Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XnY6gJh31qFwHG2zd-89Nq8R0Ck.roa
File: XnY6gJh31qFwHG2zd-89Nq8R0Ck.roa (raw, json)
Hash identifier: Hd2qNoKVtdbn5gHzz5IyiNCTZCpHETgohVqw53fR2eg=
Subject key identifier: 5E:76:3A:80:98:77:D6:A1:70:1C:6D:B3:77:EF:3D:36:AF:11:D0:29
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 01A13AAE718850F32F0CE523EE2E3C37AE8F
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XnY6gJh31qFwHG2zd-89Nq8R0Ck.roa
Signing time: Wed 14 Oct 2026 13:51:13 +0000
ROA not before: Wed 14 Oct 2026 13:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47161
IP address blocks: 86.111.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ae:71:88:50:f3:2f:0c:e5:23:ee:2e:3c:37:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Oct 14 13:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e763a809877d6a1701c6db377ef3d36af11d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:4f:7c:80:17:6a:f8:cd:d1:20:52:85:b7:
4e:3c:c2:d3:09:1e:23:0b:18:0a:e7:ed:41:ec:f7:
cf:d0:02:80:c1:ea:e0:27:37:af:89:ec:02:29:58:
12:8d:b6:fa:6d:d7:3f:85:15:67:a5:95:7a:ec:4a:
4d:e3:63:5e:cb:fe:43:d9:e8:4c:ca:1f:bb:f6:47:
71:ab:d3:3f:f9:90:58:d8:b8:ce:0e:3b:9c:3c:62:
d9:06:b1:1f:d5:db:e3:c9:2b:36:52:08:07:29:71:
b1:52:27:66:49:be:1f:fd:23:b2:f3:8f:84:e0:cb:
fe:3f:c7:81:17:bb:f3:10:86:bc:54:d2:7c:24:4a:
ce:08:32:78:e5:03:35:16:99:d8:61:f2:1b:7b:e9:
95:f6:f7:40:ca:b5:1e:9a:07:8a:b0:49:76:27:91:
99:12:a8:c7:32:5c:5d:7d:4d:8f:3c:c2:3b:2b:bc:
46:85:ec:5e:17:de:dd:ea:25:13:0b:03:f4:25:ed:
76:a5:c8:e6:71:0c:32:5c:5a:77:1f:74:e6:ee:27:
aa:09:72:e1:18:28:85:d8:a3:1d:b0:9e:32:c1:39:
bd:6a:37:92:c3:8c:51:08:0b:98:e5:8f:d2:b9:db:
5f:98:c1:5b:ae:6d:f2:c2:6c:fc:b2:ab:1d:4a:6e:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:76:3A:80:98:77:D6:A1:70:1C:6D:B3:77:EF:3D:36:AF:11:D0:29
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XnY6gJh31qFwHG2zd-89Nq8R0Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.44.0/22
Signature Algorithm: sha256WithRSAEncryption
95:43:c0:c1:7d:3a:af:bd:15:70:03:b4:e0:80:5d:44:8a:fb:
43:6d:2f:cb:16:e5:28:78:4f:58:82:c0:e3:0a:c7:bf:e0:52:
a0:7b:9c:38:76:49:21:10:54:52:6e:fd:16:b3:b0:4c:8e:37:
87:aa:04:3b:8a:bf:23:89:8a:71:27:e3:6e:57:48:ea:68:66:
84:6e:4d:88:f3:cc:11:70:96:d3:7b:3b:6d:4f:92:74:c3:49:
85:41:e7:3a:f8:b9:25:93:20:39:b5:ab:08:28:da:29:32:6c:
f1:8c:00:d6:b3:01:74:06:1f:1f:e0:2b:a4:86:2d:da:1e:cb:
cc:c1:15:b2:e7:49:c3:37:95:0d:3e:7f:73:d5:13:2d:59:5e:
ea:d6:11:38:41:53:88:89:b0:46:ed:0e:56:34:95:52:a9:33:
76:52:71:78:2d:8d:d8:eb:3d:c5:d6:00:90:e5:82:b6:71:fd:
b9:df:d7:c3:90:4a:c5:9d:a7:ec:77:37:e5:ff:77:2e:0c:1e:
61:18:73:70:f6:c3:50:28:a4:9a:5a:5b:08:c7:2d:38:9e:58:
04:bd:88:a3:c8:95:9c:a7:b1:a0:07:e9:7c:4c:7b:b6:29:b0:
2b:d3:f8:ca:b5:37:d7:df:b5:29:83:4d:b9:11:c7:40:fe:37:
15:b9:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:24:39 2026 by rpki-client