Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XKXZGaKwEJdMSK-8xxYI9j02ycU.roa
File: XKXZGaKwEJdMSK-8xxYI9j02ycU.roa (raw, json)
Hash identifier: WwI89xp4VbscJI9ZNFj8ciR8rXyvsbyxlZRovodL/Qg=
Subject key identifier: 5C:A5:D9:19:A2:B0:10:97:4C:48:AF:BC:C7:16:08:F6:3D:36:C9:C5
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1113B122C6D261F655179D7E198DBDCFD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XKXZGaKwEJdMSK-8xxYI9j02ycU.roa
Signing time: Tue 06 Oct 2026 12:40:46 +0000
ROA not before: Tue 06 Oct 2026 12:40:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219457
IP address blocks: 2a06:9801:7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:3b:12:2c:6d:26:1f:65:51:79:d7:e1:98:db:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 6 12:40:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ca5d919a2b010974c48afbcc71608f63d36c9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:be:9d:4c:46:d7:95:42:aa:c3:5e:50:25:
06:43:9a:f9:bd:47:6a:1d:8f:27:ec:c0:1f:77:e8:
67:f3:85:a1:66:1f:9b:7c:0a:78:60:a1:3c:96:35:
f8:7d:46:1c:cd:d8:26:29:d0:44:d9:70:e0:a4:75:
60:84:a0:ce:58:ba:a5:b2:48:f0:54:3e:30:ca:30:
31:ed:6b:42:cb:f8:49:17:dd:7c:70:f2:8f:f0:96:
35:41:ec:75:95:b3:65:b4:b9:f2:8a:27:28:a5:bf:
d9:7a:8a:7d:b6:33:ca:ce:29:41:98:c5:a7:de:61:
e5:34:17:42:51:88:e5:56:71:9d:e5:03:5b:9e:47:
4b:66:7a:3f:42:3b:4d:01:1c:4a:18:12:21:40:1b:
9a:08:e4:b9:aa:81:c1:94:cf:6d:74:f3:c1:3a:76:
fd:e9:a9:82:ab:f6:de:d9:28:de:c2:ee:d1:07:b6:
a5:17:79:9c:f9:6e:1f:91:08:f0:41:aa:dc:bc:b4:
15:c0:d2:19:88:c6:2d:c6:40:23:18:77:ee:3e:5c:
b7:b2:7a:a7:08:43:72:5b:c7:01:fa:fc:5a:cd:a4:
80:0c:55:6f:de:4c:e6:f3:fb:fb:80:60:d7:23:58:
be:bc:9c:f9:64:a0:f3:6a:2d:f5:aa:f7:14:92:a7:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:D9:19:A2:B0:10:97:4C:48:AF:BC:C7:16:08:F6:3D:36:C9:C5
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XKXZGaKwEJdMSK-8xxYI9j02ycU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7c0::/48
Signature Algorithm: sha256WithRSAEncryption
44:fc:d4:3f:bc:d3:13:83:10:ec:45:3a:cf:f3:6f:b6:0b:3e:
c8:55:f8:16:5f:79:51:50:7b:7f:32:3a:24:49:c9:8a:df:26:
9f:ec:8e:be:09:f7:59:fb:43:85:24:8a:64:17:fa:11:aa:6c:
30:d5:4c:24:41:a6:ac:fb:21:3f:4a:46:a1:43:15:a9:95:14:
81:17:b0:df:77:e1:1e:13:a5:2c:d6:01:0c:1b:c6:e8:9c:be:
de:56:53:1a:23:87:45:39:61:83:4d:0e:3e:28:a7:bb:bc:08:
7d:8d:4e:8c:f1:f5:56:70:b7:f0:55:b4:9f:2a:14:15:42:aa:
49:c5:c9:10:ae:5e:4d:b4:de:db:bd:86:85:5a:e7:31:e6:99:
98:8c:73:44:9f:7f:c5:08:11:6c:86:be:c1:63:d9:62:e3:48:
3f:f8:cd:a8:71:67:c9:c0:61:12:ca:76:17:ac:39:44:39:de:
93:d1:22:2a:c7:c9:81:30:f1:26:32:b3:a7:95:75:51:63:fa:
40:04:ef:07:d2:ee:86:8a:a3:2e:e3:ba:a1:5e:6b:a1:37:7c:
d1:4a:e6:cc:e3:4f:a3:e5:b1:99:c8:38:51:33:e7:dd:50:c1:
ce:0a:5a:b7:97:f6:a9:bc:ea:d0:a5:f0:7c:91:4f:10:5b:e0:
ae:32:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:12 2026 by rpki-client