Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xk5MpY-dzoZA3Ts2G1-JDHnOysY.roa
File: Xk5MpY-dzoZA3Ts2G1-JDHnOysY.roa (raw, json)
Hash identifier: h21TctNTTC0htaH28b0yndqn0OuOMMMU9ooA0Mk5KZc=
Subject key identifier: 5E:4E:4C:A5:8F:9D:CE:86:40:DD:3B:36:1B:5F:89:0C:79:CE:CA:C6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A1262C7E16051F2037F4D51D53D3565E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xk5MpY-dzoZA3Ts2G1-JDHnOysY.roa
Signing time: Mon 14 Sep 2026 18:20:28 +0000
ROA not before: Mon 14 Sep 2026 18:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 177.1.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:26:2c:7e:16:05:1f:20:37:f4:d5:1d:53:d3:56:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 14 18:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e4e4ca58f9dce8640dd3b361b5f890c79cecac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:7f:80:d6:07:12:ce:41:a6:d6:89:fb:c1:
eb:ea:73:a1:88:06:43:77:01:77:ef:cb:c8:5b:92:
97:ba:2d:4b:db:ef:40:df:f0:d4:2d:ad:e1:94:dd:
07:a0:86:96:30:33:81:b4:9a:bd:6d:a9:7f:87:92:
e0:50:76:db:20:8f:fb:da:62:ac:1e:32:2d:b8:89:
1d:ac:64:79:4b:23:b3:f4:d2:8e:50:7b:99:a3:64:
6c:4c:cb:80:eb:d0:b8:49:7e:ab:e3:8b:7b:aa:5e:
b6:c6:02:f9:17:10:ca:eb:98:ab:e0:06:6b:1c:22:
b6:96:cf:b9:8b:5d:28:10:b6:ec:c4:9a:3a:f7:9f:
fd:34:aa:ce:3d:d0:89:da:ef:8e:21:b3:b7:2c:f2:
06:21:18:e8:bb:ad:29:9e:6e:87:0f:34:d6:d4:ab:
e2:5b:75:72:68:d6:8d:18:62:64:d6:46:7b:5a:a7:
40:dc:3e:9f:a8:5e:4a:d7:8f:bb:87:75:44:63:ee:
0c:4e:8e:a5:94:08:1c:d3:b5:04:0a:9d:9f:fc:0f:
1c:db:92:19:f9:ac:c8:d3:9e:3b:c0:04:15:d4:5f:
ad:fb:b2:54:e6:7a:e3:6f:87:e2:58:46:4a:df:0c:
6a:c4:b1:69:c4:d1:e4:a4:92:fe:a2:19:ff:17:9b:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:4C:A5:8F:9D:CE:86:40:DD:3B:36:1B:5F:89:0C:79:CE:CA:C6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xk5MpY-dzoZA3Ts2G1-JDHnOysY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.1.199.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6c:3f:65:7c:63:53:45:fc:ba:4b:93:86:13:cf:0b:22:89:
61:a0:49:35:cc:28:d6:35:0a:8e:02:70:c4:09:89:cb:27:3f:
d4:17:c6:24:3b:6b:d0:3d:bc:9b:1c:27:1e:1f:ea:c5:e2:0f:
22:9d:f6:7f:44:9c:db:08:9b:ff:22:cd:ac:eb:fc:f9:d7:a9:
36:bb:a6:11:7b:9c:89:d1:49:00:a8:f8:cb:e2:3f:ac:b7:14:
4c:45:aa:b3:3e:25:fa:51:f3:3d:39:58:1c:9e:3a:c5:43:75:
0d:27:c8:5b:45:d2:c1:71:f7:c4:d0:13:7d:eb:18:9d:79:93:
1b:57:28:84:bd:48:85:a4:55:18:a9:db:64:dd:db:5c:31:0e:
ae:e0:76:65:e4:09:14:3c:08:ce:90:0d:f2:2e:40:01:0a:35:
61:c0:52:b1:57:da:7d:5c:32:d7:55:ac:ec:59:6e:03:56:dc:
b7:5b:8b:e7:3b:f4:12:ac:44:f6:e5:7b:5c:0f:f1:38:b8:b3:
0d:b8:bb:75:cc:d0:16:c8:0d:5c:44:3e:ff:6f:8f:2b:67:10:
41:6c:7b:aa:fd:44:20:d5:28:79:7a:34:bf:a7:80:e9:cb:88:
af:59:d9:99:9e:85:d0:5c:d7:18:e1:83:3c:05:86:08:99:36:
bd:a8:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:41 2026 by rpki-client