Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/Xjd2nEgakCo2fY4rbOSyQLi3D9o.roa
File: Xjd2nEgakCo2fY4rbOSyQLi3D9o.roa (raw, json)
Hash identifier: GlIDVJuQJDnQqFuLY3v3XQOstKkpkHMP+LPNKhwjPpc=
Subject key identifier: 5E:37:76:9C:48:1A:90:2A:36:7D:8E:2B:6C:E4:B2:40:B8:B7:0F:DA
Certificate issuer: /CN=093e8fed87a5a206c3ddb0b0d9bf1de088676174
Certificate serial: 019F2368A2575491DFC09CA70FC76F930974
Authority key identifier: 09:3E:8F:ED:87:A5:A2:06:C3:DD:B0:B0:D9:BF:1D:E0:88:67:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/Xjd2nEgakCo2fY4rbOSyQLi3D9o.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a2:57:54:91:df:c0:9c:a7:0f:c7:6f:93:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093e8fed87a5a206c3ddb0b0d9bf1de088676174
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e37769c481a902a367d8e2b6ce4b240b8b70fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:d9:92:e1:7b:d7:57:b8:06:fd:6b:5f:df:
09:76:88:86:cd:ed:3b:79:91:87:b2:88:b1:b0:69:
75:36:cc:af:09:26:a6:91:c5:7d:d2:a6:3a:71:b4:
83:89:e8:e0:60:2b:24:5c:1e:27:de:73:c5:cf:11:
c2:bc:23:7f:dd:d1:fc:ab:f6:50:d6:9e:25:10:38:
a5:f3:2b:46:f2:be:c7:bf:5c:63:5b:b5:0b:2b:e3:
06:ea:3c:4e:bc:fe:a1:b6:cc:78:a2:6b:66:6c:5d:
1d:cc:1a:b6:61:f0:31:d5:2c:70:77:24:8c:ff:98:
8c:4c:21:74:b0:1c:a7:05:17:e8:af:c9:6d:19:1c:
3f:da:2d:03:57:dc:2a:b2:4f:53:79:1f:bb:00:f2:
ab:3f:e2:8f:b8:7c:84:b1:0e:7e:c9:22:78:5c:2b:
0a:cc:72:1c:4d:f0:38:a7:94:b1:29:8f:51:30:ef:
73:cd:17:2f:30:06:0e:38:3c:0c:89:9e:26:ac:30:
c4:72:fd:cc:ad:7e:7b:83:d4:91:5f:47:2d:58:62:
25:27:34:01:2c:82:da:99:76:9d:19:31:83:a9:8b:
86:d3:08:d1:59:70:ed:ed:c5:ef:c4:8c:44:6a:9c:
d0:01:cb:a6:5b:28:bf:be:08:b3:7d:d1:3d:d3:4a:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:76:9C:48:1A:90:2A:36:7D:8E:2B:6C:E4:B2:40:B8:B7:0F:DA
X509v3 Authority Key Identifier:
keyid:09:3E:8F:ED:87:A5:A2:06:C3:DD:B0:B0:D9:BF:1D:E0:88:67:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/Xjd2nEgakCo2fY4rbOSyQLi3D9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
51:d8:f1:19:f1:e5:6b:38:80:f7:ce:ea:e2:6e:01:7b:68:52:
61:34:cd:84:74:5f:db:74:3a:4a:b8:0f:65:44:a1:36:fd:95:
5c:e5:c1:ac:ba:88:dd:b1:ed:46:99:88:ed:8f:7b:ed:ee:91:
d9:ed:50:a8:85:4c:72:1d:17:a4:95:49:4d:15:4a:46:07:2c:
c6:fd:87:0c:0b:34:19:74:ca:38:b2:21:24:36:ea:24:c6:59:
82:19:be:d2:32:79:53:23:9c:1c:9f:0f:92:cc:c0:7d:f2:b7:
81:1a:ee:f4:d4:b8:79:2c:62:56:e1:70:9f:5a:b7:cb:80:ba:
f6:cf:85:27:4c:de:a1:71:3d:07:5a:d8:eb:48:67:93:bc:12:
92:10:a2:9f:57:da:f5:74:95:56:bd:6c:ca:80:53:40:27:f3:
93:dd:06:8a:91:2f:66:31:3b:03:f5:57:f6:fe:a0:08:4a:b5:
e7:ba:ef:1d:52:b5:e6:f9:3e:c6:ec:65:3d:e3:e5:67:5e:ed:
ed:f4:06:aa:bd:76:42:07:7c:38:f7:96:a4:96:82:46:0a:56:
20:8b:da:3b:86:92:19:e4:ac:84:26:36:cc:fb:2f:5f:67:a2:
77:38:4a:60:d8:be:03:cc:8a:52:5d:52:dc:c4:fc:24:d6:f9:
ff:bb:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:30 2026 by rpki-client