Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/XoEkPtTXjeb_-7xj-jmj9LR0DZ0.roa
File: XoEkPtTXjeb_-7xj-jmj9LR0DZ0.roa (raw, json)
Hash identifier: nDfriDConckMs48sY8E3bTYeB/Xt3SqWx+9aKAnIj6c=
Subject key identifier: 5E:81:24:3E:D4:D7:8D:E6:FF:FB:BC:63:FA:39:A3:F4:B4:74:0D:9D
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 01A101B4D56CCE06B0DFB8DB8D26A972BCBB
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/XoEkPtTXjeb_-7xj-jmj9LR0DZ0.roa
Signing time: Sat 03 Oct 2026 12:19:50 +0000
ROA not before: Sat 03 Oct 2026 12:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 80.89.0.0/24 maxlen: 24
80.89.1.0/24 maxlen: 24
80.89.2.0/24 maxlen: 24
80.89.3.0/24 maxlen: 24
80.89.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:b4:d5:6c:ce:06:b0:df:b8:db:8d:26:a9:72:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Oct 3 12:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e81243ed4d78de6fffbbc63fa39a3f4b4740d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:b2:c4:0a:3e:0e:1a:01:59:10:2b:a4:96:
5b:ea:f8:1a:9d:0a:f3:9e:d2:42:30:4b:b2:3c:b1:
ab:a9:dc:b3:6e:ad:48:c3:55:13:30:c4:81:0e:99:
7b:3a:e2:25:12:16:6d:f0:76:f8:0c:32:89:d1:21:
2d:1b:f3:1a:9c:5b:96:60:8a:36:ce:cb:ba:97:c9:
1d:95:67:1f:d2:ba:49:cc:09:db:7e:ec:ac:0a:90:
32:6e:7a:26:c9:4e:21:cb:92:4c:57:65:96:00:6b:
dc:23:16:73:01:23:ea:74:97:6a:89:9b:d3:9c:90:
b1:51:be:84:18:87:65:3d:52:47:8f:e7:ce:62:90:
71:48:12:fb:51:4b:9d:60:49:51:10:6f:8d:99:61:
d9:3d:b4:14:9d:c6:5f:52:68:c6:2b:f7:73:cd:9a:
72:5b:38:af:89:60:0d:e9:0c:1a:8a:63:d4:85:6b:
53:ab:17:dd:0c:3d:77:ae:48:eb:bf:58:e3:0e:18:
d3:a0:70:64:7f:1a:3b:72:d8:1a:58:5f:5c:ef:6c:
aa:d3:a8:5e:f8:35:b8:7f:be:e4:1c:63:e3:3e:59:
2c:e4:4f:49:e0:5d:7e:e5:95:a1:9e:1d:70:c6:15:
bd:40:df:b3:4d:53:ae:5d:85:5b:40:ec:57:6f:d9:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:81:24:3E:D4:D7:8D:E6:FF:FB:BC:63:FA:39:A3:F4:B4:74:0D:9D
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/XoEkPtTXjeb_-7xj-jmj9LR0DZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.0.0/21
Signature Algorithm: sha256WithRSAEncryption
14:f9:ab:ac:19:11:53:c3:b2:4a:9b:d4:91:72:42:50:1b:d5:
46:7d:7c:66:a1:4d:65:1d:79:32:f3:bd:b8:23:00:1b:ff:b9:
82:00:e1:f4:bf:7e:ab:19:23:49:92:75:69:4c:1e:9a:64:46:
eb:b0:42:15:29:07:eb:5d:82:d3:27:93:b3:88:45:4f:f5:b2:
d7:f4:31:a8:8c:a7:fd:fe:9a:12:42:23:dd:11:16:2a:99:dc:
6b:90:ad:89:61:91:0e:13:98:c6:0c:35:b2:40:1a:b9:05:be:
43:fd:af:4b:ca:49:29:36:f8:27:67:f8:97:53:05:9a:60:55:
55:fb:49:6b:46:d2:a5:1d:d8:d1:27:a0:b9:fb:e0:58:dd:dc:
5d:f4:63:9c:49:a6:32:ee:47:3e:63:7f:5e:9b:c7:d3:a6:bd:
62:58:95:d2:73:ae:2a:7f:5c:5a:65:f0:95:24:4f:7d:88:44:
b9:74:12:3d:6a:b8:d2:38:0a:5a:ac:46:16:91:63:fe:d5:bb:
1a:6a:f4:8d:5a:cf:1e:1c:b1:9c:94:5c:c0:cc:ab:9b:79:6f:
cc:6f:59:f4:94:22:35:c9:26:67:00:4a:5f:98:e8:67:f0:9d:
5e:77:51:5f:88:b6:2d:4f:b3:9b:86:b2:18:0d:d2:bd:81:8d:
cf:90:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:49 2026 by rpki-client