Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XwsEHTTfKZyOfZioYcd5xK-7DUY.roa
File: XwsEHTTfKZyOfZioYcd5xK-7DUY.roa (raw, json)
Hash identifier: W0QoWvYYKuoimLyk595xMNCZXWen03Fn/n2Kgoe4UIg=
Subject key identifier: 5F:0B:04:1D:34:DF:29:9C:8E:7D:98:A8:61:C7:79:C4:AF:BB:0D:46
Certificate issuer: /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial: 01A0EE68C8659299582705404AF40C99E482
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XwsEHTTfKZyOfZioYcd5xK-7DUY.roa
Signing time: Tue 29 Sep 2026 18:23:59 +0000
ROA not before: Tue 29 Sep 2026 18:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 51.74.0.0/20 maxlen: 24
51.74.16.0/24 maxlen: 24
2001:3fc2:8000::/36 maxlen: 48
2001:3fc3:800::/40 maxlen: 48
2001:3fc4::/36 maxlen: 48
2001:3fc5:9800::/40 maxlen: 48
2001:3fc7:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:68:c8:65:92:99:58:27:05:40:4a:f4:0c:99:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
Validity
Not Before: Sep 29 18:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f0b041d34df299c8e7d98a861c779c4afbb0d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:fe:d1:04:ff:1e:dd:96:82:53:d4:4a:92:
e3:56:d2:23:c1:c7:11:27:4d:1d:b2:e4:81:ee:9f:
c7:ae:1a:99:14:63:7d:b9:6d:1f:4b:50:4a:7b:73:
9b:5d:f4:ab:56:54:04:e8:4d:9b:97:29:29:ae:53:
a6:cb:40:83:5a:41:bf:63:9d:93:46:53:c8:97:14:
ff:aa:62:6d:63:58:af:92:d6:a5:60:b6:a8:b3:1a:
0f:a7:5f:8e:66:33:37:8a:62:6b:24:f9:b5:48:5f:
ae:0d:7e:79:ba:d7:fc:b0:16:30:16:bc:66:cd:ab:
99:72:46:51:c2:ff:ea:e5:54:fa:9a:ee:99:61:f9:
e2:d2:98:49:2d:cf:11:b7:eb:74:13:8c:a9:a5:1a:
d6:a0:bc:59:68:02:c9:bc:dc:9a:00:0d:6d:69:8a:
38:9d:4c:86:52:dd:3e:65:1b:ab:26:29:49:06:6e:
2f:69:dc:4d:d0:d9:de:48:f3:1c:2f:8a:26:67:e9:
9c:45:fe:1d:d8:f5:c4:2f:26:1e:64:0b:7e:6a:d6:
e2:14:82:d4:5a:90:fb:5f:33:69:8b:0b:33:db:5a:
49:da:ca:a0:c6:d8:da:a8:85:8a:b8:65:d4:3f:38:
79:01:2a:fa:fe:10:e5:1c:7c:f1:27:13:a4:07:81:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:04:1D:34:DF:29:9C:8E:7D:98:A8:61:C7:79:C4:AF:BB:0D:46
X509v3 Authority Key Identifier:
keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XwsEHTTfKZyOfZioYcd5xK-7DUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0-51.74.16.255
IPv6:
2001:3fc2:8000::/36
2001:3fc3:800::/40
2001:3fc4::/36
2001:3fc5:9800::/40
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
44:1e:85:47:23:99:42:3a:4d:f2:38:a5:c9:76:1f:24:1b:1d:
98:09:1e:23:8e:c6:e3:3e:e6:30:01:dc:d4:2c:eb:f8:ac:2b:
d3:6c:23:35:92:8e:f8:46:8e:21:5b:92:5d:00:d9:d9:9b:9e:
c3:6f:61:74:36:1e:e4:12:92:bf:10:80:dd:7d:63:60:bf:56:
b6:b4:1b:d2:af:be:dc:9e:46:5c:85:41:42:fd:14:fa:fe:de:
29:c2:41:41:97:b5:05:65:8c:96:90:25:d5:61:74:ce:9f:2b:
59:1c:ba:00:9d:75:45:4c:ea:1c:a9:07:06:d7:e8:49:c7:6b:
96:71:bc:d6:fb:20:cc:d2:bb:d0:7d:ed:b6:a3:fe:a1:aa:89:
ee:71:26:f9:37:5d:c3:93:49:0b:96:ce:35:3a:c5:29:0b:ff:
4b:ed:10:74:0f:58:01:96:13:2f:55:0c:ba:f9:9e:19:2b:27:
01:b0:78:f2:5f:3d:0a:cb:ba:d2:02:ac:2e:46:ae:8b:4a:54:
c7:76:c2:2c:8b:53:7d:25:46:40:05:5a:f0:9c:70:36:e7:81:
4f:76:46:c7:c8:49:11:f7:d6:d4:b9:9f:42:3f:48:9b:8d:d8:
c7:49:dd:b6:3a:64:1e:00:20:ba:6b:59:53:63:86:5a:31:56:
42:a9:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 10:59:14 2026 by rpki-client