Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XaB7N3Mfi0R6w-bV-j3CHWof0bE.roa
File: XaB7N3Mfi0R6w-bV-j3CHWof0bE.roa (raw, json)
Hash identifier: qlCGpm6p9p37xWGZZKQDwzmExPgfYTmh+PEjWPzv3hs=
Subject key identifier: 5D:A0:7B:37:73:1F:8B:44:7A:C3:E6:D5:FA:3D:C2:1D:6A:1F:D1:B1
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A10AB62135C3D4C58042924D04E1527D08
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XaB7N3Mfi0R6w-bV-j3CHWof0bE.roa
Signing time: Mon 05 Oct 2026 06:17:50 +0000
ROA not before: Mon 05 Oct 2026 06:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 81.29.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:b6:21:35:c3:d4:c5:80:42:92:4d:04:e1:52:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 5 06:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5da07b37731f8b447ac3e6d5fa3dc21d6a1fd1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:02:ec:cb:bb:7c:f7:ec:1f:77:a5:01:b1:
aa:80:93:e3:d7:f1:22:65:e2:1b:2f:dd:c0:50:6c:
5f:6a:52:e4:a1:80:35:95:bc:fb:5b:b0:25:4f:e2:
a3:0b:5c:8a:f9:3a:9b:e1:3a:18:5b:49:2d:ae:71:
48:4b:f8:66:a4:8a:57:22:e9:81:9a:ee:16:6c:f2:
12:e2:e6:e6:38:5e:8f:2b:19:14:03:3b:6a:50:17:
71:97:cb:68:f9:0b:65:c7:59:3b:07:6b:fc:99:63:
93:cb:19:85:49:7f:2e:4f:6a:ff:60:5b:17:69:d8:
99:90:6b:5d:16:50:66:f9:1b:53:43:a5:06:3b:a3:
da:d6:0a:60:e9:30:22:81:68:a5:f4:c1:85:7b:80:
c9:d8:03:cd:58:73:85:97:8c:1d:b3:e2:b3:0e:5e:
67:d4:e2:07:e7:8f:c9:82:2d:38:fd:a0:70:5b:4c:
ab:0b:4c:90:cb:a7:35:6f:8c:f0:29:00:1a:d0:d8:
82:56:db:d7:0c:4f:11:78:6a:76:e6:c1:de:f2:c0:
2d:01:72:cf:7d:16:3a:5f:4c:13:ff:6b:2e:da:69:
56:59:5a:fd:1e:6e:7a:14:2c:88:42:56:b9:2a:c9:
50:36:28:65:8d:4a:33:9c:77:a9:ff:2d:02:e1:9b:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:7B:37:73:1F:8B:44:7A:C3:E6:D5:FA:3D:C2:1D:6A:1F:D1:B1
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XaB7N3Mfi0R6w-bV-j3CHWof0bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
98:16:45:62:aa:4f:e8:5c:e8:32:cb:e6:68:6f:6f:51:d2:93:
e0:52:e5:a0:fa:b3:2e:91:1d:1f:38:27:2d:65:cc:0b:7c:15:
f1:9b:18:26:36:5a:32:5c:01:2d:56:2e:1e:7a:8e:4b:89:2a:
5d:6a:30:5c:dc:94:0f:7f:5b:d8:b1:6d:8d:ee:e6:1a:c3:f0:
4d:69:06:b6:c2:8a:66:60:e8:35:fa:71:3c:29:c0:35:19:8b:
e7:03:15:7f:56:b0:93:f3:2d:2c:e6:8b:be:e0:b1:2d:71:b3:
cd:c7:eb:40:57:b0:97:6c:35:3b:e9:eb:52:c4:2a:53:8f:6d:
90:90:b2:6e:5e:4b:5b:81:38:c4:33:e4:ac:85:1f:36:9a:25:
d2:b3:3b:8f:b8:9c:b7:44:91:e9:0c:ba:db:3a:f0:88:51:ad:
dd:f5:a0:d7:50:91:a2:72:7e:62:76:50:ae:9d:c9:9f:b8:36:
be:eb:f9:17:1e:95:d6:a2:7b:a7:27:a8:27:55:eb:b0:b7:ea:
88:4b:2e:25:ee:ff:3e:ac:46:fa:d5:11:c3:7c:56:43:64:c2:
0b:a0:4c:93:61:3a:d7:38:7e:0e:c4:44:fb:d1:7b:d7:9a:9e:
85:59:03:d8:22:15:5a:8e:24:76:79:32:73:5d:35:40:48:bc:
b0:5d:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:03 2026 by rpki-client