Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/XL1P9z2WhAwSshjJ_qUNimywoUg.roa
File: XL1P9z2WhAwSshjJ_qUNimywoUg.roa (raw, json)
Hash identifier: 2V27vmSQBNuEYMN62UbxpgxUhIofJUMh39lELqkLooo=
Subject key identifier: 5C:BD:4F:F7:3D:96:84:0C:12:B2:18:C9:FE:A5:0D:8A:6C:B0:A1:48
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 01A182D77118808A6E737D5E1C8DD5DA52F3
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/XL1P9z2WhAwSshjJ_qUNimywoUg.roa
Signing time: Wed 28 Oct 2026 14:08:39 +0000
ROA not before: Wed 28 Oct 2026 14:08:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 144.124.208.0/23 maxlen: 23
144.124.210.0/24 maxlen: 24
144.124.211.0/24 maxlen: 24
144.124.212.0/24 maxlen: 24
144.124.213.0/24 maxlen: 24
144.124.214.0/24 maxlen: 24
144.124.215.0/24 maxlen: 24
144.124.223.0/24 maxlen: 24
158.94.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d7:71:18:80:8a:6e:73:7d:5e:1c:8d:d5:da:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Oct 28 14:08:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cbd4ff73d96840c12b218c9fea50d8a6cb0a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:2d:7f:b7:06:c2:1a:0b:6c:8c:2a:7a:40:
67:3b:76:2a:9c:70:31:c8:5b:4e:b3:da:64:3e:86:
37:f0:cd:19:93:1a:07:d1:0f:5a:35:b2:2c:c8:7a:
35:fe:4d:90:16:ba:50:ca:18:3f:76:44:08:9b:3f:
17:b7:89:a6:7b:89:16:85:4b:75:0a:bc:0e:74:f3:
e6:87:cf:ed:6b:43:1c:ec:3b:f7:ae:76:b6:80:43:
25:6d:c7:e5:10:ca:bd:65:1b:39:4b:a7:ec:6f:f8:
60:fe:85:b8:97:ac:1f:d0:dc:fa:15:d1:f8:32:74:
51:84:e5:2a:5b:f0:43:34:41:cb:47:e0:d1:5f:aa:
c9:3c:7b:f5:18:e4:5b:fa:38:1d:92:bc:e1:eb:d8:
b9:29:2f:5d:4b:08:95:be:af:a7:fb:84:4f:5b:03:
86:c9:68:00:70:44:25:2c:bd:14:71:b5:59:de:c6:
6c:c6:9b:b6:38:f6:db:29:fe:5a:8b:2e:c9:1b:51:
4c:47:71:83:d0:e7:03:67:a5:aa:e2:25:93:8f:bc:
dd:26:8d:ba:8a:c3:e4:90:17:95:6d:c2:af:46:13:
a7:cf:09:fd:5c:8f:60:0a:54:17:9c:b0:d9:67:02:
b3:72:b9:b5:8f:73:10:31:58:4a:7c:b3:a7:91:67:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:4F:F7:3D:96:84:0C:12:B2:18:C9:FE:A5:0D:8A:6C:B0:A1:48
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/XL1P9z2WhAwSshjJ_qUNimywoUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.208.0/21
144.124.223.0/24
158.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
31:45:b8:73:3b:db:a1:86:a9:3f:df:cb:bc:50:91:67:82:ad:
3e:69:f2:66:f1:e7:ec:38:81:03:e5:18:5d:4a:81:6f:cd:55:
18:ba:ec:83:f6:b7:70:17:84:80:42:c3:56:8f:bb:ba:be:11:
de:2e:42:88:61:8f:e9:6e:b1:e1:ec:cc:82:9c:4f:46:36:50:
bd:00:0b:bb:4e:8b:02:fd:07:e6:77:a6:e8:61:a4:c2:a4:9e:
f2:9b:73:9d:c1:28:ae:a8:a1:38:93:e6:98:c2:c6:26:ad:ce:
4c:5d:a0:b1:f4:28:13:c5:b7:2f:fb:dd:ce:da:98:59:b9:06:
07:6a:14:34:a0:18:47:d3:f7:6a:d5:1a:f1:d6:ad:2f:6b:55:
f8:c8:c5:38:33:1d:89:c4:3e:7c:32:00:41:7a:b4:ff:c7:c7:
4a:1b:e9:45:7f:8b:08:2d:a9:1f:e5:b0:55:b8:e5:f2:b2:2c:
84:5b:5d:04:72:c3:9c:53:7c:e7:62:0a:b7:cf:4f:cf:8d:1b:
58:48:86:e2:84:d7:ce:8e:40:57:b5:de:f7:60:3e:ea:2c:d3:
19:91:f8:fe:b3:56:4c:2d:f4:bd:bc:43:07:b9:30:ca:9f:39:
98:25:e8:94:5f:00:2a:31:29:9a:2d:6c:8e:1c:11:f7:89:b0:
07:ee:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:52:26 2026 by rpki-client