Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/XS5u5it8Skk0Eb6fx4dXxv7HRc8.roa
File: XS5u5it8Skk0Eb6fx4dXxv7HRc8.roa (raw, json)
Hash identifier: YmetZFI3QnOsxU58Hs2v/3cE2FhFaL+wy7OguxpNW50=
Subject key identifier: 5D:2E:6E:E6:2B:7C:4A:49:34:11:BE:9F:C7:87:57:C6:FE:C7:45:CF
Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial: 019FC67F3D52B1B3F2759E63A42B1D787382
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/XS5u5it8Skk0Eb6fx4dXxv7HRc8.roa
Signing time: Mon 03 Aug 2026 07:20:55 +0000
ROA not before: Mon 03 Aug 2026 07:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200829
IP address blocks: 2a0d:b081:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:7f:3d:52:b1:b3:f2:75:9e:63:a4:2b:1d:78:73:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
Validity
Not Before: Aug 3 07:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d2e6ee62b7c4a493411be9fc78757c6fec745cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:74:86:f9:24:d3:70:12:a2:3d:af:96:aa:
19:46:01:5b:89:9a:58:1a:94:4e:d8:98:91:22:07:
e7:bc:fc:6f:72:43:29:1a:1c:36:6b:7a:51:3c:50:
a0:78:4b:35:7a:1c:b0:b3:38:db:dd:b3:77:07:fd:
4f:52:5a:20:47:7d:0c:ae:3d:15:94:07:e5:e7:33:
15:8d:8e:c6:03:91:46:5a:15:b4:8d:07:50:9c:9c:
e4:e5:0b:c2:ad:68:2e:91:b8:30:9f:8a:a3:e7:df:
70:fa:2c:74:e0:0c:c2:57:76:fa:8c:02:c1:18:cd:
ca:d1:cd:8d:fd:88:7a:72:9c:1c:81:c0:f0:e1:dd:
4e:6b:d8:82:d0:d2:81:ba:35:d4:12:a5:93:f6:b8:
a6:8d:61:45:1c:d3:28:a6:0d:42:5e:1f:eb:e5:03:
18:11:a4:10:7a:15:e7:bc:2e:03:b3:11:fa:2b:98:
e6:2f:51:75:7c:15:6a:1f:69:23:93:09:02:c7:ef:
5f:f3:f3:89:8f:51:a5:44:ed:c9:28:90:0a:70:2d:
43:e6:e6:e9:a3:9a:54:fb:3c:e7:72:34:81:11:db:
51:7b:3a:51:40:8e:51:ff:0d:fa:27:3f:c7:c0:d2:
f3:14:84:e8:3d:11:a4:df:aa:79:d6:2b:62:91:4c:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:6E:E6:2B:7C:4A:49:34:11:BE:9F:C7:87:57:C6:FE:C7:45:CF
X509v3 Authority Key Identifier:
keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/XS5u5it8Skk0Eb6fx4dXxv7HRc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b081:1::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ed:fc:3e:a5:b5:46:86:a2:68:07:9e:6e:08:2f:9f:4f:15:
7c:dc:49:e4:61:78:e2:02:c1:1c:44:ab:65:1e:75:bd:bf:81:
d4:69:ff:95:21:79:d3:87:12:8b:64:92:32:68:22:d2:4b:99:
5c:dd:92:1d:e4:cd:cf:88:c4:f6:b5:d8:cd:f0:db:30:6b:14:
92:f1:a8:47:53:5e:31:5f:07:84:ad:44:b0:c4:31:02:87:4b:
9d:2d:eb:b2:af:6a:1b:63:a7:dd:9d:d0:42:57:96:11:fd:a8:
2a:d7:f2:5c:3e:1f:e3:56:5e:cb:1b:62:26:84:b5:91:24:cb:
40:d3:21:b8:0c:25:91:f4:b0:09:cf:a7:57:3f:7d:40:30:a8:
52:d5:a7:f7:66:1f:a8:dc:e0:cb:e9:81:32:27:34:2b:bb:97:
e4:0b:1d:fd:d3:c3:1e:00:31:63:a4:03:c9:f5:3b:62:fd:21:
3f:6e:3b:f9:cf:89:79:3b:8d:9f:0a:c7:5d:d4:b8:f4:3f:f5:
7e:fd:d5:f9:48:4e:02:d3:11:e1:2b:19:ac:ce:a7:75:a6:59:
c2:c9:6b:e9:93:94:be:b3:e3:67:df:ce:e6:bd:46:be:81:52:
9c:4e:57:64:55:ee:99:ba:c5:68:ee:0c:45:6e:db:46:07:58:
34:59:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:19 2026 by rpki-client