Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XxesCyVYVVaPIRTpgem_CTm9ZKk.roa
File: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (raw, json)
Hash identifier: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=
Subject key identifier: 5F:17:AC:0B:25:58:55:56:8F:21:14:E9:81:E9:BF:09:39:BD:64:A9
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A09E9D0D641B38EE95EED7ADCD270C47AA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XxesCyVYVVaPIRTpgem_CTm9ZKk.roa
Signing time: Mon 14 Sep 2026 06:31:27 +0000
ROA not before: Mon 14 Sep 2026 06:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 62.233.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:9d:0d:64:1b:38:ee:95:ee:d7:ad:cd:27:0c:47:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 14 06:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f17ac0b255855568f2114e981e9bf0939bd64a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:3e:c3:1f:ce:1f:2d:c4:61:d1:4d:d7:8b:
14:c0:62:32:cc:c4:d8:8b:3a:e8:fb:da:43:77:b8:
56:cb:1b:f3:b6:a5:43:38:ac:91:2e:cc:32:71:fe:
9d:79:cd:14:e4:2c:d2:7c:2c:07:4c:8e:58:b4:89:
31:92:b0:a5:9b:da:3d:15:25:45:3c:06:65:39:ab:
f4:37:80:f0:c7:ed:ff:dc:73:6f:86:1e:eb:4e:c0:
98:b6:a4:9d:e7:e6:e5:86:9d:44:52:5b:08:1f:a7:
28:cc:b9:fb:1d:4f:10:97:b7:05:92:d7:21:ab:ac:
df:e1:d9:da:55:12:91:24:ba:a6:e9:77:dc:1a:69:
b4:f4:ed:a3:94:4a:eb:c0:fa:72:b7:27:1f:92:26:
d3:e7:05:78:26:1b:28:a3:b0:39:c6:c1:6e:1a:2e:
00:a9:7c:b4:c8:45:45:e9:b6:84:9a:d2:bc:9d:4b:
d1:6d:0c:b8:78:a9:d9:61:64:d0:14:22:95:a9:05:
bc:60:b1:11:7f:13:18:2b:e4:17:87:4d:1b:b6:94:
22:e3:ca:8f:b7:a9:30:60:be:89:49:a4:30:17:58:
eb:ff:66:54:c4:df:1c:61:77:f6:d1:8e:60:17:f6:
f7:3f:fb:df:32:97:06:4d:91:32:a5:c7:5f:d1:f8:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:AC:0B:25:58:55:56:8F:21:14:E9:81:E9:BF:09:39:BD:64:A9
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/XxesCyVYVVaPIRTpgem_CTm9ZKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7b:c6:bf:0f:20:f9:aa:ee:40:de:db:42:5c:61:a4:c0:ce:
f5:03:7a:ec:51:14:96:5e:b1:de:f1:2b:33:c5:53:32:13:7f:
50:25:90:7a:7e:b1:28:d4:18:e2:0e:e7:d6:d5:05:c9:b4:72:
11:ef:22:dd:ab:bb:05:5d:49:12:01:a7:35:de:04:07:b1:b3:
74:e8:a9:ca:c1:56:f6:84:09:ac:16:66:11:ff:0a:77:30:08:
24:ee:03:b0:de:52:ff:01:bc:b4:83:b3:6d:a4:92:ce:d1:d9:
70:3f:f9:18:e5:95:b7:2a:51:d3:d3:81:66:58:81:07:57:f5:
80:5f:36:64:8b:9f:cd:4d:44:05:07:12:f5:a0:28:a5:31:06:
e5:03:fe:6b:42:16:63:99:f3:6b:5b:e5:c4:02:08:5d:45:59:
d8:b5:bb:e3:26:06:5d:6d:a6:23:26:ca:cc:27:5a:aa:fe:10:
00:66:9b:94:af:62:c4:fd:da:63:30:17:f7:bc:ac:1e:7d:6e:
fe:e9:dc:ec:cf:c6:0b:5b:a9:cb:7d:d5:48:85:b7:5b:f9:31:
be:19:9a:e4:80:d4:d8:58:69:2f:80:ab:3c:b1:ef:1b:2f:24:
67:15:ed:9b:33:eb:26:46:e5:f6:84:16:ea:f6:3d:8c:b3:aa:
4d:4a:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:55:43 2026 by rpki-client