Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/X8NxDwiULjWZLnJ6B8Rj05WUAyw.roa
File: X8NxDwiULjWZLnJ6B8Rj05WUAyw.roa (raw, json)
Hash identifier: KfguZW5HU1p0m0ACpW8dbxSFytJTJU2vZknaYkl90ys=
Subject key identifier: 5F:C3:71:0F:08:94:2E:35:99:2E:72:7A:07:C4:63:D3:95:94:03:2C
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 019DB4FBFE5BA2F532C784FA7E5D8338DAAA
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/X8NxDwiULjWZLnJ6B8Rj05WUAyw.roa
Signing time: Wed 22 Apr 2026 11:38:26 +0000
ROA not before: Wed 22 Apr 2026 11:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 2a01:e5c0::/36 maxlen: 36
2a01:e5c0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:fb:fe:5b:a2:f5:32:c7:84:fa:7e:5d:83:38:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: Apr 22 11:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fc3710f08942e35992e727a07c463d39594032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:e4:74:11:9a:ea:35:25:7a:ee:8a:c0:36:
00:5d:48:16:d3:c1:c4:44:f6:b9:b5:68:17:fa:1c:
92:d8:35:ff:3f:8a:50:ce:5a:40:45:2a:1a:16:72:
ab:28:96:93:e3:31:ff:05:cb:60:fb:e6:81:49:da:
85:88:d4:f6:d9:97:1b:67:0c:dc:c0:b1:18:18:a9:
c2:12:c4:15:1e:c7:aa:45:1b:ba:31:c2:ab:f0:9d:
60:ff:a6:cf:97:68:60:ce:f7:ad:2e:84:96:51:eb:
48:72:9d:14:7f:26:47:c3:ea:8e:9b:d5:64:de:60:
9c:bf:11:53:5d:1e:0e:e9:d4:5f:ea:8e:c5:3f:7e:
39:7e:5e:42:a9:ff:59:12:48:18:77:5b:13:2b:0e:
7a:e2:34:c4:d2:f7:08:25:49:91:c4:b3:5c:72:79:
40:63:b8:8c:75:6a:7c:71:13:0c:f2:a5:da:59:14:
1b:9a:8d:ad:cb:ab:80:c6:a0:2d:b9:20:cb:46:5d:
04:45:16:f4:20:92:f3:60:44:e9:f9:8b:ea:03:34:
4f:b6:1f:b4:38:e5:af:13:e0:41:57:5d:da:cb:49:
f8:8a:1c:e1:52:eb:c2:00:b7:0d:17:24:17:3d:ad:
84:f3:9f:04:1f:e3:fc:fa:b0:c7:58:1d:7f:d8:40:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:71:0F:08:94:2E:35:99:2E:72:7A:07:C4:63:D3:95:94:03:2C
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/X8NxDwiULjWZLnJ6B8Rj05WUAyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0::/35
Signature Algorithm: sha256WithRSAEncryption
b5:a5:5c:78:e8:02:0d:14:8c:5f:c4:68:05:0b:2c:6b:e6:b3:
fd:7f:78:77:af:03:ab:25:8b:6a:4b:9d:19:a5:f0:88:ed:d2:
ca:bd:14:d3:f8:78:80:19:3e:79:f3:34:b1:c8:70:74:6a:d4:
60:0e:c4:56:cc:a2:e4:6a:45:3e:1f:06:ac:d4:14:58:18:b5:
a8:9e:6b:d1:cb:81:59:fd:2e:75:23:1d:88:84:78:49:60:57:
fc:14:86:b5:8c:aa:b0:ad:41:75:0b:3e:08:6f:38:0e:d4:46:
9a:f3:d5:7b:d6:39:20:87:07:bb:ae:b4:4a:82:f7:a5:81:be:
59:95:60:ab:a2:0c:e9:54:73:7a:a7:c0:dc:db:dd:13:23:26:
72:f0:5f:fa:5d:09:c4:4a:a0:83:af:a9:18:4f:17:8a:d2:b5:
b6:cc:9c:80:4a:40:73:51:8b:e3:d1:a8:0f:1e:45:20:a9:7a:
05:b4:11:72:32:2f:05:f0:5e:8c:e9:d2:50:2b:11:e6:00:9c:
90:a3:dc:45:2a:c0:e5:d1:1c:9e:8f:5a:c9:e6:3a:70:ac:51:
e8:cc:d0:97:01:12:41:3b:c3:bf:30:0f:b1:41:f7:0a:12:8c:
08:a0:91:2e:5b:b4:da:5d:ce:79:34:0d:57:9e:ab:b9:50:f6:
80:96:99:c7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ20+/5bovUyx4T6fl2DONqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZDliMGVlMzg3YzlhZmQxNWM3Yjc3ODQwMDVlODZjYzk3
ZTg4MTgwHhcNMjYwNDIyMTEzODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmMzNzEwZjA4OTQyZTM1OTkyZTcyN2EwN2M0NjNkMzk1OTQwMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSbkdBGa6jUleu6KwDYAXUgW08HE
RPa5tWgX+hyS2DX/P4pQzlpARSoaFnKrKJaT4zH/Bctg++aBSdqFiNT22ZcbZwzc
wLEYGKnCEsQVHseqRRu6McKr8J1g/6bPl2hgzvetLoSWUetIcp0UfyZHw+qOm9Vk
3mCcvxFTXR4O6dRf6o7FP345fl5Cqf9ZEkgYd1sTKw564jTE0vcIJUmRxLNccnlA
Y7iMdWp8cRMM8qXaWRQbmo2ty6uAxqAtuSDLRl0ERRb0IJLzYETp+YvqAzRPth+0
OOWvE+BBV13ay0n4ihzhUuvCALcNFyQXPa2E858EH+P8+rDHWB1/2EDIswIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFF/DcQ8IlC41mS5yegfEY9OVlAMsMB8GA1UdIwQY
MBaAFC7ZsO44fJr9Fce3eEAF6GzJfogYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHRtdzdqaDhtdjBWeDdkNFFBWG9iTWwtaUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGFkNGQtZDFjMi00ZjE1LWExOTkt
ZTM0MjU1ZjUwMDZhLzEvWDhOeER3aVVMaldaTG5KNkI4UmowNVdVQXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMGFkNGQtZDFjMi00ZjE1LWExOTktZTM0MjU1ZjUwMDZh
LzEvTHRtdzdqaDhtdjBWeDdkNFFBWG9iTWwtaUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKgHlwAAw
DQYJKoZIhvcNAQELBQADggEBALWlXHjoAg0UjF/EaAULLGvms/1/eHevA6sli2pL
nRml8Ijt0sq9FNP4eIAZPnnzNLHIcHRq1GAOxFbMouRqRT4fBqzUFFgYtaiea9HL
gVn9LnUjHYiEeElgV/wUhrWMqrCtQXULPghvOA7URprz1XvWOSCHB7uutEqC96WB
vlmVYKuiDOlUc3qnwNzb3RMjJnLwX/pdCcRKoIOvqRhPF4rStbbMnIBKQHNRi+PR
qA8eRSCpegW0EXIyLwXwXozp0lArEeYAnJCj3EUqwOXRHJ6PWsnmOnCsUejM0JcB
EkE7w78wD7FB9woSjAigkS5btNpdznk0DVeeq7lQ9oCWmcc=
-----END CERTIFICATE-----
Generated at Tue May 12 21:48:07 2026 by rpki-client