Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Xo9a170WwWAaGk3ACXVytE6-X8Y.roa
File: Xo9a170WwWAaGk3ACXVytE6-X8Y.roa (raw, json)
Hash identifier: hLe8kLG+CBJL9Cc+0qIbKz/P+HvW76o6WO8v8lHcktI=
Subject key identifier: 5E:8F:5A:D7:BD:16:C1:60:1A:1A:4D:C0:09:75:72:B4:4E:BE:5F:C6
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01A06C4848D2A6E08E0A3112E34AD2C95EAA
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Xo9a170WwWAaGk3ACXVytE6-X8Y.roa
Signing time: Fri 04 Sep 2026 11:57:51 +0000
ROA not before: Fri 04 Sep 2026 11:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49870
IP address blocks: 45.80.36.0/23 maxlen: 23
45.95.144.0/23 maxlen: 23
45.95.145.0/24 maxlen: 24
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
2a0e:3980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:48:48:d2:a6:e0:8e:0a:31:12:e3:4a:d2:c9:5e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Sep 4 11:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e8f5ad7bd16c1601a1a4dc0097572b44ebe5fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:de:28:eb:72:c4:b8:ab:e8:2a:e8:90:63:
f4:69:fb:f9:d4:21:a5:60:20:d4:a8:5e:cb:ae:7b:
65:9a:f9:88:80:13:f9:09:91:08:a9:d1:2a:8a:cb:
cc:4e:c0:f4:4e:02:7a:bc:a5:09:32:45:31:bc:49:
c2:43:ca:ea:65:da:be:b8:99:97:7e:70:97:a0:ac:
6c:81:24:1b:fb:00:c0:fe:4b:84:15:92:f5:8b:74:
b3:03:b4:a2:f9:15:0a:30:fb:f3:b2:23:ed:2d:3b:
29:75:90:15:23:91:d4:e8:52:fe:cb:a8:da:b8:d4:
b1:ec:0c:2d:8b:1b:51:a2:c1:94:7e:25:0c:aa:8d:
6b:d0:c3:a0:35:c9:51:87:21:bb:e4:5b:ea:2b:e6:
3b:b2:14:f9:74:da:89:80:ac:11:97:e6:13:c3:71:
67:a3:06:ec:36:cc:94:ce:b7:bc:ad:d3:99:c4:7f:
b7:e1:55:be:5a:1f:6d:78:5d:b1:0c:5f:8b:3f:c1:
20:a8:6a:b1:54:bc:f8:6a:e7:f9:34:d2:be:f7:1b:
70:c0:11:c7:65:80:20:6d:8a:f4:c5:7c:1c:87:cf:
6b:b4:7b:62:c7:be:f7:ee:d9:48:ed:2e:42:08:a5:
91:7d:ae:88:79:6e:3c:aa:5f:10:12:50:00:ac:f7:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:5A:D7:BD:16:C1:60:1A:1A:4D:C0:09:75:72:B4:4E:BE:5F:C6
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Xo9a170WwWAaGk3ACXVytE6-X8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
IPv6:
2a0e:3980::/29
Signature Algorithm: sha256WithRSAEncryption
8c:1d:d6:eb:9c:94:3b:26:f1:08:d9:af:9c:13:15:e1:bf:64:
90:71:80:6f:93:12:d7:01:85:90:16:b4:4c:6a:97:c1:e7:9b:
08:57:ac:8f:82:c4:e0:97:5f:e3:36:09:3b:ee:5e:07:5e:90:
9a:17:84:7a:2e:2f:ee:38:a3:f3:aa:5f:ae:cb:1d:e3:d2:7f:
b8:d2:2d:db:12:fa:21:c7:41:d7:2a:31:f2:17:a4:31:2d:f8:
0c:d5:2e:43:39:fd:9f:16:5f:da:5f:9c:25:ef:e4:c4:68:bb:
a4:bc:53:70:a8:7d:d8:ec:e0:18:c6:fa:69:8a:70:3e:df:10:
f3:eb:f5:5f:c6:6d:81:83:8a:d9:ef:d2:30:c9:7b:cd:61:6a:
56:eb:5e:4b:e5:35:41:45:46:24:b2:43:55:16:53:28:35:b4:
1f:19:cc:9c:8b:3d:6e:cc:29:cf:3e:8e:6b:0b:9b:f1:87:d0:
7d:30:40:f2:1b:49:de:48:49:6f:03:3a:ba:eb:ed:df:e1:72:
68:33:1c:ea:69:eb:01:8d:9d:3c:8d:a9:f7:58:4b:26:bc:05:
c5:fb:7e:f7:a5:a7:ae:2d:64:bb:36:1d:68:4f:ab:dc:36:22:
7c:ae:ef:97:bc:63:20:d6:19:dc:86:1e:bc:be:3d:44:c2:74:
f9:a9:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:55:22 2026 by rpki-client