Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XRnfP4JODq9dRr982AkfhC4sTMg.roa
File: XRnfP4JODq9dRr982AkfhC4sTMg.roa (raw, json)
Hash identifier: UXrP+3SUwAstx9zrcYHcTUYqRDUuBS29+bO/ncihcGo=
Subject key identifier: 5D:19:DF:3F:82:4E:0E:AF:5D:46:BF:7C:D8:09:1F:84:2E:2C:4C:C8
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A19B54BD5198045E2595C3E8FB9EC9AFAB
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XRnfP4JODq9dRr982AkfhC4sTMg.roa
Signing time: Mon 02 Nov 2026 08:16:24 +0000
ROA not before: Mon 02 Nov 2026 08:16:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 213.247.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:54:bd:51:98:04:5e:25:95:c3:e8:fb:9e:c9:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 2 08:16:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d19df3f824e0eaf5d46bf7cd8091f842e2c4cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:0a:e4:48:9f:a6:0a:6a:c8:57:a2:80:48:
f9:f3:d8:af:37:4f:14:39:b2:53:1f:cf:7d:f0:40:
70:77:57:a1:fa:83:cb:84:ab:4a:0d:d7:c8:47:f5:
ca:2a:45:89:87:59:00:54:b6:69:9e:3e:c6:df:54:
88:b0:c6:40:18:64:bf:26:1d:63:0a:f2:0b:17:29:
0f:5b:09:2e:13:ea:86:93:bf:b5:58:0f:ed:a1:16:
c0:57:c4:66:92:12:72:02:45:99:d1:72:f0:ce:dc:
31:99:bf:6b:d7:1b:6c:62:04:72:a6:4b:12:de:e3:
fd:5e:1a:4e:9a:60:3f:ef:fb:4c:c8:0a:8e:47:f6:
0d:17:e5:71:2d:93:4d:8d:a6:b2:20:ce:58:66:1f:
bf:7e:79:c5:11:96:41:fe:7c:5b:5d:2f:6d:b3:c9:
6b:55:25:94:c3:59:29:db:9a:b0:ff:36:a1:83:2e:
aa:e7:26:2d:4e:a5:18:eb:37:4d:21:d2:54:d0:06:
1a:8b:0c:f9:c8:eb:7c:03:e0:26:4e:29:37:9d:af:
46:85:14:99:9a:fc:e6:a2:d8:92:f7:41:34:01:8b:
16:b6:a0:f7:92:ce:83:2e:79:27:60:a6:9b:4a:c1:
6a:2e:b6:9a:66:85:06:e7:52:1c:bc:6a:91:b5:84:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:DF:3F:82:4E:0E:AF:5D:46:BF:7C:D8:09:1F:84:2E:2C:4C:C8
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/XRnfP4JODq9dRr982AkfhC4sTMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.247.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:44:a7:ec:86:76:95:f5:3e:79:2b:e3:a2:60:19:97:e3:bf:
3f:c9:8b:d2:89:de:e3:45:06:71:60:29:75:cf:6e:aa:32:dd:
50:ba:ba:31:1d:78:92:a0:7c:5b:15:bc:5a:c2:96:d1:c2:19:
d0:6a:86:bf:df:c0:e1:28:f2:76:c3:a7:3b:80:1c:85:d6:cd:
82:4a:15:66:be:0f:30:1a:89:ef:2b:a8:7e:0a:6c:a9:32:d8:
67:e3:38:b3:f5:c9:a5:e0:b6:4f:8e:c5:f2:2f:aa:a1:a0:d1:
7d:96:d7:6f:8c:7f:81:1b:77:8a:40:9e:6d:5b:b1:bc:5c:12:
5a:99:5b:a2:54:fe:71:a9:79:ab:4e:4c:31:79:a8:94:41:9f:
ea:5a:1c:88:7d:ed:53:65:32:7e:60:30:45:c8:a8:6a:89:9f:
e8:61:92:84:6c:6a:b2:51:e5:5c:0c:21:b2:ee:56:88:dd:41:
8d:12:c7:98:be:c3:79:27:ad:a8:d0:1d:0a:05:eb:d2:2c:88:
4c:d2:de:f7:ad:9f:9a:27:df:23:8f:7a:c8:6c:22:96:3f:6e:
e6:c2:4a:3e:90:0e:f5:d1:71:5f:40:c4:1e:d1:31:3b:56:dc:
31:d4:3e:ff:a4:69:4d:e9:57:34:33:70:57:cd:68:ba:df:0d:
9d:fe:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:22 2026 by rpki-client