Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/xnR36Bx0JpfUS9cQokAQPkGelYc.roa
File: xnR36Bx0JpfUS9cQokAQPkGelYc.roa (raw, json)
Hash identifier: JFUwAB+A5Z2yKD/NiQL6NZtFTms+2uaDA3yF3P2VOQ4=
Subject key identifier: C6:74:77:E8:1C:74:26:97:D4:4B:D7:10:A2:40:10:3E:41:9E:95:87
Certificate issuer: /CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de
Certificate serial: 019B7C11C288D8E1CDB7803ECF49EDBC173B
Authority key identifier: 51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/xnR36Bx0JpfUS9cQokAQPkGelYc.roa
Signing time: Fri 02 Jan 2026 00:18:17 +0000
ROA not before: Fri 02 Jan 2026 00:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52149
IP address blocks: 195.20.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:c2:88:d8:e1:cd:b7:80:3e:cf:49:ed:bc:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f17452b5f1bf2ff7076ee059ff275c0cb112de
Validity
Not Before: Jan 2 00:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67477e81c742697d44bd710a240103e419e9587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:9a:07:40:65:8a:85:53:88:91:57:6c:c3:
ab:ae:78:90:85:ad:e2:b7:35:f1:b5:64:9e:20:94:
0c:41:91:9c:53:48:1d:11:a5:78:33:48:2d:ea:f4:
61:27:67:13:04:84:05:9c:53:9e:d1:48:5f:79:d9:
1b:23:35:8f:6e:e9:fb:d8:9f:fd:5f:4c:51:5a:e0:
ce:92:4d:c1:9c:8e:c3:ff:09:8b:8a:11:f4:d5:68:
42:6b:24:58:f8:d4:02:dd:db:13:9a:8f:59:ea:b8:
c6:d4:9e:15:aa:6d:d3:35:c7:11:d7:b4:9d:f0:28:
69:ed:f8:a8:ab:b7:e9:70:e4:d4:24:ca:cc:5b:5d:
4e:85:31:a2:59:cf:01:8e:19:d9:d9:46:a5:a1:51:
ad:26:41:54:8d:16:d6:a9:90:2c:fd:41:0b:65:56:
ef:2f:92:c3:0b:a6:20:30:84:60:73:40:1b:85:c4:
62:77:1f:8f:15:b8:e4:5e:2c:ba:01:9a:19:a0:98:
86:12:83:b4:e9:05:7c:14:42:77:a8:52:e3:53:47:
63:a5:1c:27:60:08:d1:44:40:6b:2e:3f:66:98:77:
8a:69:5b:80:7f:21:f8:44:39:a2:d9:9a:d9:be:1f:
49:58:3c:dd:07:8a:0b:41:4d:4d:2c:93:45:b8:94:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:77:E8:1C:74:26:97:D4:4B:D7:10:A2:40:10:3E:41:9E:95:87
X509v3 Authority Key Identifier:
keyid:51:F1:74:52:B5:F1:BF:2F:F7:07:6E:E0:59:FF:27:5C:0C:B1:12:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfF0UrXxvy_3B27gWf8nXAyxEt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/xnR36Bx0JpfUS9cQokAQPkGelYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5358eb-1d43-44f4-bc00-07abff67202c/1/UfF0UrXxvy_3B27gWf8nXAyxEt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.156.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:7a:c7:af:ae:61:0b:4b:22:e9:1c:c6:8e:ee:c0:40:4b:88:
36:9a:09:79:f8:b6:52:da:e5:15:0d:7f:74:26:c1:b4:2a:01:
1c:b0:3e:b6:a4:6c:47:cc:33:24:82:47:b7:3a:31:ce:1b:ab:
4f:19:0d:eb:0e:a0:50:b6:7a:ff:bd:e9:b1:1f:00:20:33:79:
d1:34:f1:9a:36:a6:b0:43:66:67:aa:01:75:c0:09:98:f4:05:
31:de:67:83:50:0e:24:84:49:12:a2:c2:16:d4:b0:1c:94:52:
9b:8e:3f:2d:77:a9:34:8b:63:91:69:59:84:22:44:8f:05:bc:
86:60:85:3d:7f:29:6a:ec:9c:53:fa:1f:e0:98:49:86:80:8e:
58:d5:c4:86:5d:f4:9f:03:7e:7c:74:d5:35:8a:62:38:36:2f:
bf:b8:28:93:e7:33:fb:f1:87:e8:ce:2e:f8:f8:71:76:3c:61:
38:68:ac:df:c2:8b:7b:86:6d:40:80:9b:0b:2e:3b:7b:a8:4f:
c2:ea:8c:ce:b8:e7:34:45:f6:6f:73:b8:b4:48:be:d1:8d:56:
3e:71:c0:6b:a3:2d:bd:b7:67:0b:a1:e3:a9:05:25:72:74:5b:
2c:55:7d:d5:9a:90:ad:fd:55:4b:38:8c:77:a3:8d:6d:4b:fa:
ab:a3:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:05 2026 by rpki-client