Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/yXSxy-Ud5hpYhDudle8jqsHgiLk.roa
File: yXSxy-Ud5hpYhDudle8jqsHgiLk.roa (raw, json)
Hash identifier: bQr1kj0qxfUykyK39RyOmaCXTRaX3QEOCZ9gmcczZvg=
Subject key identifier: C9:74:B1:CB:E5:1D:E6:1A:58:84:3B:9D:95:EF:23:AA:C1:E0:88:B9
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A1A20E548C1CF394B8F9319EA034A7B834
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/yXSxy-Ud5hpYhDudle8jqsHgiLk.roa
Signing time: Tue 03 Nov 2026 15:36:50 +0000
ROA not before: Tue 03 Nov 2026 15:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35278
IP address blocks: 153.80.22.0/23 maxlen: 23
153.80.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:0e:54:8c:1c:f3:94:b8:f9:31:9e:a0:34:a7:b8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 3 15:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c974b1cbe51de61a58843b9d95ef23aac1e088b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:dc:2a:a9:0f:14:8d:21:de:dd:82:22:40:
d7:c2:ba:00:69:ed:09:41:4d:50:a5:57:25:7e:3e:
0b:ef:0a:c5:14:19:27:94:cb:7c:45:96:2f:38:c7:
f7:d2:a2:c2:34:26:40:9e:28:3a:55:f7:f7:ac:74:
40:e2:bc:d1:0d:9d:87:b9:21:3f:3e:28:9f:52:77:
15:d5:0f:02:1e:f0:ce:7a:cc:46:5f:50:41:83:5d:
a8:6e:a9:27:a0:e1:c7:c9:bf:e9:f3:c5:3c:51:c8:
cc:93:92:a7:67:72:be:0a:23:a1:28:9d:c6:d6:2d:
c2:56:e0:96:1c:dd:f5:50:b1:44:27:f1:c2:d7:a9:
76:2f:4f:6f:c4:6c:4a:8a:ef:09:2c:a4:38:a1:b2:
14:31:0a:b4:6d:c0:68:b0:68:04:0e:9c:4e:b1:34:
0d:44:83:70:8e:9a:43:4e:a0:8c:95:e1:8b:07:46:
2f:49:89:36:f8:70:32:5f:8c:59:af:df:4a:8d:86:
6c:ba:d9:85:ae:8c:8a:99:ec:5c:20:bf:2d:9b:c5:
ef:d7:f7:82:4c:9f:8e:6d:fc:2e:e7:41:b2:db:ea:
42:41:a6:ef:72:f5:c1:68:b0:e9:a4:fc:22:f5:0f:
a9:35:26:bf:bc:91:27:46:4f:80:4e:28:d6:61:1e:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:B1:CB:E5:1D:E6:1A:58:84:3B:9D:95:EF:23:AA:C1:E0:88:B9
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/yXSxy-Ud5hpYhDudle8jqsHgiLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.22.0/23
153.80.40.0/23
Signature Algorithm: sha256WithRSAEncryption
69:af:11:d4:da:01:5b:64:c4:51:84:fb:e2:87:b9:8e:d3:15:
68:aa:5b:07:0d:6c:47:58:f8:2d:19:f4:31:3b:c6:74:8f:3b:
dd:7a:81:57:d8:71:7e:29:d1:4b:14:71:7e:a1:d5:87:93:c9:
88:7d:3f:39:63:57:6c:88:4e:d6:86:ca:38:14:17:fc:37:8e:
d0:0a:cd:29:57:4a:45:47:b8:22:c4:37:59:0c:78:e6:83:0f:
3b:4e:9e:fe:9a:b3:d9:3b:d6:65:6e:29:91:9a:be:53:fd:1c:
41:f4:95:29:68:ae:47:d8:4b:b9:07:e7:f7:eb:81:bf:19:e3:
71:8e:24:16:99:a2:04:24:a6:3e:aa:4b:fd:ba:1c:b9:ce:a7:
80:85:8e:4e:07:3e:d5:fc:24:95:f8:f0:09:2c:ad:5b:47:06:
6e:56:09:e0:34:bd:a2:ad:13:bb:b8:30:5d:7f:11:1e:42:c4:
45:ea:02:17:69:0f:0b:05:1a:bf:4f:c0:c5:f4:e2:90:6e:c3:
18:aa:21:d5:23:20:cd:c0:57:b6:6c:8a:e4:28:11:41:05:dd:
46:17:56:c2:14:69:03:4b:a8:7a:9b:bc:cb:6e:96:db:71:e9:
6a:d8:1c:55:94:a0:f8:9e:4e:0e:20:ab:c6:0b:1c:e2:15:55:
78:8b:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:22:52 2026 by rpki-client