Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/XG45-dkrjZwdFgIEASudJhYYqA8.roa
File: XG45-dkrjZwdFgIEASudJhYYqA8.roa (raw, json)
Hash identifier: djWr/s32as+sKlSv5ersJGirbqj8zQDuitFpGIaAl/k=
Subject key identifier: 5C:6E:39:F9:D9:2B:8D:9C:1D:16:02:04:01:2B:9D:26:16:18:A8:0F
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A01657CBF52DA06E0C46D905693645C3B7
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/XG45-dkrjZwdFgIEASudJhYYqA8.roa
Signing time: Tue 18 Aug 2026 19:27:27 +0000
ROA not before: Tue 18 Aug 2026 19:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219122
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:57:cb:f5:2d:a0:6e:0c:46:d9:05:69:36:45:c3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 18 19:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c6e39f9d92b8d9c1d160204012b9d261618a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:2e:f2:0c:df:c3:88:c2:d2:d9:4e:93:db:
85:b0:d3:3e:f8:06:93:d1:44:22:d8:cc:0d:1d:82:
92:36:0f:db:5f:2b:05:0c:7f:20:8d:85:26:11:4a:
bd:7f:a3:9e:7f:be:3d:63:d8:a2:33:1f:f2:05:47:
af:ac:3a:65:5f:e7:fd:8c:db:d3:34:61:c7:ab:da:
35:8e:29:b8:77:f5:2a:29:59:48:7d:cc:8e:7b:4f:
ce:17:21:17:a1:be:51:0c:10:b8:ec:ab:17:c4:e1:
11:6e:cf:7e:0d:f0:24:59:5d:65:68:42:ce:c3:13:
e1:ad:65:81:23:48:42:87:ea:c2:22:7a:78:f7:da:
2d:7f:f8:4f:a9:88:8e:d0:74:1d:23:9c:a2:e0:74:
22:83:8c:60:84:da:97:9f:9c:08:56:b8:a0:e7:93:
4f:c2:9a:7c:1a:e9:8f:39:c0:ba:95:aa:0b:0d:64:
3e:23:d3:04:d7:c4:34:b1:12:c7:3f:52:aa:38:b7:
cc:3c:be:71:9c:d4:9f:34:42:56:9a:d9:02:12:f3:
66:f9:f9:49:ff:51:df:d2:ac:3c:d1:d7:9a:8e:1b:
10:d7:16:21:8b:c0:24:4b:20:2f:e2:a2:24:b4:e3:
d2:74:58:8c:3d:13:29:05:8d:d6:01:f4:22:fa:98:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:39:F9:D9:2B:8D:9C:1D:16:02:04:01:2B:9D:26:16:18:A8:0F
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/XG45-dkrjZwdFgIEASudJhYYqA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:76:04:4c:81:4d:14:e4:89:f8:0e:37:f1:2f:8b:92:e9:a8:
c6:3f:da:f3:de:5c:c2:e2:56:46:e3:22:7a:53:67:74:13:13:
64:1b:da:36:83:c9:df:7e:b4:1f:f7:0c:eb:df:f0:32:93:e6:
86:5f:e8:03:6d:5e:fc:ff:27:a4:ac:62:38:70:49:3f:40:d5:
5c:e7:08:48:a4:4e:4d:a9:f5:03:a6:59:f6:81:9b:1a:22:d0:
c1:e8:54:e8:c0:d9:3b:21:36:50:02:01:41:65:71:76:af:ac:
3e:01:54:76:83:af:20:25:0c:ed:94:7b:9d:a1:a4:f3:b2:cb:
61:06:b4:51:da:15:64:eb:08:58:92:2d:13:72:11:de:6f:2c:
b7:98:c8:b6:7b:e5:59:74:bc:8f:db:73:55:15:8d:7c:f4:ba:
ca:dc:e5:26:02:ec:f2:2b:36:61:88:f6:09:18:6f:89:02:42:
0c:7b:d7:6b:e9:ca:83:1c:91:b4:38:f2:f5:2d:bd:12:43:62:
38:13:01:93:cb:5c:1f:cb:49:dc:00:2b:26:39:c6:b2:b7:8e:
bd:19:d4:e4:d3:df:f0:1e:9f:d9:b3:96:fc:b0:7c:9d:4a:cf:
7e:92:1d:a0:01:5d:62:c3:02:1d:a1:3e:b4:8e:da:a2:c7:21:
14:e5:09:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAWV8v1LaBuDEbZBWk2RcO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYwODE4MTkyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzZlMzlmOWQ5MmI4ZDljMWQxNjAyMDQwMTJiOWQyNjE2MThhODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ku8gzfw4jC0tlOk9uFsNM++AaT
0UQi2MwNHYKSNg/bXysFDH8gjYUmEUq9f6Oef749Y9iiMx/yBUevrDplX+f9jNvT
NGHHq9o1jim4d/UqKVlIfcyOe0/OFyEXob5RDBC47KsXxOERbs9+DfAkWV1laELO
wxPhrWWBI0hCh+rCInp499otf/hPqYiO0HQdI5yi4HQig4xghNqXn5wIVrig55NP
wpp8GumPOcC6laoLDWQ+I9ME18Q0sRLHP1KqOLfMPL5xnNSfNEJWmtkCEvNm+flJ
/1Hf0qw80deajhsQ1xYhi8AkSyAv4qIktOPSdFiMPRMpBY3WAfQi+phHhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxuOfnZK42cHRYCBAErnSYWGKgPMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvWEc0NS1ka3JqWndkRmdJRUFTdWRKaFlZcUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgdMA0G
CSqGSIb3DQEBCwUAA4IBAQDLdgRMgU0U5In4DjfxL4uS6ajGP9rz3lzC4lZG4yJ6
U2d0ExNkG9o2g8nffrQf9wzr3/Ayk+aGX+gDbV78/yekrGI4cEk/QNVc5whIpE5N
qfUDpln2gZsaItDB6FTowNk7ITZQAgFBZXF2r6w+AVR2g68gJQztlHudoaTzssth
BrRR2hVk6whYki0TchHebyy3mMi2e+VZdLyP23NVFY189LrK3OUmAuzyKzZhiPYJ
GG+JAkIMe9dr6cqDHJG0OPL1Lb0SQ2I4EwGTy1wfy0ncACsmOcayt469GdTk09/w
Hp/Zs5b8sHydSs9+kh2gAV1iwwIdoT60jtqixyEU5QmI
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:29 2026 by rpki-client