Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/2-XnZW4TiALtvTXUhzckTDgdFEY.roa
File: 2-XnZW4TiALtvTXUhzckTDgdFEY.roa (raw, json)
Hash identifier: mfFDzvxLFQpBExCKEC3//zMXveoR9qw1NyzavU+Pa/M=
Subject key identifier: DB:E5:E7:65:6E:13:88:02:ED:BD:35:D4:87:37:24:4C:38:1D:14:46
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019F468C3DDFAA694D195988B7A7F798E586
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/2-XnZW4TiALtvTXUhzckTDgdFEY.roa
Signing time: Thu 09 Jul 2026 11:03:43 +0000
ROA not before: Thu 09 Jul 2026 11:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57256
IP address blocks: 5.100.240.0/24 maxlen: 24
5.100.241.0/24 maxlen: 24
5.100.242.0/24 maxlen: 24
5.100.243.0/24 maxlen: 24
45.142.137.0/24 maxlen: 24
185.187.130.0/24 maxlen: 24
185.187.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:8c:3d:df:aa:69:4d:19:59:88:b7:a7:f7:98:e5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jul 9 11:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbe5e7656e138802edbd35d48737244c381d1446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:83:6e:b4:ca:37:b3:e7:7c:79:ca:d7:7f:
4a:f2:b9:7f:3e:52:1e:e6:ee:9c:18:31:48:ee:c4:
5b:68:d0:f0:48:52:42:e5:f6:22:5e:b8:99:4c:34:
d2:3e:31:e4:9c:55:3b:7f:c7:08:12:c9:40:92:36:
d7:0c:fd:2e:e1:8d:72:9c:3a:a0:c0:e5:ba:75:ed:
6f:19:bb:84:73:3f:14:6f:bc:74:82:fb:8d:f3:a5:
2a:2c:28:55:cb:97:41:5d:af:0e:8f:36:fd:51:e7:
69:4d:eb:02:4e:41:0f:fc:6d:7f:f9:8a:f5:f8:66:
a4:1a:0b:80:f5:47:ef:08:bf:f4:fb:9d:2f:b4:56:
ba:ff:eb:f7:98:44:ec:39:1b:b5:04:59:a7:f6:14:
3d:ee:2f:23:52:34:ed:45:ea:ae:1d:c5:19:26:55:
ca:6d:f4:44:61:6a:5d:eb:55:a2:34:40:b0:24:05:
13:e6:d9:88:a7:40:fa:0f:ca:2f:8e:4e:a0:6d:4f:
8b:63:f9:ac:06:e3:57:dd:56:7c:d2:dc:56:38:27:
0c:8b:ae:88:ee:08:46:45:17:f7:9d:ca:e7:62:b9:
27:af:7e:b9:88:f5:1c:ff:93:c8:67:0c:99:f8:2d:
b0:61:e5:32:fe:10:cb:fe:5c:d8:d9:58:d3:a7:ca:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:E7:65:6E:13:88:02:ED:BD:35:D4:87:37:24:4C:38:1D:14:46
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/2-XnZW4TiALtvTXUhzckTDgdFEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.240.0/22
45.142.137.0/24
185.187.130.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:02:11:73:ab:3b:4c:a1:ff:0b:7e:83:f7:21:93:1b:dc:78:
41:51:f6:0f:80:e6:bc:9b:ff:a0:52:27:a8:4b:f5:f3:cd:b7:
60:8f:d4:32:26:2d:b9:80:20:66:16:ad:50:f0:4f:5c:39:8f:
12:07:e1:50:d4:ca:70:ac:ec:c2:2b:65:21:0a:a4:d0:7b:59:
01:83:9c:c4:42:3c:3c:a4:01:2f:31:65:24:0c:d4:f3:e6:58:
9d:91:80:fc:b4:b6:46:81:a5:77:6c:0e:80:19:1f:14:23:29:
67:1f:e8:c1:e6:e6:f4:80:21:c9:98:ea:98:6a:e4:f1:24:71:
0b:af:94:95:d8:91:63:8a:b5:08:4a:3e:c7:c1:e3:80:ec:46:
72:87:0c:96:0d:60:8c:14:f6:28:90:a8:81:e4:f6:0f:26:30:
05:05:58:9a:34:51:81:c5:65:10:d4:14:a5:35:89:06:12:63:
bf:c6:9d:92:da:fd:47:de:d7:81:31:62:18:f3:89:07:90:73:
0e:a8:68:42:ea:13:3a:cf:07:0d:7a:d6:72:d2:96:50:4b:4e:
82:69:8a:b9:08:62:47:a1:3d:aa:7f:89:58:71:fa:a3:ff:fd:
a9:0f:72:2a:34:84:d4:7c:fe:2d:6a:fd:ca:0c:75:4c:ef:aa:
0a:07:96:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9GjD3fqmlNGVmIt6f3mOWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3
NWVjOGEwHhcNMjYwNzA5MTEwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmU1ZTc2NTZlMTM4ODAyZWRiZDM1ZDQ4NzM3MjQ0YzM4MWQxNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qDbrTKN7PnfHnK139K8rl/PlIe
5u6cGDFI7sRbaNDwSFJC5fYiXriZTDTSPjHknFU7f8cIEslAkjbXDP0u4Y1ynDqg
wOW6de1vGbuEcz8Ub7x0gvuN86UqLChVy5dBXa8Ojzb9UedpTesCTkEP/G1/+Yr1
+GakGguA9UfvCL/0+50vtFa6/+v3mETsORu1BFmn9hQ97i8jUjTtRequHcUZJlXK
bfREYWpd61WiNECwJAUT5tmIp0D6D8ovjk6gbU+LY/msBuNX3VZ80txWOCcMi66I
7ghGRRf3ncrnYrknr365iPUc/5PIZwyZ+C2wYeUy/hDL/lzY2VjTp8qyQwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNvl52VuE4gC7b011Ic3JEw4HRRGMB8GA1UdIwQY
MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt
ZTgxMWUyM2MxODA0LzEvMi1YblpXNFRpQUx0dlRYVWh6Y2tURGdkRkVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0
LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBWTwAwQA
LY6JAwQBubuCMA0GCSqGSIb3DQEBCwUAA4IBAQBNAhFzqztMof8LfoP3IZMb3HhB
UfYPgOa8m/+gUieoS/Xzzbdgj9QyJi25gCBmFq1Q8E9cOY8SB+FQ1MpwrOzCK2Uh
CqTQe1kBg5zEQjw8pAEvMWUkDNTz5lidkYD8tLZGgaV3bA6AGR8UIylnH+jB5ub0
gCHJmOqYauTxJHELr5SV2JFjirUISj7HweOA7EZyhwyWDWCMFPYokKiB5PYPJjAF
BViaNFGBxWUQ1BSlNYkGEmO/xp2S2v1H3teBMWIY84kHkHMOqGhC6hM6zwcNetZy
0pZQS06CaYq5CGJHoT2qf4lYcfqj//2pD3IqNITUfP4tav3KDHVM76oKB5YH
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:28 2026 by rpki-client