Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/xW-_5BziklddMP4N1WRDWUysaGI.roa
File: xW-_5BziklddMP4N1WRDWUysaGI.roa (raw, json)
Hash identifier: 2PigZdbAmf20HzjgKmVA5WGwWsuRJUzgmLUGliAvzus=
Subject key identifier: C5:6F:BF:E4:1C:E2:92:57:5D:30:FE:0D:D5:64:43:59:4C:AC:68:62
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01A06675A307152FA1F1DBA44120A0EB44E6
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/xW-_5BziklddMP4N1WRDWUysaGI.roa
Signing time: Thu 03 Sep 2026 08:49:40 +0000
ROA not before: Thu 03 Sep 2026 08:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:75:a3:07:15:2f:a1:f1:db:a4:41:20:a0:eb:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Sep 3 08:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c56fbfe41ce292575d30fe0dd56443594cac6862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:79:8b:6f:9a:5e:24:76:06:e1:aa:f6:e3:
f5:ff:8f:a6:3b:7c:3a:41:5f:11:ed:5f:84:2d:ff:
c9:92:9f:81:51:09:5e:89:58:17:3a:c3:eb:24:1d:
66:6a:2a:3c:f8:13:14:24:57:0c:63:6f:4f:60:01:
3d:dd:29:c6:c7:2f:fb:aa:39:23:10:82:a5:3a:b7:
4d:28:ff:20:d5:db:46:9b:b2:fb:37:26:97:33:76:
ac:6b:c9:81:0f:41:72:1c:de:47:42:97:ff:77:3c:
ea:77:5d:79:a4:7c:cd:a0:9b:38:69:64:1c:be:68:
f8:a9:72:a1:a0:09:65:b2:82:5f:c4:ad:8c:9a:f7:
f5:85:1f:c3:f6:2b:ff:c5:a4:f6:44:92:f2:44:0f:
23:57:2e:72:43:da:fd:e2:d1:d8:53:eb:de:0d:f2:
45:00:58:af:fc:06:c4:2c:40:c7:12:9a:e0:73:72:
a3:68:dd:a5:b8:6b:df:f2:1f:64:a1:4c:a3:63:35:
d3:9c:d3:27:80:9f:10:b0:67:e3:32:9e:5e:6e:3a:
d2:f6:2c:b5:28:01:b0:cd:93:60:a0:46:5e:91:6f:
9f:87:36:01:4e:e3:0d:a4:47:e7:74:f4:9f:1f:92:
11:40:98:cc:cf:6e:c8:91:6e:e1:20:dd:07:3b:71:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:BF:E4:1C:E2:92:57:5D:30:FE:0D:D5:64:43:59:4C:AC:68:62
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/xW-_5BziklddMP4N1WRDWUysaGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c5:87:b1:05:0b:57:40:da:4a:ad:2f:1e:41:d0:0b:93:3b:
2c:b5:5f:5c:23:fc:bb:83:3d:23:27:73:38:7f:ae:0d:d2:e2:
4b:88:b7:5e:59:25:eb:45:88:60:46:12:8a:9c:8d:16:17:3b:
07:90:d5:8a:13:f4:61:4f:5e:ae:8f:5a:f7:a1:af:76:0d:30:
61:7b:93:7c:29:4d:dc:29:0b:18:e1:68:3e:79:a8:14:b5:e4:
34:7a:5e:e6:66:5a:d8:d1:1c:91:61:19:ff:bf:bf:4d:59:0c:
84:7c:ce:a6:f4:de:ae:26:0c:1d:ab:f2:e1:2a:80:ac:89:6e:
a7:fe:50:41:f4:50:e5:be:02:6b:5e:d9:96:44:3d:39:de:5f:
fb:8d:3e:c9:1f:96:48:6f:dd:55:e4:31:3d:17:84:13:80:2d:
56:91:35:39:08:61:02:87:e4:43:67:2d:bd:00:2d:f6:77:d4:
50:0c:1f:8f:c9:bb:aa:4c:5f:ae:25:87:1a:9c:0e:71:8d:a7:
8f:a4:25:20:66:1a:96:cb:aa:63:cf:93:d1:96:3b:30:ea:0f:
cf:99:f6:c4:37:3b:4c:92:b3:85:82:c5:1b:3e:0c:d6:14:e5:
d5:d1:c9:d4:36:6b:d8:09:ef:c4:f8:6a:4b:95:99:c4:2a:0d:
97:41:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:07:48 2026 by rpki-client