Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xeFlJWqm5E_ODmD9h25LW-xV5TQ.roa
File: xeFlJWqm5E_ODmD9h25LW-xV5TQ.roa (raw, json)
Hash identifier: WeTpfFDRdql/UvwwzYSNgVAaoY9Uw2IVTIPi415Yx5M=
Subject key identifier: C5:E1:65:25:6A:A6:E4:4F:CE:0E:60:FD:87:6E:4B:5B:EC:55:E5:34
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A16C263812B2E0CFA6324A6331634FBF21
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xeFlJWqm5E_ODmD9h25LW-xV5TQ.roa
Signing time: Sat 24 Oct 2026 04:23:26 +0000
ROA not before: Sat 24 Oct 2026 04:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218295
IP address blocks: 2a06:9801:15bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:26:38:12:b2:e0:cf:a6:32:4a:63:31:63:4f:bf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 24 04:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5e165256aa6e44fce0e60fd876e4b5bec55e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:dd:cb:b8:14:54:cc:b4:4b:c2:f5:d3:65:
ef:bb:04:53:7a:fa:37:e6:a8:7b:2d:d0:b5:a3:73:
28:2d:c1:68:0c:45:e8:a0:2e:f6:20:b8:2b:92:35:
60:85:81:35:d3:cc:81:82:dd:77:9e:48:25:4c:81:
4f:8a:4d:1e:78:50:72:0c:76:b8:f2:fe:e5:6a:48:
ad:0f:3b:62:53:c5:d7:de:06:21:89:d5:3e:70:7a:
40:a7:63:f1:2b:28:e4:5f:79:e2:28:b5:24:8c:98:
b7:0a:bd:a6:39:57:33:d7:f0:75:e2:55:e8:bd:ff:
3f:05:a1:42:09:e4:4f:32:bc:56:38:14:41:10:0f:
0b:53:c7:4b:65:78:b1:6b:ad:d3:a4:d7:1d:aa:66:
a5:b5:a3:4a:c3:ee:54:df:3b:29:ff:1c:62:d1:00:
72:9a:17:50:3f:c0:e6:c8:b9:59:f6:83:df:e3:2e:
33:d0:93:28:3c:aa:28:42:2c:67:9a:f6:e7:b4:06:
67:62:9d:a3:41:f1:5a:65:c3:93:e0:81:75:5f:0d:
8e:7f:6d:db:b7:ba:fd:7d:99:11:f0:75:26:31:b5:
bb:cf:6f:63:5f:71:49:e5:d0:ca:64:3c:33:5a:7a:
ac:74:5c:cf:ca:9a:be:09:27:a1:08:3e:98:4c:be:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:65:25:6A:A6:E4:4F:CE:0E:60:FD:87:6E:4B:5B:EC:55:E5:34
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xeFlJWqm5E_ODmD9h25LW-xV5TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15bf::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ed:6e:71:7a:4b:6f:3f:3e:49:3e:9f:cf:60:52:8d:5a:e1:
b6:e7:04:51:98:12:79:46:8d:54:96:06:14:98:8c:19:c2:5a:
10:66:d2:04:0a:59:ea:41:7b:84:55:eb:45:8a:62:ab:1c:66:
59:65:d4:60:cd:f7:04:5b:07:7a:48:2c:3f:ee:68:0e:5c:e8:
16:77:91:b9:45:32:ea:8b:1e:d5:e9:cf:ce:87:94:40:0a:cc:
5f:32:55:f0:6e:22:ed:cc:76:0f:e7:08:b6:c4:2c:e1:c7:15:
22:21:bc:dc:12:cc:de:4c:0d:90:df:15:b8:6b:8f:5f:62:64:
28:7a:2a:0f:d3:21:60:11:8c:6a:1d:6a:83:7a:a6:a5:65:6e:
78:4d:a5:ba:0f:f8:c8:0d:68:01:85:53:bc:7d:19:c9:92:6f:
a0:10:72:aa:f3:9e:b0:34:b5:45:d2:9a:2d:16:9f:39:79:d1:
26:da:8a:fd:9b:d5:0f:71:51:05:63:34:61:12:0b:50:37:87:
14:33:02:36:8c:b8:a7:d6:0f:05:bd:dc:92:58:33:e3:c2:49:
c1:df:38:63:a9:ad:9b:db:76:a6:5e:7c:79:a3:01:f0:7d:97:
7d:b4:96:0a:2b:f0:b7:74:f2:7c:cd:dc:1b:3f:cb:a0:b7:41:
34:d5:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:50:46 2026 by rpki-client