Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XiXusPMaSZZvHunfn1g6DCe_RRs.roa
File: XiXusPMaSZZvHunfn1g6DCe_RRs.roa (raw, json)
Hash identifier: Yips5j/OoCsCXzsRrpODW0t6Yf6SPzwOY2oicYKyU/A=
Subject key identifier: 5E:25:EE:B0:F3:1A:49:96:6F:1E:E9:DF:9F:58:3A:0C:27:BF:45:1B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A085C2242905BBB287128852620EE539E7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XiXusPMaSZZvHunfn1g6DCe_RRs.roa
Signing time: Wed 09 Sep 2026 10:41:28 +0000
ROA not before: Wed 09 Sep 2026 10:41:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 5.253.36.0/24 maxlen: 24
45.8.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:c2:24:29:05:bb:b2:87:12:88:52:62:0e:e5:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 9 10:41:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e25eeb0f31a49966f1ee9df9f583a0c27bf451b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:e0:e7:e5:e5:7c:77:c7:03:9f:07:d2:58:
fa:b8:a4:e7:00:1b:5e:b1:a6:06:d4:1f:45:2d:a1:
69:6b:83:38:fc:27:a0:8a:d1:f0:43:d3:73:64:40:
79:bc:1c:3b:52:6d:67:bb:26:b0:87:1a:1d:70:e6:
a5:1c:4b:e6:ea:f5:e3:6a:f3:de:f4:b4:7f:91:f0:
58:63:55:b2:2c:ce:df:89:f1:af:3f:ab:c8:ac:7d:
ef:36:ee:cb:28:55:27:0a:3a:80:40:8d:1f:b9:a3:
1d:7c:e3:c2:cd:4a:cc:55:a7:c0:cb:68:45:3f:4f:
91:36:20:a4:ee:65:bc:a9:97:28:a8:39:5d:71:29:
11:26:24:e3:85:09:7a:0d:fe:55:7e:47:ad:d0:eb:
5c:2d:87:f4:23:9a:19:bd:b2:bf:68:3b:a2:b2:43:
84:84:82:2f:a6:85:57:05:e2:fc:53:4d:60:90:ae:
63:85:4b:54:d7:68:5f:df:af:23:85:92:21:cc:84:
6f:41:cb:d4:5f:4c:84:e0:6c:fe:05:a6:8a:94:d2:
e8:f3:e3:6b:19:60:44:05:45:ff:2c:74:d3:49:96:
f2:67:0b:d0:d9:33:e0:21:3a:42:79:43:0c:76:e6:
06:fc:71:ec:c6:b2:52:57:98:2b:64:79:e7:52:93:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:EE:B0:F3:1A:49:96:6F:1E:E9:DF:9F:58:3A:0C:27:BF:45:1B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XiXusPMaSZZvHunfn1g6DCe_RRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
45.8.186.0/24
Signature Algorithm: sha256WithRSAEncryption
63:db:9b:fe:8b:11:dd:1d:37:1c:94:fc:b6:4a:a9:38:b8:20:
52:ee:a0:8f:cc:eb:86:f1:d8:09:18:61:62:61:e1:c0:ab:c4:
8f:87:5b:90:c8:c1:36:21:fc:48:6f:49:64:3d:b5:6f:2c:17:
15:85:d7:e8:e6:12:9f:42:b4:9c:86:5b:fe:fe:2c:dd:77:39:
13:cb:9c:2e:22:fd:89:84:5c:bf:8f:44:54:16:52:52:d4:1e:
10:4f:8c:a1:0b:4f:c1:c0:fd:52:71:a9:f3:58:4f:fd:cd:f7:
c3:58:2e:42:56:61:fb:85:7e:e8:55:9b:38:14:c9:32:38:f0:
25:c7:f5:25:95:83:e5:10:cc:a7:a0:cc:5a:27:1d:d5:1f:2d:
84:3c:9a:a9:fb:54:1f:bf:a1:a1:9e:51:df:e6:1a:3b:0b:06:
14:f2:4d:6e:e8:4e:74:24:43:03:db:50:d9:7f:27:6c:e3:42:
fc:c0:21:39:95:73:86:db:ce:2a:de:38:94:21:99:cb:77:02:
e0:64:a7:3a:5e:9c:6c:08:ae:5c:0f:9c:46:18:ee:5e:8a:99:
60:f0:ce:7c:3f:43:81:08:63:80:61:96:a1:63:ae:3d:82:04:
30:f0:33:e0:0e:f2:5c:88:49:89:b4:27:b7:8d:0c:a7:dd:3a:
79:57:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:12 2026 by rpki-client