Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xZNYKYiaNx1wOWzLnOLMlDt2oQA.roa
File: xZNYKYiaNx1wOWzLnOLMlDt2oQA.roa (raw, json)
Hash identifier: q6JfVTX8l06A1yV4as8QMlmSQqPTeDAUudU7q0odP+0=
Subject key identifier: C5:93:58:29:88:9A:37:1D:70:39:6C:CB:9C:E2:CC:94:3B:76:A1:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0D8066FB1675405B3459CFDCA6ADEDEA2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xZNYKYiaNx1wOWzLnOLMlDt2oQA.roa
Signing time: Fri 25 Sep 2026 10:04:55 +0000
ROA not before: Fri 25 Sep 2026 10:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209829
IP address blocks: 62.41.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:06:6f:b1:67:54:05:b3:45:9c:fd:ca:6a:de:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 25 10:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5935829889a371d70396ccb9ce2cc943b76a100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:ed:cd:d8:45:2c:51:6e:b8:55:9d:28:46:
61:14:89:53:24:3d:fc:df:cd:ac:7b:d6:c4:7f:ed:
4f:ec:4e:53:b2:3d:d8:07:f7:43:71:fc:03:8f:65:
50:c8:88:e5:62:47:c8:f0:73:b2:97:78:b0:6e:72:
93:5b:46:78:24:9e:9e:7a:d8:15:14:23:f8:4b:48:
0d:e0:6a:54:4a:ad:68:28:75:d9:85:76:17:77:c3:
2f:7f:22:ee:77:7d:49:32:a6:dd:73:66:12:47:23:
1c:c6:61:71:b9:b7:89:16:d8:ed:53:3b:63:ee:0d:
e6:c8:dd:90:22:cc:8a:1f:5b:7b:4d:44:17:44:3d:
f3:c7:5a:86:19:33:51:a5:0d:85:1b:01:0b:07:9f:
25:ff:64:7e:0c:8f:8c:9a:89:f4:04:c1:ed:21:81:
42:e7:0a:f2:02:70:59:f4:26:7e:bc:05:da:c7:d5:
84:e1:74:40:c4:86:0a:17:3f:3e:c8:30:93:e0:55:
87:50:f7:b8:3e:5a:cc:00:54:5d:a4:ff:3d:ac:82:
93:eb:d9:13:60:42:4d:54:4a:8b:05:4c:dc:b1:cc:
1a:5f:26:67:ab:f2:0e:c7:73:d6:a6:ca:25:d5:d9:
d0:98:50:fe:3c:4d:d1:90:ba:da:5b:3c:a3:2e:e8:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:58:29:88:9A:37:1D:70:39:6C:CB:9C:E2:CC:94:3B:76:A1:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xZNYKYiaNx1wOWzLnOLMlDt2oQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
Signature Algorithm: sha256WithRSAEncryption
20:de:07:9a:9c:bb:77:05:d1:2a:85:f5:04:31:f8:7e:70:0f:
e4:c8:cd:7d:81:5e:ee:26:ef:b6:8e:a2:15:6f:14:22:bb:28:
b9:5b:bd:5f:65:b9:21:00:35:54:89:59:8f:6f:4c:2e:25:c6:
c1:75:7b:cd:44:78:da:86:ef:68:3f:15:8f:a6:2e:6f:dc:30:
24:b8:d9:ef:44:e5:41:fe:fa:f8:d1:3e:7b:bd:3e:77:9e:c0:
4b:47:25:17:9d:88:d0:74:fb:a5:7a:fa:d3:92:a6:1e:1b:c5:
27:20:6a:c3:68:54:63:dc:92:d3:07:ca:e5:3f:37:1c:31:0d:
22:58:23:e2:97:18:eb:7d:86:e9:a1:11:1e:4b:fa:03:26:ea:
06:6c:25:ea:c8:0a:e3:a0:00:cb:7e:ab:58:e9:e7:bf:68:45:
ad:5a:25:41:24:e5:d8:54:3a:df:29:83:83:e6:17:1f:ba:19:
66:5f:1e:81:6e:b8:f6:f3:61:71:46:69:fc:89:93:aa:c6:4a:
46:27:b3:15:3f:5f:e4:fd:1e:e1:77:4f:17:6c:2e:7b:dc:36:
5a:9b:60:64:03:60:b0:f7:03:01:2f:da:06:29:95:11:25:3e:
6a:5b:a9:93:8b:67:90:7b:e7:11:81:d0:e5:02:25:31:7d:ce:
68:ec:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:32 2026 by rpki-client