Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa
File: Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa (raw, json)
Hash identifier: ImBcIaHYckQlyUn7qD0gyo0OZpqemgaOxC20pRlncvA=
Subject key identifier: 5F:2C:F5:05:E7:5D:35:22:2A:0A:23:BF:FA:7E:41:54:1B:60:0C:E7
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E4F81564A31B1E3E0533B1B41A45DD8DD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa
Signing time: Fri 22 May 2026 11:45:36 +0000
ROA not before: Fri 22 May 2026 11:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214588
IP address blocks: 45.74.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:81:56:4a:31:b1:e3:e0:53:3b:1b:41:a4:5d:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 22 11:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f2cf505e75d35222a0a23bffa7e41541b600ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:60:57:03:e7:9e:01:c8:06:fe:d9:18:a9:
1b:25:f5:db:31:b5:c4:12:0c:cd:35:5f:32:c3:74:
bb:e6:8c:00:61:25:f3:75:e9:7c:63:48:2c:42:86:
7d:41:11:56:46:8d:d5:12:b4:e9:50:19:82:47:c3:
22:a7:51:fa:7e:9d:68:2f:80:bc:1b:0b:5b:4e:8c:
09:2e:27:4e:08:6c:9a:75:ab:3f:d8:8e:a1:41:b6:
a3:b6:fb:44:30:14:9a:6b:07:e6:d2:c1:f6:e3:81:
8c:79:22:24:39:58:bd:65:da:c4:d0:aa:2f:9c:d3:
03:db:67:02:80:1d:fe:92:f2:09:a3:41:e3:91:89:
a2:3d:ea:4c:f3:e2:74:17:23:7c:71:a7:79:fc:01:
55:88:cc:5e:87:c3:31:a9:1a:e1:38:0b:5c:30:02:
05:cf:0f:2f:c8:be:fd:97:af:cc:5e:e3:26:87:18:
e9:6f:58:fe:df:dd:48:c2:92:c9:86:a5:8f:ed:c3:
8c:b3:5e:ad:70:72:d1:e1:df:0b:6f:48:4e:e3:82:
06:41:d0:a4:56:40:78:e2:51:8d:4d:ad:ce:23:2e:
95:40:94:21:ef:54:a4:43:c8:d5:b8:91:35:53:e5:
61:43:c7:1f:27:55:e4:3a:b6:5f:16:de:9e:05:ee:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:F5:05:E7:5D:35:22:2A:0A:23:BF:FA:7E:41:54:1B:60:0C:E7
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Xyz1BeddNSIqCiO_-n5BVBtgDOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.179.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2d:ac:30:49:58:b7:9f:44:cb:99:dd:f1:89:e6:d2:c9:86:
f4:05:0b:3d:e8:54:d2:b6:8f:b6:ce:83:8b:90:ea:6f:9f:65:
d0:f4:ea:71:0e:44:21:3a:4d:ae:45:f9:62:ba:b1:5c:7b:2a:
33:61:62:54:41:9f:f0:f4:2d:79:b8:b6:58:81:5a:a5:45:2e:
0e:b1:ed:da:c0:b4:d5:f3:a4:d2:0b:58:45:d0:c7:be:c3:34:
4c:b0:ed:8b:7d:ee:af:04:20:9d:e0:0c:2d:e7:50:73:58:f6:
c3:12:a8:2e:d7:ba:0b:0e:61:8c:b8:43:7d:7b:14:a0:04:52:
4e:28:2d:5d:a6:85:89:b2:76:6e:63:51:ee:cf:8b:15:21:6d:
a0:4e:00:7b:60:40:0a:28:db:2b:f5:1a:51:40:50:c8:aa:f4:
bc:08:c9:c9:2f:f6:c9:34:15:8f:1d:43:d2:06:59:39:f9:28:
28:d5:85:d0:f5:89:08:ec:b3:14:93:c8:4a:31:24:12:2a:40:
f8:03:40:dd:59:87:41:40:ed:89:06:4d:4b:72:70:01:f5:46:
dc:c3:54:3d:e5:90:d6:43:6a:4a:4f:b3:0c:b3:c4:2b:a1:62:
34:69:38:d3:aa:01:7a:f2:16:b1:6c:5a:fe:ec:0f:74:4d:de:
58:5c:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:49:53 2026 by rpki-client