Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/XM2-uA_USsSgujmR8wZPSC6UFwE.roa
File: XM2-uA_USsSgujmR8wZPSC6UFwE.roa (raw, json)
Hash identifier: jSMtzxRcV9U9/3TWMGpnlh2Svj+3tBUcoKV0mg8gLDQ=
Subject key identifier: 5C:CD:BE:B8:0F:D4:4A:C4:A0:BA:39:91:F3:06:4F:48:2E:94:17:01
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019E3790CCBD272053D673471FA69C7EEBB0
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/XM2-uA_USsSgujmR8wZPSC6UFwE.roa
Signing time: Sun 17 May 2026 20:11:36 +0000
ROA not before: Sun 17 May 2026 20:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.232.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:90:cc:bd:27:20:53:d6:73:47:1f:a6:9c:7e:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: May 17 20:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ccdbeb80fd44ac4a0ba3991f3064f482e941701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:0d:cd:b2:a1:4e:9b:9b:36:3a:13:cd:fe:
45:3f:2c:6c:4e:40:82:f0:91:d3:54:24:d5:d9:4f:
9b:77:d8:89:3a:81:36:ab:e6:f1:e1:8e:cc:9d:a0:
2b:bc:75:f2:83:11:25:89:4e:0f:02:0a:af:84:a1:
8a:69:10:05:e3:7e:50:5c:7d:3e:bc:d7:de:98:a2:
c1:3b:1c:c4:4b:f1:a2:81:59:37:95:12:88:b0:f1:
a1:2d:1c:82:c1:3b:df:dd:1d:b1:c1:2e:db:40:96:
68:c3:15:d4:13:0f:43:3f:b2:fc:04:b6:4c:54:a3:
fa:c5:d6:52:54:24:63:bf:c2:f4:92:9a:19:b8:0f:
6c:c4:3f:39:95:b7:79:3e:b1:6d:5b:2f:ec:85:cf:
e1:78:39:de:9c:f6:0d:5e:b0:02:8a:eb:d5:2d:34:
89:ac:da:fb:cb:22:0e:ac:78:43:6c:33:57:2b:cc:
b0:05:41:59:98:f1:f4:f2:d0:07:0c:83:f7:5f:74:
b1:13:8c:98:e2:5d:ff:89:80:7f:8f:68:9e:aa:68:
34:bb:35:fd:93:46:b3:64:92:2c:13:4c:6d:e0:20:
b1:a0:a4:3b:c0:cf:28:32:d5:5c:64:82:09:9d:10:
8b:ab:5e:5f:2c:74:b7:72:a5:df:4d:5c:79:66:5a:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:BE:B8:0F:D4:4A:C4:A0:BA:39:91:F3:06:4F:48:2E:94:17:01
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/XM2-uA_USsSgujmR8wZPSC6UFwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.75.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8b:f3:c8:d0:bb:37:7a:80:20:f6:1d:7c:22:41:d4:62:80:
d9:a6:33:c1:d2:4e:85:f6:3e:3d:d7:0d:02:4c:eb:fc:d2:1a:
1e:83:54:a6:5c:b7:9f:65:28:06:b1:f6:ee:11:56:d2:d2:ac:
19:42:be:bc:e5:ea:73:27:51:6c:6e:cc:1b:97:51:56:66:f2:
00:d3:77:38:85:c9:6d:97:11:83:63:a4:ab:1f:7b:e8:19:3c:
b8:da:1b:fe:2b:a1:36:2d:3f:4b:26:03:59:ed:96:47:c8:70:
0b:cb:ed:80:f6:5b:35:85:88:52:3a:66:87:78:a6:62:b0:21:
51:6c:5a:f1:ac:01:96:85:06:5a:d4:ba:53:c8:73:31:c3:14:
3f:9b:2c:be:e6:5a:33:07:0b:71:96:23:e4:45:49:e4:38:c7:
17:33:e8:7c:b2:3b:6d:a9:6b:e9:81:61:e8:7b:b4:67:9b:73:
b2:29:52:07:1c:f0:42:c4:9b:fb:44:26:31:3c:eb:5b:ad:e1:
c3:19:ed:21:33:f7:90:bc:be:c2:3d:41:a2:d4:ee:3f:bf:a4:
cd:df:57:b1:4a:b3:21:d8:29:c1:40:54:88:7e:10:b8:94:c4:
98:8f:2e:61:f4:c9:59:92:61:07:31:3f:26:0d:6f:ba:54:ce:
3a:b0:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:35 2026 by rpki-client