Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XsMROJkrHywBMqxCkWoqeIIH_MY.roa
File: XsMROJkrHywBMqxCkWoqeIIH_MY.roa (raw, json)
Hash identifier: cEG08R0xK9yo0jk1tqSEKw5a1bivUPDrrGJaPGARVXI=
Subject key identifier: 5E:C3:11:38:99:2B:1F:2C:01:32:AC:42:91:6A:2A:78:82:07:FC:C6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A1879B5A05C6372F6511F3F74CABA115DA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XsMROJkrHywBMqxCkWoqeIIH_MY.roa
Signing time: Thu 29 Oct 2026 12:21:07 +0000
ROA not before: Thu 29 Oct 2026 12:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218257
IP address blocks: 45.84.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:9b:5a:05:c6:37:2f:65:11:f3:f7:4c:ab:a1:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 29 12:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ec31138992b1f2c0132ac42916a2a788207fcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:90:3e:f2:46:d4:d7:be:63:9a:cf:21:2e:
a5:a2:b4:7a:60:a5:97:44:b0:55:51:f1:39:85:ab:
38:06:85:09:a7:b9:5b:1f:cd:6a:30:c2:98:8d:85:
de:1c:2e:88:b9:2b:4e:f4:70:34:b3:33:8b:0a:e5:
92:05:10:61:ee:c8:54:a9:b0:91:8c:3d:23:47:bf:
7b:5b:8b:28:fb:b6:c6:80:e6:82:46:5c:44:90:10:
6e:a3:9f:93:61:23:c8:3a:dc:cf:f8:75:c9:aa:e9:
7b:f4:7c:1b:14:16:cf:3a:b4:e3:2f:b0:52:5d:69:
de:cd:5e:62:f7:1d:f1:ea:79:92:fe:9e:95:c2:7b:
2d:41:51:22:34:23:f4:bb:da:79:52:a3:5c:9f:ee:
c8:ee:89:89:f3:78:d4:26:2b:cc:f8:88:11:d8:7d:
b7:d2:03:58:1a:f2:4d:59:91:d7:10:d8:95:69:6d:
49:1e:7b:fa:bd:10:cc:e3:fc:0d:13:63:fb:2d:d3:
05:d9:b5:e4:18:26:84:7f:4d:53:be:76:35:82:0e:
6c:c3:bb:86:c1:38:6e:6d:74:cb:7e:28:4d:17:19:
98:7d:e9:19:c0:b6:2f:8f:3e:7b:49:f1:ce:71:91:
a2:18:8a:98:c9:61:93:f4:5a:09:f5:92:24:39:1a:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:11:38:99:2B:1F:2C:01:32:AC:42:91:6A:2A:78:82:07:FC:C6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XsMROJkrHywBMqxCkWoqeIIH_MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8e:83:83:8b:1f:ad:2b:0f:cc:a1:ba:8a:ac:48:43:c1:9b:
72:3d:f1:e5:29:81:35:3a:86:ad:17:c7:25:7f:1f:94:91:5e:
c6:de:e2:8e:ef:c4:7a:4d:05:c4:da:fa:53:b8:6d:83:ff:1d:
cb:30:f7:ce:49:97:fb:0b:27:65:5d:00:60:36:6f:2c:cf:61:
8a:08:38:7f:75:fd:b5:d0:82:35:de:53:d0:52:4c:77:a3:3b:
dd:43:fc:2a:92:c2:05:6f:7e:a3:33:ab:ff:35:0d:ba:3e:c0:
ac:16:1a:01:6a:ff:5d:a0:2d:0c:c7:6e:e9:19:0e:f1:40:81:
25:be:be:b0:8d:77:83:6d:90:f5:ab:af:ea:c2:a6:61:23:62:
57:d5:68:12:cc:1a:9b:31:bf:c7:de:c7:68:42:e6:01:22:eb:
8c:f5:86:f9:69:d5:0b:f4:5a:43:c1:94:dc:26:13:af:a1:93:
3e:c3:94:49:68:77:2b:ff:f0:35:fb:54:5a:5c:da:97:c9:ee:
db:cd:f8:de:db:d2:82:da:c1:62:2d:e8:8b:54:9f:48:41:4c:
44:e2:5d:f6:79:f1:5d:e8:e0:a5:be:d1:1f:2e:b2:77:84:00:
7f:b3:5c:34:c0:15:c8:ee:c6:f0:fb:ba:43:9f:de:f3:a1:11:
ab:33:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:46 2026 by rpki-client