Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/XBEejVS1a9Owxo7c0gVxdKvWS2g.roa
File: XBEejVS1a9Owxo7c0gVxdKvWS2g.roa (raw, json)
Hash identifier: fSI0QRXy+kjW782iKVZa88uSVKLeiVw+9MG/v2gwXMw=
Subject key identifier: 5C:11:1E:8D:54:B5:6B:D3:B0:C6:8E:DC:D2:05:71:74:AB:D6:4B:68
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A06BC9C5C13F10FBEB5F46166BFEC472D6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/XBEejVS1a9Owxo7c0gVxdKvWS2g.roa
Signing time: Fri 04 Sep 2026 09:39:40 +0000
ROA not before: Fri 04 Sep 2026 09:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:c9:c5:c1:3f:10:fb:eb:5f:46:16:6b:fe:c4:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 4 09:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c111e8d54b56bd3b0c68edcd2057174abd64b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:ac:c7:d0:cd:9a:d1:b5:94:2e:d5:04:f5:
5d:ab:19:10:11:23:3d:99:a9:d9:d9:1f:88:9e:0c:
2f:5f:6c:5b:3b:ef:5a:22:3c:e0:c2:41:b1:fe:d1:
be:e4:41:22:bc:81:29:02:7a:bb:de:6d:2a:c7:d9:
23:75:9d:76:dc:cf:b5:0f:60:c6:0f:ef:8d:10:23:
0a:01:43:70:06:43:b7:54:ff:56:63:af:5f:70:2a:
46:9d:e2:de:ef:b7:da:29:d4:d7:75:ae:e7:2a:9c:
9c:f7:71:b1:6d:38:c9:7f:0f:bb:7f:17:0c:f4:8e:
a5:3a:64:5e:e3:02:e0:de:b9:16:df:9e:49:c6:79:
5a:97:dc:43:21:0b:92:6a:b4:c1:a5:b5:b1:4b:50:
cf:d3:54:c6:40:df:06:79:46:e1:00:d2:4d:eb:8e:
a1:97:db:10:99:33:64:f3:49:b9:9b:16:c8:d5:e3:
23:52:ca:f6:9d:05:2b:25:72:88:94:1a:99:11:47:
d7:1d:95:dd:47:1f:73:38:18:8e:75:67:0a:59:c4:
b9:76:83:56:14:cd:29:42:da:4f:b4:7a:0d:22:a1:
e7:2a:7d:eb:f2:4c:d7:35:12:cb:10:0d:4d:91:cd:
b6:fb:da:b3:cc:06:e5:81:33:c8:41:61:89:42:9b:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:11:1E:8D:54:B5:6B:D3:B0:C6:8E:DC:D2:05:71:74:AB:D6:4B:68
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/XBEejVS1a9Owxo7c0gVxdKvWS2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f3:15:3c:e7:44:bd:64:d7:c3:30:4e:72:46:2d:87:b2:b8:
08:c5:48:fe:ab:71:5b:df:12:95:e7:4b:0b:06:f7:eb:95:b2:
ef:53:1c:84:99:7d:96:ed:7b:4d:99:fb:dc:68:67:a4:f9:b3:
75:3c:e5:aa:55:e6:fa:39:eb:a2:9c:da:bc:36:68:d0:cf:ee:
68:f5:81:7d:5f:da:c4:2e:d1:82:75:da:59:ce:cc:b3:9c:50:
66:03:78:29:be:ae:a5:f5:82:ce:3f:ad:9f:db:9e:36:e8:6e:
33:27:78:5c:59:8f:71:3c:69:af:89:7e:b1:bb:6b:70:9f:10:
8e:31:d6:5f:28:2b:21:01:fe:4b:67:28:5a:1b:3d:65:a8:6e:
84:89:cf:3f:a5:f4:c8:74:f5:72:03:5d:42:01:04:cf:8a:41:
ac:9b:27:55:84:15:0b:89:0c:b2:67:25:80:3b:70:3f:ae:ab:
51:86:c4:11:52:02:36:35:2f:59:7f:ae:35:01:db:d6:92:bf:
ff:d6:39:b7:9c:b8:fb:f1:7b:d9:db:9a:8e:42:f6:8b:97:aa:
ae:a7:95:e1:3f:5f:f5:1b:4f:3a:28:ef:d3:f5:4e:3e:2d:84:
53:77:07:54:ea:64:f0:d5:64:8c:0c:66:10:8e:25:9f:96:58:
f4:38:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:39 2026 by rpki-client