89:74:6c:49:e4:a5:58:e4:43:99:7a:32:fe:6c:76:60:
a9:e8:be:8b:23:bf:ba:0e:9d:e4:41:b0:90:78:1e:66:3b:24:
d5:6f:b8:39:51:49:f9:52:4d:08:21:5a:24:c3:b3:7d:cf:b6:
5c:50:94:9b:85:88:47:74:a1:3a:aa:f8:f0:98:76:c2:9b:cf:
28:73:95:3f:49:f6:a5:60:38:ef:32:9a:32:1c:6d:0e:2d:9f:
61:29:b0:67:7b:4f:a9:39:fe:94:88:52:4b:ab:a6:74:e1:17:
cf:fc:1e:2f:4e:12:69:9d:ce:ff:c1:87:23:24:88:66:a9:48:
01:93:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:56:09 2026 by rpki-client