Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/sxc3XP3wIjkgcKzDoebLsZJV7Ks.roa
File: sxc3XP3wIjkgcKzDoebLsZJV7Ks.roa (raw, json)
Hash identifier: KXGzwEscHT7RBDFgZkCPpiRngDs4fiL55gxmqiqbp8c=
Subject key identifier: B3:17:37:5C:FD:F0:22:39:20:70:AC:C3:A1:E6:CB:B1:92:55:EC:AB
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A149F23D86CF54757C12892A6D09B39AD5
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/sxc3XP3wIjkgcKzDoebLsZJV7Ks.roa
Signing time: Sat 17 Oct 2026 12:59:34 +0000
ROA not before: Sat 17 Oct 2026 12:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:f2:3d:86:cf:54:75:7c:12:89:2a:6d:09:b3:9a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Oct 17 12:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b317375cfdf022392070acc3a1e6cbb19255ecab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:03:95:16:76:fd:05:d0:8f:bb:a0:77:2d:
5f:03:3b:42:98:ff:fd:2d:85:2c:7a:e1:26:b9:f3:
69:de:1c:54:1b:4e:5b:a4:c6:f0:8a:9c:db:c8:b6:
4c:e5:63:f6:0f:0a:6a:e9:44:60:4c:3e:7a:8c:5a:
c4:6f:0a:9a:a9:86:9b:65:77:07:d1:3f:52:7f:de:
a4:27:06:6c:44:27:e3:bd:4b:fc:89:ae:69:2e:17:
b1:a4:b1:60:a3:56:dd:78:6a:68:ee:d1:66:a7:48:
f4:8e:c3:b9:5e:cb:10:79:9d:6e:39:62:ee:02:63:
43:68:98:be:a1:37:c8:9b:25:01:24:63:9c:b5:b2:
47:5c:5c:c3:3a:ac:6a:97:39:11:85:7d:8f:fe:d4:
38:3d:1f:ae:1c:d2:9c:54:c5:93:8d:60:72:7f:63:
b9:0d:08:ad:da:58:04:36:7a:4b:22:f2:bf:2e:02:
8c:0d:c3:2c:11:16:4a:e9:75:98:4c:91:56:2f:53:
06:94:97:70:ad:19:d2:85:e1:3f:e1:6e:f4:f3:d9:
48:29:6c:7c:1f:85:63:f2:64:91:00:3d:31:1e:e6:
0e:dd:63:1d:88:83:68:42:43:0f:81:c8:83:cd:19:
4b:4c:aa:68:af:0c:8a:f5:f2:d6:dd:66:67:b7:21:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:37:5C:FD:F0:22:39:20:70:AC:C3:A1:E6:CB:B1:92:55:EC:AB
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/sxc3XP3wIjkgcKzDoebLsZJV7Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:ac:11:0f:93:9b:89:ca:50:47:27:01:1f:c5:f8:55:1b:
5a:99:73:6e:77:37:71:51:6d:64:4b:d0:b0:75:fd:33:36:96:
43:7a:fd:59:b5:c4:03:a6:aa:8b:67:52:5c:55:d1:9e:2e:61:
b8:27:29:e2:f0:59:25:d0:46:62:8d:27:10:02:44:de:a3:4d:
cc:b4:ef:14:97:f0:78:1f:68:38:31:58:8e:d8:66:7c:f7:3e:
a2:4a:14:aa:89:1c:83:4f:4c:b3:e0:dc:56:0d:ad:29:c9:fd:
ba:b8:dd:4d:b2:66:ed:43:89:24:9e:c3:79:b1:d9:9f:dc:1b:
6e:11:31:aa:84:5e:51:ac:11:7d:62:c3:ac:db:3b:21:d6:83:
e8:26:e9:eb:57:4d:5d:83:4b:33:d4:0d:f6:a8:41:2b:16:aa:
70:4f:63:16:6b:e6:6c:83:56:dc:e7:86:28:c5:fa:2e:ef:33:
a9:fd:f5:76:e9:22:bb:8b:f2:e6:8e:42:4c:5e:3f:8a:01:4c:
59:b1:72:99:af:fe:cd:86:97:94:d4:a6:8b:b9:1a:cf:12:db:
3f:8a:4d:4e:2f:00:9d:a7:30:54:30:be:15:98:9b:cb:66:04:
3c:18:86:91:33:8c:8c:3c:75:28:70:b5:de:d9:08:86:a8:28:
a8:a8:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:38 2026 by rpki-client