Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa
File: XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa (raw, json)
Hash identifier: sJ5W26p1BLswbXARJ6bN/ijwMZCfu7E6N/+XnCa8Kg8=
Subject key identifier: 5E:A3:1A:62:F8:42:1D:29:58:1E:E0:20:70:12:77:0F:55:DC:28:EC
Certificate issuer: /CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Certificate serial: 019CE238FA8B917448B0AF4AEE83CDA21D2C
Authority key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa
Signing time: Thu 12 Mar 2026 13:25:10 +0000
ROA not before: Thu 12 Mar 2026 13:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 208.122.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:38:fa:8b:91:74:48:b0:af:4a:ee:83:cd:a2:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Validity
Not Before: Mar 12 13:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea31a62f8421d29581ee0207012770f55dc28ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:2a:f9:18:eb:a0:76:00:37:e5:aa:b4:26:
07:73:71:79:da:a7:74:1b:59:0b:5b:45:07:e0:f6:
f2:64:65:74:bf:12:e2:91:f2:09:7e:43:ae:f5:bd:
c7:49:5c:b2:db:93:a0:da:66:77:d0:6e:d9:7e:d5:
29:ae:19:b3:cf:ff:d0:e9:7f:94:ab:f2:f7:fe:9c:
0e:72:ad:d6:dd:68:20:aa:fe:53:02:e5:f0:de:53:
46:78:bb:c1:f2:2f:1e:a7:51:42:d8:c7:45:57:32:
66:c8:43:13:b3:91:75:71:d2:7d:8a:18:26:24:ed:
7c:e2:b6:aa:1e:23:78:bd:85:83:b1:de:0e:a1:93:
08:49:c4:4c:40:de:b6:0e:08:60:48:a6:58:fd:59:
f3:13:f8:f8:68:33:0f:4d:7f:6a:df:b2:96:ca:57:
d9:8f:c5:cc:34:9c:37:95:fc:30:3f:26:62:32:a1:
50:c9:da:c4:3a:cd:4a:51:ad:6b:93:b0:c1:55:d7:
81:48:46:8d:86:ab:71:b6:33:94:92:10:62:bf:2d:
37:51:cc:6e:87:a4:b9:25:af:9f:58:34:1a:af:ea:
07:74:5a:95:39:29:26:9a:f4:1d:ba:39:05:38:5f:
13:bf:73:2d:8c:f6:37:bf:01:86:80:2a:0d:6a:5b:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:1A:62:F8:42:1D:29:58:1E:E0:20:70:12:77:0F:55:DC:28:EC
X509v3 Authority Key Identifier:
keyid:4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.122.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:90:03:47:62:89:a1:13:cf:cd:79:d1:a2:3e:f1:01:3f:e4:
9e:86:01:25:b8:ed:e0:3f:8c:49:3e:2e:a7:f8:06:11:ca:b6:
34:d5:97:25:ae:44:d8:3f:91:eb:46:26:a1:53:79:fa:92:e2:
24:3e:77:55:bf:95:f7:44:d4:55:81:a1:0b:4a:9b:33:77:71:
fd:7f:82:92:cd:44:e6:dc:3e:18:34:f7:7f:8a:c5:6b:68:a6:
f1:f3:e2:a8:df:0a:18:06:9b:e0:13:2b:58:6d:64:05:8f:25:
6d:9f:91:c6:12:45:90:76:18:75:06:a8:94:c1:53:16:4e:95:
a4:e8:82:dd:ed:6c:21:b2:71:48:98:cd:6c:27:57:14:99:47:
3c:b3:a0:6f:22:32:dd:6b:b7:9b:cd:94:8e:e7:21:05:9d:76:
e5:3f:44:c3:8e:29:a0:36:cd:4a:44:1d:ea:a5:4d:6e:32:3c:
22:aa:67:55:a9:fb:43:c7:e4:fe:30:5f:46:e1:40:41:d8:58:
5c:8f:3e:c8:74:5e:71:ba:d9:99:be:4e:74:93:38:dc:1b:15:
cb:f1:f5:f4:5e:80:65:8e:9f:bd:96:06:76:52:c2:53:58:95:
09:dc:30:f0:de:87:c8:9f:a2:e6:e0:99:57:30:cb:b9:74:b0:
40:d8:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:13 2026 by rpki-client