Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/XPDqvRwfUolijQXO6ZOS77QNfSw.roa
File: XPDqvRwfUolijQXO6ZOS77QNfSw.roa (raw, json)
Hash identifier: RI++qOsaF57oZd+Ldiy7viNwift/qVfwM1v3UeNzXY0=
Subject key identifier: 5C:F0:EA:BD:1C:1F:52:89:62:8D:05:CE:E9:93:92:EF:B4:0D:7D:2C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0D7DCE69055C9E6FDE7190119B5E2E118
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/XPDqvRwfUolijQXO6ZOS77QNfSw.roa
Signing time: Fri 25 Sep 2026 09:19:33 +0000
ROA not before: Fri 25 Sep 2026 09:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196695
IP address blocks: 170.168.11.0/24 maxlen: 24
170.168.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:dc:e6:90:55:c9:e6:fd:e7:19:01:19:b5:e2:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 25 09:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf0eabd1c1f5289628d05cee99392efb40d7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:b8:04:5c:e7:16:e1:23:10:92:c6:18:9f:
94:30:ab:05:07:fe:a7:0f:fc:b6:38:59:84:32:e8:
aa:bb:ae:8e:83:9d:99:f9:5c:11:64:8b:8c:74:38:
4d:3e:ad:7e:23:a3:42:f2:a0:4b:9e:fe:35:ac:53:
d4:6b:9f:93:71:4f:78:21:8e:27:76:97:6c:e9:21:
0e:7d:88:97:0f:4d:70:74:90:55:54:88:b3:d8:50:
86:db:37:63:7d:7d:5f:54:9c:73:35:2a:81:89:50:
e3:18:cb:ef:a6:92:3c:cc:01:3d:64:ea:2b:bf:fc:
a3:d8:d4:2b:20:b3:db:29:14:58:53:ab:6b:c5:2d:
d2:88:fa:a2:bc:e1:64:e5:44:77:10:21:cf:fc:03:
86:f6:5f:8d:a3:31:da:f1:8f:6f:c0:19:73:fd:dd:
27:08:3c:12:4c:49:d2:ad:24:ed:39:26:a3:dc:e4:
0b:83:8b:f9:06:30:f1:d7:cc:25:56:5c:20:7b:46:
95:ea:bf:f5:ba:91:42:5c:2f:d8:cc:1b:25:67:38:
20:50:21:1c:8b:bc:d5:fd:d3:4f:ab:38:10:e4:bf:
20:eb:a9:5e:7f:26:73:e2:57:63:65:c1:d8:5c:24:
e8:90:5b:4f:e0:1a:48:11:d8:b7:63:1d:0e:8d:1b:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:EA:BD:1C:1F:52:89:62:8D:05:CE:E9:93:92:EF:B4:0D:7D:2C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/XPDqvRwfUolijQXO6ZOS77QNfSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.11.0/24
170.168.51.0/24
Signature Algorithm: sha256WithRSAEncryption
76:25:15:7a:7a:7d:d5:c8:cf:34:62:ec:3b:5a:d7:cd:1b:d0:
7e:cd:9c:64:e1:90:1f:a2:4a:bf:78:88:6d:fe:98:fc:86:cc:
11:e2:9a:e2:76:de:dd:73:d0:88:75:c8:30:e1:12:d9:42:14:
39:85:9b:6e:d3:8a:6a:7b:9e:bf:57:d7:2b:8b:8e:14:2e:c5:
9d:6c:fa:15:95:f2:da:7f:21:5d:92:a8:84:a7:b6:af:e6:b2:
df:a6:b3:17:48:74:c6:70:c1:ee:a3:b5:a1:16:f6:ba:d5:47:
0b:f4:d9:8c:30:54:5e:5f:be:49:fc:ff:6c:a9:4d:10:10:18:
d0:35:87:04:c8:21:40:b3:ad:35:51:fd:66:ee:4b:a1:58:6a:
61:1d:06:58:f3:fe:07:5e:d6:57:eb:f2:ae:97:8e:b0:5d:12:
91:53:95:30:db:9f:83:81:b5:40:c8:74:9e:62:73:7f:c7:b8:
a2:eb:6e:2f:a1:74:4a:ee:04:45:c4:22:0a:81:8e:17:9d:75:
8a:5f:c5:45:ff:16:b3:4c:2a:0c:ee:fd:78:76:14:fb:68:aa:
58:96:87:ae:d5:28:09:a4:e5:dd:f2:09:6d:2c:6f:13:15:94:
1f:4f:b8:30:45:8e:53:d0:c0:52:f8:fb:9a:76:cc:fe:c4:c7:
5c:18:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 09:16:48 2026 by rpki-client