Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa
File: XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa (raw, json)
Hash identifier: Um6sqZHxrN2dTouXpZfutLZlTxwDMybqIAW6glre92s=
Subject key identifier: 5E:A7:29:54:27:97:D3:E7:2F:53:E4:AA:A0:47:C1:1B:B3:34:09:82
Certificate issuer: /CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Certificate serial: 019DF8B0D6CFB89B6B653339EC4DBED24FA6
Authority key identifier: F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa
Signing time: Tue 05 May 2026 15:10:31 +0000
ROA not before: Tue 05 May 2026 15:10:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214504
IP address blocks: 2a0d:9f80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:b0:d6:cf:b8:9b:6b:65:33:39:ec:4d:be:d2:4f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Validity
Not Before: May 5 15:10:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea729542797d3e72f53e4aaa047c11bb3340982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:a9:85:2d:ae:4e:58:f1:d3:b3:38:7f:b9:
5f:2d:85:33:fd:b9:9f:4d:67:0d:9e:ac:f1:2b:5d:
8d:91:e4:a7:c5:c7:cc:1d:b8:92:92:7f:d7:27:12:
e5:f7:62:2d:da:21:3c:99:bf:66:68:cc:c7:7f:8b:
2f:34:28:24:59:03:ef:83:da:25:0a:40:12:d9:89:
69:bd:26:84:4e:32:8d:db:2d:f6:14:3b:a3:56:1f:
bd:7a:db:8d:5b:72:3c:a7:05:d3:8e:4c:d4:39:26:
61:eb:74:83:11:a0:2f:c3:b9:4d:c0:fb:7d:78:db:
20:e8:aa:4a:a4:6c:eb:d0:ee:a6:d3:90:b1:bf:e4:
90:66:a6:74:af:99:d0:89:e9:d8:06:36:4d:77:53:
58:f1:81:4a:70:29:f9:e6:a2:c3:e2:c7:3b:0b:2e:
3b:4f:4a:c9:b5:e8:17:29:78:d9:43:69:99:9a:fa:
a3:6a:f6:f5:09:1b:ec:0d:e4:e4:50:fa:8b:9e:4d:
a6:a3:b4:60:ea:e8:79:b9:b8:8e:ed:b8:08:f5:c2:
68:e6:dd:17:77:fb:0e:ad:f1:64:0a:61:d1:6a:55:
95:64:1c:6a:2e:1b:18:ea:c6:64:e2:a7:70:f4:30:
9d:64:34:54:2b:92:a9:bc:4f:f0:eb:b2:84:0f:ca:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:29:54:27:97:D3:E7:2F:53:E4:AA:A0:47:C1:1B:B3:34:09:82
X509v3 Authority Key Identifier:
keyid:F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:68:ba:0b:0e:d7:45:19:9a:6b:98:26:94:d2:3a:96:2d:a0:
eb:8b:f7:cc:f0:65:49:90:84:8b:ea:ac:2b:54:52:16:bd:ce:
52:cd:03:ae:92:c8:4a:f7:40:f7:18:f4:38:d9:65:9a:39:1d:
8d:f0:08:f7:8f:9f:ec:7f:32:50:54:41:6a:a6:20:90:60:be:
5f:47:4d:81:31:c6:c5:bf:2e:16:74:bb:e9:be:1c:fd:69:d3:
18:9f:0a:8f:67:d8:18:e5:d3:58:bd:7b:b0:89:7e:35:3f:a4:
70:97:70:e9:0b:a9:e0:09:5d:17:a8:ea:da:90:4f:2d:08:4f:
b4:13:2c:1c:7e:fe:59:dd:08:78:cb:35:dc:d3:36:72:a4:c2:
65:69:d4:17:ee:6e:9f:ab:0c:54:6d:18:03:62:db:43:7b:dd:
72:99:b6:fd:89:4b:e6:61:98:42:83:b7:21:4c:0e:53:61:b6:
1b:80:c5:bf:68:be:92:b5:32:10:be:3f:78:68:90:c4:46:4a:
a6:05:5d:7c:fc:85:b2:75:5b:d2:9e:be:32:5f:56:0e:f3:6a:
6d:0c:20:10:e4:80:27:82:db:2f:b3:d3:43:f3:2a:83:26:7f:
5b:6b:4c:fd:55:f7:49:f6:87:ac:2d:13:ff:a2:70:29:ba:94:
0f:7a:5f:94
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ34sNbPuJtrZTM57E2+0k+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3N2VjOTVhMjA0YzNiNTgwMjU5ZTFiNDJmYTkwZTE3YzZm
NDM1ZDYwHhcNMjYwNTA1MTUxMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWE3Mjk1NDI3OTdkM2U3MmY1M2U0YWFhMDQ3YzExYmIzMzQwOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimaphS2uTljx07M4f7lfLYUz/bmf
TWcNnqzxK12NkeSnxcfMHbiSkn/XJxLl92It2iE8mb9maMzHf4svNCgkWQPvg9ol
CkAS2YlpvSaETjKN2y32FDujVh+9etuNW3I8pwXTjkzUOSZh63SDEaAvw7lNwPt9
eNsg6KpKpGzr0O6m05Cxv+SQZqZ0r5nQienYBjZNd1NY8YFKcCn55qLD4sc7Cy47
T0rJtegXKXjZQ2mZmvqjavb1CRvsDeTkUPqLnk2mo7Rg6uh5ubiO7bgI9cJo5t0X
d/sOrfFkCmHRalWVZBxqLhsY6sZk4qdw9DCdZDRUK5KpvE/w67KED8o8OQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFF6nKVQnl9PnL1PkqqBHwRuzNAmCMB8GA1UdIwQY
MBaAFPd+yVogTDtYAlnhtC+pDhfG9DXWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZGE0ZTYtZWQwZS00Y2M2LTgwY2Et
ZTYwMzRlZGNjZjUyLzEvWHFjcFZDZVgwLWN2VS1TcW9FZkJHN00wQ1lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ZGE0ZTYtZWQwZS00Y2M2LTgwY2EtZTYwMzRlZGNjZjUy
LzEvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg2fgDAN
BgkqhkiG9w0BAQsFAAOCAQEATGi6Cw7XRRmaa5gmlNI6li2g64v3zPBlSZCEi+qs
K1RSFr3OUs0DrpLISvdA9xj0ONllmjkdjfAI94+f7H8yUFRBaqYgkGC+X0dNgTHG
xb8uFnS76b4c/WnTGJ8Kj2fYGOXTWL17sIl+NT+kcJdw6Qup4AldF6jq2pBPLQhP
tBMsHH7+Wd0IeMs13NM2cqTCZWnUF+5un6sMVG0YA2LbQ3vdcpm2/YlL5mGYQoO3
IUwOU2G2G4DFv2i+krUyEL4/eGiQxEZKpgVdfPyFsnVb0p6+Ml9WDvNqbQwgEOSA
J4LbL7PTQ/MqgyZ/W2tM/VX3SfaHrC0T/6JwKbqUD3pflA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:10:10 2026 by rpki-client