Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/XfaQx2F1DQ7dZJr9-a__hDM5coI.roa
File: XfaQx2F1DQ7dZJr9-a__hDM5coI.roa (raw, json)
Hash identifier: Uj4xi+1RpyiVvP8zoS4JaQonnJeBy+gzjAcazMu9DFA=
Subject key identifier: 5D:F6:90:C7:61:75:0D:0E:DD:64:9A:FD:F9:AF:FF:84:33:39:72:82
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F4A5141F58BBED805B179E2E38C26
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/XfaQx2F1DQ7dZJr9-a__hDM5coI.roa
Signing time: Thu 02 Jul 2026 11:20:43 +0000
ROA not before: Thu 02 Jul 2026 11:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3204
IP address blocks: 2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:4a:51:41:f5:8b:be:d8:05:b1:79:e2:e3:8c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5df690c761750d0edd649afdf9afff8433397282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:2b:e9:13:d9:1b:0a:40:df:af:dd:4c:57:
94:dd:14:1d:bd:d9:8b:e7:ba:a9:69:0b:39:fc:bf:
c4:d8:d8:d4:5b:4a:65:5f:7c:e8:0a:af:33:0b:ef:
9e:8a:75:ca:74:21:3f:9f:6d:de:6e:65:db:89:6d:
21:d1:da:84:59:c2:f9:95:84:e8:33:45:91:71:4a:
7d:1c:33:61:1b:c5:fd:d9:13:d3:ae:c2:92:86:31:
7b:0c:7e:12:0d:82:d2:ec:6a:7e:48:02:3f:df:02:
be:8f:38:5d:45:8d:4f:8e:c1:ee:20:d8:a4:1f:0f:
b6:9a:11:82:4c:3b:23:f1:ae:d5:3b:ed:30:90:b6:
0d:c1:c8:21:1d:a0:61:d5:c4:3a:ed:1b:43:ba:5e:
f8:80:8a:64:89:23:5c:d5:0c:22:48:0e:b3:13:7a:
c5:5a:fd:58:03:d6:4c:90:dd:f1:50:c3:0d:1c:00:
4b:54:d3:18:a5:75:ee:cf:ff:1b:bf:d8:a7:34:fd:
77:18:09:31:bb:86:ee:35:90:a7:c2:ca:1f:da:e1:
f3:1a:e4:cd:49:3b:08:ae:0e:71:f4:1f:ac:7d:09:
e6:49:f0:b6:99:bd:50:32:5d:46:f8:a0:87:98:83:
db:44:a2:c3:81:e9:6a:bb:96:c3:0e:a9:2e:7a:f3:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:90:C7:61:75:0D:0E:DD:64:9A:FD:F9:AF:FF:84:33:39:72:82
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/XfaQx2F1DQ7dZJr9-a__hDM5coI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
61:82:c4:9f:42:3e:4a:08:76:4b:3c:19:dd:13:de:48:a3:5b:
3f:39:5f:7b:19:18:50:cf:38:59:5f:e1:e4:a5:1b:ca:40:a9:
c0:23:0a:15:e1:02:bd:f8:bb:44:a9:8e:aa:c3:37:38:7d:c2:
fc:ab:56:8d:29:6e:53:35:79:54:11:1d:ad:bb:a2:a4:0a:df:
de:16:3a:db:82:8e:f3:d2:da:84:03:89:42:f5:93:78:ac:2d:
d9:b3:6c:34:53:a7:86:d0:69:bd:20:27:83:e5:49:58:84:c9:
ea:a6:d2:05:dc:b4:6d:fd:0f:b8:dd:82:05:12:9d:95:a4:4a:
55:8a:89:f5:7d:1e:73:17:fd:25:23:d9:3d:13:60:1b:7d:13:
34:c1:d1:e8:8e:cd:e5:c6:3b:48:6d:72:d1:f8:34:64:8a:42:
cb:f2:8c:7c:f3:43:ad:64:4a:b8:93:91:c7:b3:ff:12:51:47:
51:49:83:bf:7e:00:45:5c:b2:2b:12:ee:95:74:62:7f:c6:f5:
c8:60:20:51:f9:af:d0:d5:c2:d7:b4:63:67:3e:71:bf:0e:f3:
50:40:8c:b6:f4:6d:a5:52:35:67:77:67:1c:9c:13:f1:82:70:
f0:7a:3b:23:1e:54:1f:30:c6:10:ad:7f:e2:bd:79:a1:3a:81:
ea:12:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:34 2026 by rpki-client