Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XzjmsgvhpS4F73S3CFdUMtdN3_c.roa
File: XzjmsgvhpS4F73S3CFdUMtdN3_c.roa (raw, json)
Hash identifier: PAXoDT3lD7+gPuBkHAnXUL1FHUD3zRXixS4GKj3LzZc=
Subject key identifier: 5F:38:E6:B2:0B:E1:A5:2E:05:EF:74:B7:08:57:54:32:D7:4D:DF:F7
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0581D0810437575B778DDCF644002F05A
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XzjmsgvhpS4F73S3CFdUMtdN3_c.roa
Signing time: Mon 31 Aug 2026 13:58:12 +0000
ROA not before: Mon 31 Aug 2026 13:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 2.56.113.0/24 maxlen: 24
45.139.54.0/24 maxlen: 24
62.233.45.0/24 maxlen: 24
91.236.120.0/24 maxlen: 24
92.119.161.0/24 maxlen: 24
92.119.163.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 16:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1d:08:10:43:75:75:b7:78:dd:cf:64:40:02:f0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 31 13:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f38e6b20be1a52e05ef74b708575432d74ddff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:9b:ab:f3:a8:57:e3:c1:6e:f8:2c:e4:45:
fa:2b:fd:39:31:32:29:cf:17:07:3f:df:1e:60:39:
32:dc:ea:cc:69:a1:38:59:bc:cc:c7:8f:90:5a:b7:
28:e2:0f:ad:71:15:39:b4:c5:69:84:52:e4:8f:3b:
a5:e5:a8:18:3e:14:4b:7c:f3:16:2a:d6:11:ce:1d:
df:f1:5c:93:79:9e:9e:81:8e:98:a7:04:0d:b8:d0:
60:27:63:f9:b7:31:e5:25:d5:81:cb:76:c5:f7:41:
99:a2:d0:21:5b:bb:fb:c2:d2:51:15:62:41:d7:c1:
0b:e4:76:54:0b:6c:9a:dd:62:56:2f:58:d5:ad:bb:
95:31:6c:1d:b7:e8:63:c9:28:fa:e4:30:8a:55:ac:
5f:05:b8:a6:0c:2e:f3:60:16:05:ae:9c:81:12:99:
aa:38:d6:96:10:16:66:fa:59:56:29:ba:bf:0a:04:
39:12:df:59:4e:7e:7f:c6:21:e2:a3:32:99:96:d0:
3a:56:2c:f0:21:3a:23:5f:0d:c1:b4:0d:78:2f:ca:
73:68:1e:61:eb:b7:cf:81:c0:14:8a:58:b5:4d:97:
66:e3:a5:6d:c2:4a:14:85:cb:03:b0:96:ef:36:58:
0d:e5:59:2c:ae:e9:9c:08:b2:cc:25:9c:66:1a:c2:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:E6:B2:0B:E1:A5:2E:05:EF:74:B7:08:57:54:32:D7:4D:DF:F7
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XzjmsgvhpS4F73S3CFdUMtdN3_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.113.0/24
45.139.54.0/24
62.233.45.0/24
91.236.120.0/24
92.119.161.0/24
92.119.163.0/24
146.19.187.0/24
Signature Algorithm: sha256WithRSAEncryption
89:99:1b:5a:7e:85:c5:7a:ec:9f:3a:32:4a:66:16:a3:00:a7:
d1:36:68:d6:8f:6d:33:10:d3:bc:f8:da:c3:c3:90:89:71:8c:
f4:86:2e:9d:8b:4c:ad:30:53:4f:0c:aa:1e:32:6c:f9:63:d5:
e5:3d:d9:14:de:4f:29:4d:32:3f:f2:d4:d7:ed:fe:52:f8:85:
ac:36:92:49:bb:e0:3f:49:2b:e2:e8:90:cb:d7:ff:db:57:31:
1d:eb:7a:4a:9a:c2:bd:53:2b:f0:e0:c9:25:8f:dd:f2:04:67:
c7:a7:cf:6a:d9:0d:e9:f9:c3:29:35:71:00:67:41:6e:78:02:
24:5c:da:ba:95:03:18:4e:93:cc:a2:91:58:4d:c2:f0:8d:65:
7a:36:c7:26:a3:dd:8c:8b:e6:4c:c5:2c:f8:ea:a6:63:4e:c3:
e9:63:ff:84:a3:b9:01:69:61:9c:3b:4f:10:a5:65:26:51:fc:
eb:c2:25:ce:f5:22:12:4f:a0:a1:9a:7c:5c:dd:0e:f9:03:3a:
19:26:ab:a6:67:e0:b5:ce:4b:ef:08:fa:4b:4c:91:fb:75:a7:
97:3e:4d:a1:43:9c:46:f8:d8:17:32:e7:82:7f:89:b6:cb:56:
88:8e:25:7f:9f:8f:d6:72:f4:b9:6e:c1:29:06:cd:01:c7:31:
cd:3a:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 21:35:15 2026 by rpki-client