Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/XlCgZEQtVF7G71WdIl4EzNS7Lzo.roa
File: XlCgZEQtVF7G71WdIl4EzNS7Lzo.roa (raw, json)
Hash identifier: Q89IbDaHkgVrzxhEWpL8DLyPx2riYy2sMNY2wQh+q2g=
Subject key identifier: 5E:50:A0:64:44:2D:54:5E:C6:EF:55:9D:22:5E:04:CC:D4:BB:2F:3A
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019FEB0574A70D3A824C59E23FB82296D94E
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/XlCgZEQtVF7G71WdIl4EzNS7Lzo.roa
Signing time: Mon 10 Aug 2026 09:33:51 +0000
ROA not before: Mon 10 Aug 2026 09:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38930
IP address blocks: 87.255.32.0/19 maxlen: 19
87.255.33.0/24 maxlen: 24
87.255.62.0/23 maxlen: 23
2a00:ec8::/32 maxlen: 32
2a00:ec8:c00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:05:74:a7:0d:3a:82:4c:59:e2:3f:b8:22:96:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Aug 10 09:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e50a064442d545ec6ef559d225e04ccd4bb2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:d8:6b:e1:5a:ce:87:7f:f2:0f:d0:e5:fc:
fd:d9:63:9f:e3:77:70:23:5c:22:ed:6e:6c:a5:56:
e3:a9:3e:98:b5:50:7f:54:0c:21:0d:af:e6:23:31:
e7:83:05:50:72:13:e1:57:a9:8e:05:fd:fd:b2:08:
10:be:ab:b1:2b:8f:3a:68:41:42:64:82:30:d4:1c:
ee:17:ba:92:cf:00:62:fb:50:75:44:40:e1:d6:e0:
28:84:8e:a8:5f:ad:44:37:90:c7:2d:a9:ee:78:d3:
86:21:01:95:a4:cd:8e:44:17:32:fb:a0:15:42:0c:
2f:80:ab:b0:6c:b5:66:8b:2f:c2:6b:96:d0:75:2c:
2b:12:9c:53:bb:a8:f6:2a:e4:8a:36:ec:cd:be:e3:
66:eb:53:44:c5:91:cc:39:58:44:a7:f0:82:52:71:
cb:4b:42:3d:02:77:65:89:f7:67:9d:8c:cb:19:c9:
8b:a5:47:16:8f:8e:b4:a2:34:15:80:af:0b:05:74:
1f:3f:0e:48:8c:8a:99:99:57:b6:30:dd:56:18:d7:
40:a3:da:02:59:ef:87:31:a5:d4:c1:3d:8e:b0:94:
af:e3:24:20:1b:d2:1f:8c:e4:9a:72:93:fa:60:4b:
26:10:af:d0:23:f2:3f:fd:dd:f3:03:52:65:3e:d3:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:A0:64:44:2D:54:5E:C6:EF:55:9D:22:5E:04:CC:D4:BB:2F:3A
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/XlCgZEQtVF7G71WdIl4EzNS7Lzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.32.0/19
IPv6:
2a00:ec8::/32
Signature Algorithm: sha256WithRSAEncryption
8d:b0:c0:71:c4:05:ad:24:8f:aa:95:ed:59:ee:62:3a:5b:b2:
e4:2b:5d:e1:23:ef:19:b1:53:78:a2:cf:c5:02:33:7f:55:82:
2d:cb:cb:75:57:a4:67:cd:1e:4b:04:52:89:1a:30:32:1f:44:
a3:ed:81:33:6c:67:04:4e:35:6e:67:79:11:62:6a:2d:11:43:
bb:01:2a:01:7a:c6:11:19:b8:06:50:13:08:aa:7f:10:a2:34:
05:b7:8a:7b:28:06:71:05:d3:64:51:23:c8:48:2f:4c:f2:0f:
1e:7d:27:00:9c:0c:f7:4a:d8:be:9b:83:87:59:31:bf:92:d0:
5f:94:34:c1:97:f7:24:a9:d1:43:b2:d1:ea:44:5b:4b:27:b7:
10:7d:d2:5c:45:35:48:2d:54:e3:7a:90:f5:12:04:4f:8b:53:
05:31:82:c8:0b:34:66:68:3e:eb:2a:67:ec:ea:81:ae:cf:46:
fc:a3:72:e6:49:5b:31:44:ff:95:44:d9:79:0f:3a:57:2e:d0:
89:d1:56:3a:49:b1:44:b0:df:9d:ca:8a:34:12:58:0b:0c:fc:
70:c4:e0:cf:9b:93:28:a2:57:dc:5e:89:b2:7b:2c:21:4f:46:
a0:f0:cb:81:f4:dd:69:e6:51:7f:9b:a3:a6:3a:07:a0:37:b5:
04:a8:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:31 2026 by rpki-client