Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/X0szM5xVddCf4IojmmM1AFZ8c5k.roa
File: X0szM5xVddCf4IojmmM1AFZ8c5k.roa (raw, json)
Hash identifier: VE9ye/us+VMaqdru28BJEcJGi+J/T/vsAJ5+ZnETRfk=
Subject key identifier: 5F:4B:33:33:9C:55:75:D0:9F:E0:8A:23:9A:63:35:00:56:7C:73:99
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A13BBE5C2B35EBE0C68C42F97BBE4BC348
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/X0szM5xVddCf4IojmmM1AFZ8c5k.roa
Signing time: Wed 14 Oct 2026 18:48:13 +0000
ROA not before: Wed 14 Oct 2026 18:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:1cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:be:5c:2b:35:eb:e0:c6:8c:42:f9:7b:be:4b:c3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 14 18:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f4b33339c5575d09fe08a239a633500567c7399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:89:8d:59:59:42:d2:18:ea:f7:7b:6f:8a:
5e:16:17:7f:93:bc:4e:34:4f:69:65:ea:bd:0c:c6:
1b:f4:27:d7:65:83:09:a6:0d:f2:c1:73:90:d6:82:
34:97:d4:6b:8a:6a:92:b9:7d:a6:dd:82:2e:61:70:
d4:8f:01:da:39:d2:15:85:6d:90:7f:2e:1f:3e:e0:
e4:1d:f3:41:c0:ef:29:46:f0:60:c2:f5:dd:67:28:
d2:a0:b4:fb:70:fd:40:63:a4:ac:d6:2d:2c:38:55:
26:40:3d:d0:03:a7:4c:8c:d0:6f:9d:94:c0:1e:61:
7d:8c:53:cd:dc:e5:25:39:38:df:f4:26:7f:8c:67:
59:b9:f9:61:df:24:75:47:e4:34:3a:cd:74:7d:b3:
c9:b2:d4:65:da:af:f6:cc:c3:63:ce:44:23:ba:ca:
61:ef:f5:e9:05:2f:39:41:db:37:52:c1:d2:9d:ce:
4c:4b:b0:37:7c:f3:10:4b:63:76:a9:13:d5:9a:72:
16:25:7f:e2:ef:79:b6:58:26:4f:1d:81:68:bb:39:
fd:35:26:f9:1e:9b:2a:98:25:bc:9d:71:e9:f8:27:
e5:ab:6a:29:17:ef:d5:90:cb:67:03:20:30:cb:0d:
46:68:f6:d6:86:09:57:8b:d1:e8:38:70:e8:02:df:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:33:33:9C:55:75:D0:9F:E0:8A:23:9A:63:35:00:56:7C:73:99
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/X0szM5xVddCf4IojmmM1AFZ8c5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:10:9e:b5:7c:5c:b4:b2:57:13:f7:12:0b:d8:e2:68:14:14:
0e:0a:4e:6a:c0:49:b9:77:9c:70:3d:4f:12:6c:49:b2:3e:e9:
80:b7:01:2e:03:b0:f8:4e:8a:5e:3a:b4:79:22:48:93:d5:36:
15:55:06:22:89:48:89:2a:78:a2:4e:da:36:b9:6e:eb:91:86:
c9:fa:d4:b7:d4:28:e6:23:f9:4b:ae:f8:43:7f:87:72:1e:b5:
41:bc:5d:e0:eb:8c:e1:59:e5:7b:6c:12:21:a4:87:e0:d8:b3:
a3:29:8e:92:4a:35:54:74:5d:e4:34:75:40:c9:ba:b0:ef:d8:
13:f2:56:5a:17:60:6c:58:fa:2e:d6:66:e4:ff:fb:2d:3e:b2:
8f:78:8a:c1:4b:e5:df:19:fd:4e:d2:bd:e4:e1:49:06:87:e7:
8f:81:ce:46:94:96:ed:9d:49:29:8d:47:6b:f8:0c:f4:25:5c:
a3:e8:0f:ff:31:02:ea:7f:9a:d4:b7:9d:b4:50:23:36:d5:7f:
87:81:5d:52:32:7a:e0:29:27:48:2d:23:b1:3b:77:87:ff:0a:
c9:ab:4e:7a:f1:16:f6:4b:d6:1d:1b:e8:4c:a4:fa:0d:95:ec:
31:99:b8:af:dd:c2:3d:0d:0c:cd:a1:ec:05:db:53:b1:c8:05:
6f:4b:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:34 2026 by rpki-client