Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/xesa-QwElT0OG-UmWJWWIsA61WI.roa
File: xesa-QwElT0OG-UmWJWWIsA61WI.roa (raw, json)
Hash identifier: A8C+FlP7s3G8+T5EnaDWpLrjDCWD3s5KLZT83oqBqZc=
Subject key identifier: C5:EB:1A:F9:0C:04:95:3D:0E:1B:E5:26:58:95:96:22:C0:3A:D5:62
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0E3604E619879986A97EFEFEA995B9663
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/xesa-QwElT0OG-UmWJWWIsA61WI.roa
Signing time: Sun 27 Sep 2026 14:58:54 +0000
ROA not before: Sun 27 Sep 2026 14:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 87.107.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:60:4e:61:98:79:98:6a:97:ef:ef:ea:99:5b:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 27 14:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5eb1af90c04953d0e1be52658959622c03ad562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:2e:a5:77:9a:17:58:66:02:26:1b:b3:1e:
29:b6:4c:b4:c6:f8:07:f4:94:ba:a5:25:24:e7:9b:
90:71:d6:04:df:d2:2c:4e:bb:dc:c4:03:77:82:99:
56:81:0e:38:16:b4:5b:91:49:4e:b2:95:cc:84:7c:
44:7f:94:d6:fc:73:86:b7:42:f8:8a:1d:e2:34:4e:
ee:ec:07:42:95:20:6f:bc:ed:0b:24:bb:b9:b8:44:
22:b8:7c:61:b6:f2:33:fc:58:ed:8f:b2:01:93:86:
67:c3:f1:8f:74:cd:a8:fb:41:7f:75:95:f4:ec:d7:
e0:89:33:33:f1:4e:84:4e:4f:c7:8c:fc:78:72:3e:
ae:35:c4:d3:b1:83:96:9c:34:24:65:ff:b5:65:2c:
7e:05:60:03:89:fe:28:59:10:41:ff:8e:f7:d7:16:
01:ec:29:8b:45:1f:96:40:e8:a5:45:39:34:f5:67:
5c:61:5f:eb:5b:76:e0:f1:08:64:41:55:a7:79:e5:
da:3a:2b:68:d2:ed:40:c3:89:a4:e6:dd:b1:2b:8b:
ef:af:9b:36:81:1f:18:76:d6:61:bb:db:b5:d4:69:
90:81:a1:c9:86:53:f0:ca:cf:49:a1:77:aa:2e:6d:
bc:82:7c:92:f5:83:ce:ce:00:d4:8d:2e:8b:b6:0a:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:1A:F9:0C:04:95:3D:0E:1B:E5:26:58:95:96:22:C0:3A:D5:62
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/xesa-QwElT0OG-UmWJWWIsA61WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.171.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f1:4f:70:85:bb:09:4c:b5:a1:45:b8:db:09:0d:2d:9a:18:
ad:f0:ca:0a:39:bc:4f:7a:c6:f7:a3:12:b4:c8:0b:bf:34:67:
19:27:fd:32:22:5c:d8:0f:8e:e0:81:2e:06:63:d3:b8:ed:2f:
30:4a:b2:f3:e4:8e:8f:56:bd:e0:5a:4b:84:ac:49:39:ba:15:
d0:b4:1d:73:61:56:91:2e:46:e5:b0:d6:c9:a0:cf:f1:9d:a2:
44:f4:85:80:4b:99:3c:59:c1:33:2f:e7:b5:c5:3b:6e:fb:23:
e4:0f:b6:c3:a4:56:e5:91:9e:11:ab:62:ff:65:da:76:fe:b1:
59:4a:fb:22:6b:4a:0b:b7:1e:0b:41:f5:b6:80:cd:0b:ac:d1:
7d:71:9d:d1:06:2d:16:70:4d:45:12:be:35:03:0d:c5:11:4d:
c5:f4:07:3e:ea:2b:0a:ee:ab:b8:2b:19:4d:53:df:03:70:0f:
8e:6e:c0:a4:7b:7d:c2:29:15:d5:fd:16:45:cf:3d:32:17:24:
22:90:dc:02:64:19:d6:2a:50:bf:20:0b:63:e9:d2:6d:57:f2:
e5:89:aa:c9:e1:45:b5:fa:ab:7e:1a:a4:0c:34:de:b3:2f:a9:
52:9d:06:86:53:25:77:bb:22:9a:22:15:b7:9e:e1:58:9b:51:
62:c6:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:05 2026 by rpki-client