Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/XZAVpeao-MzWMM0T1IBuo6mJOhw.roa
File: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (raw, json)
Hash identifier: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=
Subject key identifier: 5D:90:15:A5:E6:A8:F8:CC:D6:30:CD:13:D4:80:6E:A3:A9:89:3A:1C
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019EEBF8D63BD5D2CDFD85B41CF040381971
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/XZAVpeao-MzWMM0T1IBuo6mJOhw.roa
Signing time: Sun 21 Jun 2026 20:56:53 +0000
ROA not before: Sun 21 Jun 2026 20:56:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201176
IP address blocks: 2a10:ab80:3fa::/48 maxlen: 48
2a10:ab80:3fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:f8:d6:3b:d5:d2:cd:fd:85:b4:1c:f0:40:38:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Jun 21 20:56:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d9015a5e6a8f8ccd630cd13d4806ea3a9893a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:68:ca:79:ae:fc:a2:4e:05:3d:b2:38:06:
0d:b2:a3:df:41:8f:43:2c:09:02:35:71:c3:4d:77:
6b:9d:cd:39:20:a4:b1:c7:cf:84:dc:31:89:e7:0a:
8e:96:76:82:fe:7e:9d:77:30:c1:99:4d:58:0d:9c:
be:32:e7:66:ec:c8:a2:81:fa:79:4b:97:b0:3e:06:
4d:d1:f5:e8:ac:30:a2:80:6a:54:71:b8:66:95:23:
b1:7f:0d:67:9a:b4:4f:5a:e7:09:22:cf:70:05:c7:
37:6d:cf:95:c7:21:5b:48:ab:c3:10:75:26:64:16:
22:09:34:02:d6:4c:d7:d7:bd:bc:ef:e5:f1:fd:91:
5a:e1:35:78:a7:39:f1:ed:dd:a3:6b:c3:46:c9:82:
b1:2f:a5:f4:45:a5:3b:54:f1:e6:bc:25:4a:ba:c1:
47:c3:c6:5b:b4:8c:51:48:34:1e:bd:9a:ff:a5:1e:
63:63:e0:02:f2:a3:3d:76:ee:17:14:e9:b5:05:b4:
9a:ab:07:0e:a3:d6:7e:e4:ba:ac:93:4f:d8:71:a9:
1b:56:8e:e1:20:0b:7c:12:06:84:84:0a:5e:f5:c7:
11:94:1e:25:e1:20:b7:33:24:6e:d8:79:51:4a:83:
b2:03:de:84:8b:5c:23:9e:9d:18:ce:a0:4f:41:93:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:90:15:A5:E6:A8:F8:CC:D6:30:CD:13:D4:80:6E:A3:A9:89:3A:1C
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/XZAVpeao-MzWMM0T1IBuo6mJOhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3fa::/47
Signature Algorithm: sha256WithRSAEncryption
70:2b:82:cd:49:56:06:73:e1:98:5b:aa:68:c9:16:c5:a0:98:
3c:99:40:ab:ce:38:c0:73:79:77:a9:41:18:36:7f:d2:68:ad:
4f:92:7c:f8:83:c6:66:9f:b2:f8:96:e2:4a:69:62:4f:3d:54:
75:bc:3a:55:3b:a8:ac:5a:61:f1:d1:ca:31:eb:24:40:cd:db:
b7:d2:77:58:31:39:11:30:34:58:49:cd:2c:77:81:32:4d:ff:
64:8e:fd:90:60:50:5c:39:e5:19:76:ce:87:ed:1a:76:e6:de:
11:26:8d:74:33:3b:e7:f7:a3:0d:11:68:11:b0:92:ff:fd:7e:
99:bf:57:a8:f5:c6:08:dd:ec:ee:fb:9b:7d:74:b9:c3:4e:28:
8b:a4:67:2b:1f:3f:d3:fa:ae:db:cc:a1:b4:9a:b3:1e:fc:8b:
00:27:4f:69:5b:e8:d1:28:7f:4d:96:35:cb:66:b5:3e:00:50:
53:b9:d1:a5:a8:32:71:a1:db:53:1e:6e:e8:f2:bd:ed:93:2e:
5f:9a:fa:5f:db:d4:33:04:72:27:4c:cd:5e:bb:be:fd:57:0b:
88:6d:ce:7e:0b:eb:48:56:aa:20:ca:24:38:b5:dd:b4:a2:b4:
2c:eb:3a:49:ee:5d:c8:22:55:19:21:74:6f:5c:e0:81:d1:d5:
49:22:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:44 2026 by rpki-client