Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa
File: xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa (raw, json)
Hash identifier: +8eOBSGGw03CBaqRTg+4T+O7Q/El7GL/vSuip22cJd0=
Subject key identifier: C5:9E:7D:FA:93:53:73:B7:B3:39:E9:8F:DE:09:98:FF:CB:59:DC:A0
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 019F1D2F831B447B241B21207AB1B47B9D53
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa
Signing time: Wed 01 Jul 2026 10:18:00 +0000
ROA not before: Wed 01 Jul 2026 10:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 2001:67c:b1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:2f:83:1b:44:7b:24:1b:21:20:7a:b1:b4:7b:9d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Jul 1 10:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c59e7dfa935373b7b339e98fde0998ffcb59dca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:75:c3:50:31:fe:f1:83:0a:83:6d:4e:10:
61:85:56:57:90:8e:02:ea:1f:60:45:ae:96:06:cc:
06:25:9d:d5:be:0a:b9:18:de:ca:b7:7f:61:75:3f:
25:4a:c2:21:7c:3c:d2:78:96:2f:95:58:b5:9a:3a:
0d:e8:91:c2:f8:ae:65:b5:e2:86:56:be:56:48:c1:
16:4b:46:ac:62:04:b2:4c:4d:88:d4:63:82:1d:5f:
ac:6f:ee:8f:f1:ed:3c:98:1d:37:7c:81:18:37:ca:
3c:20:54:43:88:a5:df:53:cd:5c:fa:d9:c8:86:6f:
8b:bc:b8:75:3d:3f:ef:f9:50:2d:08:24:af:a6:4d:
93:8a:7d:58:80:28:72:e8:29:4a:3e:73:8e:e8:7b:
02:7c:6d:6b:1e:cb:8c:96:e6:37:c1:69:5e:f8:c1:
02:1d:f5:90:e5:67:ad:20:9c:95:7a:23:7d:bb:06:
fe:ae:92:ff:a3:94:2d:c1:58:a6:cc:e4:09:78:18:
2a:59:ee:ec:6b:ce:a7:b7:b1:f3:5c:78:74:94:45:
b8:bf:b7:35:58:96:b7:46:56:2c:1f:77:6c:22:a1:
c6:62:44:46:19:ba:11:fe:08:bd:7a:f2:b5:91:13:
4c:6c:50:cd:34:f6:ef:71:00:b8:43:07:ab:4f:47:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:7D:FA:93:53:73:B7:B3:39:E9:8F:DE:09:98:FF:CB:59:DC:A0
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/xZ59-pNTc7ezOemP3gmY_8tZ3KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b1c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:58:a1:6d:a6:81:f8:92:91:21:1f:e8:46:bd:95:50:c2:ce:
fc:dd:da:cc:2f:d5:71:02:30:9c:5c:da:72:01:a3:34:91:b0:
5e:d3:2b:97:7e:9a:30:26:20:9f:ff:f4:97:51:7b:33:73:67:
92:5c:8f:4a:66:bc:f1:71:03:3c:80:9b:69:94:68:cf:fa:d3:
2c:e3:ba:41:b7:a1:eb:6f:e0:35:56:bf:74:df:e4:b4:9a:fd:
0f:80:75:52:4d:11:41:4b:f2:cf:cb:27:f5:ee:03:41:a9:05:
1c:22:e1:49:a8:7a:41:6e:d5:c1:1a:37:57:3d:4b:af:5c:d1:
8a:d3:c8:65:cb:20:aa:0a:fc:34:33:f8:91:a3:81:34:98:8e:
df:3e:b2:cd:e0:bc:10:a3:31:de:1c:7b:7c:bc:f5:97:0a:7f:
8a:ed:39:af:9a:43:cb:17:7d:57:b9:0e:75:a4:7f:27:89:d9:
34:48:4c:dc:4a:18:ad:19:2e:62:75:33:70:c0:d5:61:08:a9:
9a:bd:1f:1e:ff:51:64:4f:b5:ca:21:9b:6e:82:f3:97:51:d3:
5e:d0:95:77:52:b4:84:da:30:23:59:19:96:5b:53:32:e3:ca:
ab:6f:2a:17:7f:7a:e2:6a:81:c2:d3:b4:fa:50:19:a4:8e:9b:
d8:03:23:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8dL4MbRHskGyEgerG0e51TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NzEyYTlkNjliNGFlYzk3ODljMTRjYjA1MmI3MTM5YjA2
ZTc1ZGEwHhcNMjYwNzAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTllN2RmYTkzNTM3M2I3YjMzOWU5OGZkZTA5OThmZmNiNTlkY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfp1w1Ax/vGDCoNtThBhhVZXkI4C
6h9gRa6WBswGJZ3Vvgq5GN7Kt39hdT8lSsIhfDzSeJYvlVi1mjoN6JHC+K5lteKG
Vr5WSMEWS0asYgSyTE2I1GOCHV+sb+6P8e08mB03fIEYN8o8IFRDiKXfU81c+tnI
hm+LvLh1PT/v+VAtCCSvpk2Tin1YgChy6ClKPnOO6HsCfG1rHsuMluY3wWle+MEC
HfWQ5WetIJyVeiN9uwb+rpL/o5QtwVimzOQJeBgqWe7sa86nt7HzXHh0lEW4v7c1
WJa3RlYsH3dsIqHGYkRGGboR/gi9evK1kRNMbFDNNPbvcQC4QwerT0ckGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMWeffqTU3O3sznpj94JmP/LWdygMB8GA1UdIwQY
MBaAFNVxKp1ptK7JeJwUywUrcTmwbnXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhFcW5XbTByc2w0bkJUTEJTdHhPYkJ1ZGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hYTQ0MmUtYzg4ZS00MWVlLTkzNWYt
ODRmMDcyNjFlNWU1LzEveFo1OS1wTlRjN2V6T2VtUDNnbVlfOHRaM0tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hYTQ0MmUtYzg4ZS00MWVlLTkzNWYtODRmMDcyNjFlNWU1
LzEvMVhFcW5XbTByc2w0bkJUTEJTdHhPYkJ1ZGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsc
MA0GCSqGSIb3DQEBCwUAA4IBAQAuWKFtpoH4kpEhH+hGvZVQws783drML9VxAjCc
XNpyAaM0kbBe0yuXfpowJiCf//SXUXszc2eSXI9KZrzxcQM8gJtplGjP+tMs47pB
t6Hrb+A1Vr903+S0mv0PgHVSTRFBS/LPyyf17gNBqQUcIuFJqHpBbtXBGjdXPUuv
XNGK08hlyyCqCvw0M/iRo4E0mI7fPrLN4LwQozHeHHt8vPWXCn+K7TmvmkPLF31X
uQ51pH8nidk0SEzcShitGS5idTNwwNVhCKmavR8e/1FkT7XKIZtugvOXUdNe0JV3
UrSE2jAjWRmWW1My48qrbyoXf3riaoHC07T6UBmkjpvYAyMo
-----END CERTIFICATE-----
Generated at Thu Jul 9 12:40:30 2026 by rpki-client