Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Xy2lL2DYT88B5SmizPLux-GXV3Q.roa
File: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (raw, json)
Hash identifier: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=
Subject key identifier: 5F:2D:A5:2F:60:D8:4F:CF:01:E5:29:A2:CC:F2:EE:C7:E1:97:57:74
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F236919E4361D483D2FEF9AC77D44C88B
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Xy2lL2DYT88B5SmizPLux-GXV3Q.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6910
IP address blocks: 2a03:9c00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:e4:36:1d:48:3d:2f:ef:9a:c7:7d:44:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f2da52f60d84fcf01e529a2ccf2eec7e1975774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:1e:39:56:94:18:02:47:5c:e0:f2:ba:6a:
64:fd:7e:36:59:34:ba:8f:92:f2:25:65:c5:75:78:
7e:14:0b:51:de:8e:c0:50:e3:57:b5:39:9a:05:83:
2f:2a:cc:66:16:45:ba:e6:e6:ae:5c:5e:ed:9a:e1:
15:2d:2d:2a:0d:7c:a4:2c:7a:18:36:35:20:0e:e5:
31:ba:22:7d:fd:8a:f7:fa:69:a1:71:73:0c:d6:dd:
85:bc:ca:72:25:73:bf:f5:72:7f:9a:81:44:b7:94:
22:d8:59:bf:77:e5:e8:18:62:43:83:47:59:5a:b2:
d4:31:be:b0:08:43:1d:f1:6c:e7:df:4a:99:44:cd:
1b:fc:25:9f:b6:70:79:41:12:eb:a6:0c:b0:c0:54:
80:8a:bc:92:fd:8d:b3:66:cf:55:c1:ad:76:c2:2c:
e2:4d:4d:6d:f7:9a:2e:3f:73:a0:7d:49:41:9f:70:
3a:f3:8e:2c:67:fa:3b:c4:a9:63:f9:d3:54:d6:a3:
d6:35:16:f2:a2:4e:3a:61:f4:24:45:48:c7:10:41:
63:71:07:2b:37:f8:67:92:05:3b:85:3e:dd:ad:84:
4b:e6:a2:69:dd:7e:d8:56:a0:0d:7c:5f:e6:34:7d:
19:62:3e:4e:28:42:aa:48:e3:22:a3:a3:15:51:5f:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2D:A5:2F:60:D8:4F:CF:01:E5:29:A2:CC:F2:EE:C7:E1:97:57:74
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Xy2lL2DYT88B5SmizPLux-GXV3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c00:1::/48
Signature Algorithm: sha256WithRSAEncryption
03:84:a3:79:6c:1a:47:60:94:67:92:f4:d1:bd:e9:f3:f8:3b:
db:3e:6d:0e:65:ff:82:54:62:cf:d4:92:9e:db:ee:9c:d5:f5:
67:cf:ba:0d:40:50:89:86:e2:63:60:2b:28:f2:b5:69:6d:52:
ab:48:09:cc:31:0a:cb:45:f0:1b:67:20:dd:67:77:ba:94:b5:
e1:00:5d:5f:fd:84:49:26:4d:ba:2f:aa:33:87:a3:61:d6:51:
17:a0:7b:5e:25:e6:53:94:ba:69:df:9e:c2:e2:07:0c:26:3b:
e0:0e:df:3e:41:26:3a:f0:6e:d9:34:2d:75:b0:73:20:b9:2d:
01:c9:c9:c2:92:2a:a5:1b:97:08:58:ca:de:a3:ae:2d:72:d3:
b0:35:e1:5c:d6:60:38:d2:a8:fb:0d:2c:9c:a1:5f:e8:9b:22:
c9:9b:3f:6a:bb:87:17:7d:f9:94:a9:37:20:7f:72:fc:b0:2d:
ef:22:ec:e9:b9:40:99:ad:19:8e:06:8a:bb:f6:58:91:5f:69:
68:16:e1:73:18:03:a8:d1:55:da:56:8d:7c:79:a6:44:aa:4b:
dd:6e:ee:40:52:74:0f:d8:3e:e1:91:2d:fa:3b:97:9d:8a:54:
6e:41:ff:56:48:df:a9:ed:74:b3:67:87:d8:7d:49:0b:5f:11:
ca:9b:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:17:04 2026 by rpki-client