Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xad4CfeU_Vmfc_E9yo4GwMEECjU.roa
File: xad4CfeU_Vmfc_E9yo4GwMEECjU.roa (raw, json)
Hash identifier: mtcojraTnXw15zzUHP+c9Ve5DZG10m1uQr1cvBzy0jU=
Subject key identifier: C5:A7:78:09:F7:94:FD:59:9F:73:F1:3D:CA:8E:06:C0:C1:04:0A:35
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019E41B27EA5F8CC35F5C0F25958594E8B3B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xad4CfeU_Vmfc_E9yo4GwMEECjU.roa
Signing time: Tue 19 May 2026 19:24:37 +0000
ROA not before: Tue 19 May 2026 19:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22411
IP address blocks: 45.80.81.0/24 maxlen: 24
45.80.82.0/24 maxlen: 24
185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:b2:7e:a5:f8:cc:35:f5:c0:f2:59:58:59:4e:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 19 19:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5a77809f794fd599f73f13dca8e06c0c1040a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:82:bb:cc:05:ec:6f:cb:17:2c:ca:78:f7:
7f:cb:1c:89:b0:1e:77:0a:72:15:17:c7:92:c9:1e:
1d:76:d0:8c:6e:cf:75:62:79:fd:5c:4d:5b:96:04:
c2:72:60:f8:b0:78:47:5f:eb:7f:8b:7f:78:20:9c:
fd:4d:20:1a:3c:7c:3a:7d:f3:ef:ac:42:11:5d:1b:
2a:98:16:7b:31:c2:b4:a9:63:a9:af:8f:8c:e7:12:
92:70:86:f7:af:cf:b2:d8:0e:b7:6e:8d:75:60:ac:
29:b9:2e:fd:fc:fc:02:f3:e8:83:f1:ab:03:6a:f6:
17:b3:2f:cf:bd:57:13:a3:e2:77:af:a4:cf:cb:07:
db:9f:6d:c8:79:24:fc:f1:88:17:46:07:d5:70:f8:
46:4f:e6:a1:e4:38:ca:00:02:3c:3e:a4:de:66:36:
78:4a:2e:ed:5e:12:33:55:5b:5d:31:01:a9:92:8d:
13:20:9e:79:45:04:da:95:18:ed:1c:4a:06:3c:e4:
ec:52:29:55:fa:76:fc:27:8e:e0:04:b3:39:e5:a8:
b1:59:fc:f3:75:07:26:af:60:3d:28:4a:de:bd:b2:
ba:5f:31:04:e3:60:aa:a3:9c:55:af:c3:52:67:3d:
a5:68:7c:16:b9:2f:b5:4c:df:ed:aa:ca:b0:67:20:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:78:09:F7:94:FD:59:9F:73:F1:3D:CA:8E:06:C0:C1:04:0A:35
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xad4CfeU_Vmfc_E9yo4GwMEECjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.81.0-45.80.82.255
185.241.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:27:41:71:f3:ae:a1:54:dd:e2:c5:71:43:e7:9a:4e:19:b6:
66:8c:2a:05:c9:fe:79:46:6a:70:65:9f:49:26:07:e8:ea:81:
29:7a:92:8c:ad:e7:a5:67:0c:13:83:34:ac:ef:f2:e3:cc:e9:
3e:32:2b:91:6b:a9:f9:ac:cc:40:9c:2f:0d:69:ca:4f:96:4c:
0e:24:67:7d:d9:7b:e2:48:d4:3f:b0:bd:a6:72:76:74:fe:f9:
61:98:d4:cd:37:cc:f4:24:fc:66:65:39:f0:a8:51:3a:0f:91:
95:ab:d0:bf:56:1f:f7:85:dd:9b:38:1a:0f:ff:50:0c:5a:ea:
3e:bd:a3:10:ad:58:79:b8:5b:39:5f:69:35:d3:60:56:e6:52:
0b:73:a1:9b:e8:5f:01:ce:91:ba:ad:03:18:b7:93:f1:ec:3f:
87:15:51:1c:fe:79:dd:14:0f:a5:bd:ff:2c:0a:2e:61:ee:de:
23:48:a1:69:f8:5f:b8:42:ee:d6:30:d3:e1:9f:16:0d:3a:5a:
70:6c:4f:65:c9:b8:f3:59:71:0f:b9:97:43:0e:06:53:47:17:
fd:99:6b:25:b7:cb:5f:28:5a:2e:0d:24:31:4d:2c:2f:26:7a:
3b:c8:0e:b7:d5:f8:bc:89:be:2d:57:b2:85:5c:af:18:88:67:
dc:9c:13:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 21:18:15 2026 by rpki-client