Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/XkenFDPlAfsw5GY4q6YqCzeX1zo.roa
File: XkenFDPlAfsw5GY4q6YqCzeX1zo.roa (raw, json)
Hash identifier: gPXYH5Ob9z7EqvnOrfMJOUibfMH6lkn6QEvbJD45uY4=
Subject key identifier: 5E:47:A7:14:33:E5:01:FB:30:E4:66:38:AB:A6:2A:0B:37:97:D7:3A
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 019DCF5F70DD6037BAFF2F7EA4A70E292BF0
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/XkenFDPlAfsw5GY4q6YqCzeX1zo.roa
Signing time: Mon 27 Apr 2026 14:37:11 +0000
ROA not before: Mon 27 Apr 2026 14:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8362
IP address blocks: 5.158.240.0/20 maxlen: 20
37.72.232.0/24 maxlen: 24
37.220.48.0/20 maxlen: 20
46.162.128.0/18 maxlen: 18
62.64.32.0/19 maxlen: 19
79.141.192.0/24 maxlen: 24
79.141.193.0/24 maxlen: 24
79.141.194.0/24 maxlen: 24
79.141.195.0/24 maxlen: 24
79.141.197.0/24 maxlen: 24
79.141.204.0/24 maxlen: 24
79.141.206.0/23 maxlen: 23
195.146.224.0/20 maxlen: 20
195.146.240.0/20 maxlen: 20
2a01:8e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:5f:70:dd:60:37:ba:ff:2f:7e:a4:a7:0e:29:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Apr 27 14:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e47a71433e501fb30e46638aba62a0b3797d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:e4:8e:c4:f5:7c:b5:df:0b:0d:bf:f7:3a:
db:69:5d:84:70:32:0c:83:cf:a3:ac:f6:59:d9:5f:
b4:a4:2b:48:f9:0a:b6:f0:b2:5e:9f:31:a8:5a:01:
c8:31:5f:c4:0f:f5:4d:89:1a:f4:a7:0b:90:69:34:
20:e3:5f:10:cd:6d:f1:e1:b8:b5:9d:79:4b:16:84:
a0:1e:37:cc:36:9b:dd:aa:81:84:7e:d3:c2:aa:03:
56:33:10:5c:2c:10:e5:f0:b0:89:db:71:83:bb:ad:
3b:22:af:48:b9:27:55:da:db:93:a6:50:a1:06:1d:
14:58:01:6f:ab:70:d2:74:fd:2d:56:61:46:75:73:
f9:cf:dd:f1:a8:38:04:4b:f7:98:1d:25:cd:c3:7f:
c8:25:61:5f:ce:e9:bc:68:71:2d:c3:b6:24:7a:39:
19:70:f0:f8:bf:88:74:56:9a:44:47:65:d9:1b:27:
8d:3e:84:74:1e:2c:f5:77:3a:06:12:31:6f:62:06:
52:f3:72:4d:a1:64:f5:e3:a3:d0:32:e6:55:43:90:
89:28:45:6c:f3:39:4b:f1:07:22:f3:b8:99:fd:00:
a1:10:41:fd:63:79:fc:25:9e:fc:a9:b9:90:12:92:
1d:42:3a:00:65:c7:92:d1:6e:a5:ef:f2:3a:93:d9:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:A7:14:33:E5:01:FB:30:E4:66:38:AB:A6:2A:0B:37:97:D7:3A
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/XkenFDPlAfsw5GY4q6YqCzeX1zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.240.0/20
37.72.232.0/24
37.220.48.0/20
46.162.128.0/18
62.64.32.0/19
79.141.192.0/22
79.141.197.0/24
79.141.204.0/24
79.141.206.0/23
195.146.224.0/19
IPv6:
2a01:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
5f:33:b2:18:de:42:4b:46:eb:f9:5d:44:bf:7e:08:51:6a:74:
e5:99:ed:4b:6e:1f:37:7c:b4:03:8b:54:38:4a:c3:d7:21:f0:
9e:ca:86:de:95:3c:06:a4:82:e0:d6:45:a1:b9:18:38:ac:f0:
f5:b5:e8:5a:9c:db:3e:6f:ed:fc:73:8e:52:10:c3:f1:5b:a4:
d4:7c:eb:e2:fc:c1:90:d4:bd:92:e5:55:fd:d1:e6:51:d1:c9:
1a:1d:33:e3:20:ae:67:db:c2:6f:d5:3d:26:ca:3d:fc:e1:3b:
df:89:a2:0f:2f:6c:2b:08:58:4a:7a:7b:33:88:ea:22:39:9d:
f4:c4:fc:16:65:29:dd:1e:0d:ec:e7:23:4b:cf:b7:39:b6:9b:
cd:49:23:4b:9e:45:bc:df:d6:ee:82:57:0b:66:d7:20:ac:c1:
d9:e5:2e:c5:b5:e8:4e:d9:8b:89:97:59:36:83:1d:eb:30:10:
ea:bc:c2:b1:36:98:cb:f0:89:44:39:41:a5:73:79:36:08:11:
f5:dc:40:8f:24:c3:6c:0d:00:b0:41:3d:c4:09:a3:21:cf:b0:
fb:3e:c9:41:62:6f:0b:90:8d:ea:61:e3:1f:43:c2:9a:d2:5a:
40:bc:90:14:75:56:b2:26:22:c7:c8:01:9d:4f:50:61:49:33:
58:d4:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:40 2026 by rpki-client