Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/xZpVsdR8byrDOhtkihXsBj7ahyw.roa
File: xZpVsdR8byrDOhtkihXsBj7ahyw.roa (raw, json)
Hash identifier: gEVFGzQUdZIHZpLD7UNkmD2vDPUL0zRMrJ6Jin9iB4k=
Subject key identifier: C5:9A:55:B1:D4:7C:6F:2A:C3:3A:1B:64:8A:15:EC:06:3E:DA:87:2C
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019DAFD94B8CBF62F0224812A63B74565F25
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/xZpVsdR8byrDOhtkihXsBj7ahyw.roa
Signing time: Tue 21 Apr 2026 11:42:26 +0000
ROA not before: Tue 21 Apr 2026 11:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 5.182.128.0/24 maxlen: 24
193.163.40.0/23 maxlen: 23
193.163.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:d9:4b:8c:bf:62:f0:22:48:12:a6:3b:74:56:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Apr 21 11:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c59a55b1d47c6f2ac33a1b648a15ec063eda872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:7c:b3:d2:91:9e:e0:73:dd:6e:20:dd:39:
9a:81:ae:c0:4c:5c:81:58:65:4b:ce:2e:13:34:0b:
e7:2d:be:1b:fc:f8:13:d9:a6:83:cf:7f:5e:9f:bd:
8e:a5:6b:e2:b0:25:5e:d9:5e:58:36:20:07:7b:45:
57:53:10:be:e2:f9:b7:f0:79:c2:f0:6d:78:9c:ad:
e3:37:c9:00:04:ad:c7:a3:4d:1c:af:67:cb:ed:43:
95:5d:8b:f7:81:fc:d4:38:d4:01:2d:4e:16:ea:fe:
1e:62:1b:32:aa:f1:7b:91:1b:86:57:50:b3:b0:f1:
3a:5f:44:14:17:64:c7:10:b0:42:32:ae:e4:54:c7:
c2:0f:18:69:92:47:e4:5e:c6:19:b2:93:0e:43:0b:
cc:97:19:44:94:f1:52:46:5a:92:85:44:b8:dc:52:
21:18:61:12:81:81:4a:72:21:d5:f7:28:e5:3c:58:
f4:55:62:a4:7e:5c:bb:29:38:23:1a:6c:cb:46:10:
de:93:55:27:01:04:46:e9:fd:17:a3:81:ea:44:1b:
79:bc:ba:e3:58:7a:58:ef:7a:a6:9b:45:a5:a8:a5:
a8:5d:b6:8e:7f:e6:70:b0:6c:50:3f:93:f0:87:b7:
fa:00:2b:ba:0e:aa:cb:ca:fe:a4:05:e1:9e:46:74:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:55:B1:D4:7C:6F:2A:C3:3A:1B:64:8A:15:EC:06:3E:DA:87:2C
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/xZpVsdR8byrDOhtkihXsBj7ahyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.128.0/24
193.163.40.0/23
Signature Algorithm: sha256WithRSAEncryption
46:01:71:e8:b4:75:b0:bb:35:f8:a1:63:fe:7d:f1:02:35:09:
55:1d:21:74:6b:10:41:18:8c:06:43:86:b1:14:13:c3:d8:5b:
b8:4c:d7:45:7d:db:b4:87:82:9b:a9:b8:1c:43:e7:a5:5e:90:
9c:cd:79:2e:cf:a7:56:bd:e6:d2:32:be:c1:ee:8e:2a:e0:29:
62:09:35:91:ae:09:01:37:5a:6e:a1:21:d5:74:d5:2d:20:ac:
4c:9e:d4:e8:8c:40:8d:70:28:b2:95:d9:99:f0:b4:5f:01:67:
17:fd:fa:e5:06:4e:20:0f:47:a2:b0:8f:43:b1:6c:f5:ed:bc:
ac:38:c9:28:33:a3:06:6f:8a:35:27:2c:a0:8a:ba:8b:56:61:
33:5b:ae:6a:60:71:0a:01:7b:55:a4:91:04:69:dc:c6:36:fd:
1d:4e:c3:8e:45:29:d6:2a:3e:b4:2f:2e:8e:8c:5c:fc:7b:68:
91:6e:0d:ed:04:aa:95:13:f7:00:93:38:0a:c1:f7:09:c2:4e:
5a:ae:f6:86:b7:51:00:51:bb:f9:5e:ce:60:ab:ad:9e:cb:eb:
9a:7a:e7:bb:59:cf:6c:1c:d8:7f:c5:9e:85:fe:08:90:32:3d:
85:2a:ef:be:3a:6c:81:ab:3e:c8:0b:f8:28:1b:32:9a:8c:86:
aa:61:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:46:12 2026 by rpki-client