Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/xm5rLebeuc7oaSjRe_mW9yrd7D8.roa
File: xm5rLebeuc7oaSjRe_mW9yrd7D8.roa (raw, json)
Hash identifier: hHiFRvAT7BEhkvXlVt37YLHfgymkAvzsvrr1jEmcw4A=
Subject key identifier: C6:6E:6B:2D:E6:DE:B9:CE:E8:69:28:D1:7B:F9:96:F7:2A:DD:EC:3F
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01A0E144245F46FF1AE33F7F3122E98C9E0C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/xm5rLebeuc7oaSjRe_mW9yrd7D8.roa
Signing time: Sun 27 Sep 2026 05:08:54 +0000
ROA not before: Sun 27 Sep 2026 05:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
188.212.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:44:24:5f:46:ff:1a:e3:3f:7f:31:22:e9:8c:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Sep 27 05:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c66e6b2de6deb9cee86928d17bf996f72addec3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:b1:35:77:9f:50:e6:8e:43:77:05:4b:9b:
ed:d4:24:e2:a8:c7:6f:ab:a4:d8:85:2a:b5:0c:19:
3d:14:2f:2b:4a:be:20:6a:a2:25:f5:91:a0:52:2e:
b4:b1:57:99:72:76:70:9d:1e:0b:c5:d9:30:a3:c8:
a5:2f:ca:06:e3:7b:44:0d:6a:74:8d:37:63:7b:e6:
88:b1:0d:a0:74:52:04:22:73:8c:01:8d:9a:c2:82:
be:92:6f:9b:d8:30:18:8e:a4:68:39:90:e7:5e:c2:
e8:54:17:f1:26:c8:ff:ff:72:7c:24:59:dc:91:d2:
94:f9:63:92:85:d5:bd:f8:bf:99:7e:71:17:aa:50:
25:b5:2d:8a:07:a2:9d:8d:93:e6:71:a2:d5:34:ce:
85:fb:a7:a7:bd:32:8b:e8:3f:43:74:e5:30:00:3c:
90:da:cf:c9:ab:c6:d6:d3:09:2c:19:ff:66:78:d7:
b5:4c:a5:b9:24:2c:48:ee:21:74:b9:d8:a9:6a:59:
49:6b:e3:96:23:25:b3:78:37:88:44:a0:5b:02:14:
83:b4:61:63:c5:d4:65:39:19:1d:dc:07:c2:95:b5:
04:5e:9f:a7:d0:cb:62:e2:74:b6:d4:db:01:7d:06:
b1:23:70:b2:29:28:4f:76:ba:cb:29:36:61:13:86:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:6B:2D:E6:DE:B9:CE:E8:69:28:D1:7B:F9:96:F7:2A:DD:EC:3F
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/xm5rLebeuc7oaSjRe_mW9yrd7D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.241.0-89.44.242.255
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3f:3e:9f:29:5d:09:00:6e:af:36:ae:ba:2b:30:3d:84:5a:
cc:d0:36:45:6a:18:72:5b:0b:41:7b:d1:e0:2f:5c:4c:99:10:
5f:aa:31:bb:bd:a5:62:7d:00:17:23:e6:a0:22:5e:d5:21:21:
45:6d:0e:2c:6f:e3:ea:11:60:34:f0:18:69:cf:d6:ec:d3:59:
c4:77:2f:c4:76:ff:f6:af:43:5b:c8:a5:8e:37:b8:bf:f1:2b:
93:4f:de:85:76:2b:1a:6a:40:5a:bb:47:48:64:98:7a:01:02:
a9:c4:af:a2:6a:78:67:be:1c:6c:43:5a:91:eb:b0:60:94:94:
25:41:45:1c:85:10:93:17:c3:a9:d0:41:9c:ac:8e:a3:1f:83:
fc:10:fe:a3:32:d0:5d:d4:0e:86:bc:9a:2a:62:54:44:0a:f2:
60:d7:c7:45:11:e1:49:8e:a8:e5:35:1b:3e:39:cf:19:a8:b2:
9d:c4:06:57:4c:e7:87:b9:ad:74:51:a2:34:3e:01:a0:58:b5:
8f:62:19:9e:0e:30:01:7b:98:41:23:e8:c8:6f:bc:dc:c0:40:
0e:47:b3:d8:e5:35:21:39:27:ef:34:70:fb:7b:86:c6:6d:01:
75:e3:63:0b:1a:a0:5d:17:79:26:ae:59:08:fc:af:ea:34:71:
a7:69:f1:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:17 2026 by rpki-client