Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8f586c-9d3b-476f-a180-01f388241a77/1/xRYci9jmWFZAXbxRWWbWs5ZKjLk.roa
File: xRYci9jmWFZAXbxRWWbWs5ZKjLk.roa (raw, json)
Hash identifier: YshGD5YjknURNQLCUatVsRE1JUblphfDTwqkBtSTdYM=
Subject key identifier: C5:16:1C:8B:D8:E6:58:56:40:5D:BC:51:59:66:D6:B3:96:4A:8C:B9
Certificate issuer: /CN=297f1064419c28cb28563622df1312572e7c5763
Certificate serial: 01A181E3E9813CD5AD082A616F5BE3797A08
Authority key identifier: 29:7F:10:64:41:9C:28:CB:28:56:36:22:DF:13:12:57:2E:7C:57:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX8QZEGcKMsoVjYi3xMSVy58V2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8f586c-9d3b-476f-a180-01f388241a77/1/xRYci9jmWFZAXbxRWWbWs5ZKjLk.roa
Signing time: Wed 28 Oct 2026 09:42:39 +0000
ROA not before: Wed 28 Oct 2026 09:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 130.73.0.0/16 maxlen: 16
192.86.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8f586c-9d3b-476f-a180-01f388241a77/1/KX8QZEGcKMsoVjYi3xMSVy58V2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8f586c-9d3b-476f-a180-01f388241a77/1/KX8QZEGcKMsoVjYi3xMSVy58V2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX8QZEGcKMsoVjYi3xMSVy58V2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e3:e9:81:3c:d5:ad:08:2a:61:6f:5b:e3:79:7a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297f1064419c28cb28563622df1312572e7c5763
Validity
Not Before: Oct 28 09:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5161c8bd8e65856405dbc515966d6b3964a8cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:12:8d:cd:0c:45:f9:1a:a4:72:06:88:73:
03:d5:51:56:34:7b:2e:97:d8:1d:97:6a:90:07:1d:
4a:ba:82:ea:ec:c9:20:4e:4b:6d:d8:83:67:3f:41:
8f:75:d8:12:12:2f:58:c7:d0:1d:6e:e4:17:99:83:
f3:de:93:5d:14:22:3f:f0:47:b2:eb:8d:1c:65:68:
11:a7:fb:95:27:0a:70:47:61:40:5a:44:9a:b6:81:
81:1f:a7:5c:92:e0:9d:ec:d5:6f:0d:47:df:3e:7d:
7d:87:b5:20:f5:c6:fb:36:12:89:46:0b:16:73:91:
56:4c:0e:c6:16:85:d9:32:8b:e5:2f:d2:68:01:0b:
36:e6:5b:6c:29:f4:8d:64:9d:df:3e:06:ae:f7:24:
1e:2c:8f:38:d7:3b:ba:37:7b:d6:c3:5b:58:32:20:
5a:af:42:0c:58:ff:7c:6d:56:23:e5:8f:18:c3:50:
9a:dc:e0:db:bc:99:87:8f:05:ef:65:67:85:0c:6e:
5d:ab:58:a3:8a:80:7c:af:94:87:12:86:d0:78:be:
0b:6c:7a:01:0c:d6:cf:fb:b8:29:f7:78:c8:e9:e4:
90:82:1e:c4:40:d1:e0:3b:96:00:64:eb:57:15:b0:
b1:5c:bc:1b:c0:34:da:06:dd:2f:d6:80:02:ff:f4:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:1C:8B:D8:E6:58:56:40:5D:BC:51:59:66:D6:B3:96:4A:8C:B9
X509v3 Authority Key Identifier:
keyid:29:7F:10:64:41:9C:28:CB:28:56:36:22:DF:13:12:57:2E:7C:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX8QZEGcKMsoVjYi3xMSVy58V2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8f586c-9d3b-476f-a180-01f388241a77/1/xRYci9jmWFZAXbxRWWbWs5ZKjLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8f586c-9d3b-476f-a180-01f388241a77/1/KX8QZEGcKMsoVjYi3xMSVy58V2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.73.0.0/16
192.86.163.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3c:74:b6:40:48:47:de:4b:76:cc:a0:d3:7e:ef:a5:82:e4:
b4:53:ed:40:5d:d9:cf:26:53:7c:e1:71:0b:e2:65:be:99:2d:
93:3a:ee:55:a4:94:a2:90:64:fa:86:b8:58:bf:f1:5f:92:e4:
a1:5c:0a:57:90:00:4a:64:69:d6:c6:00:9b:5e:86:15:e7:af:
e8:42:82:9a:bd:67:a4:68:04:50:e2:10:52:4f:0b:6f:8b:0e:
60:4f:7b:4c:5b:c9:f7:e7:1c:f2:57:88:f8:cf:48:d7:57:c9:
87:b8:75:4f:65:ea:8a:85:cb:7b:ca:fb:6c:03:7f:cb:8c:c1:
d6:77:35:6e:96:a5:56:15:16:d0:97:00:fc:91:37:5e:4b:2c:
44:ea:d9:2d:4e:65:5b:90:f3:54:9e:c8:af:62:ed:77:31:89:
18:ee:c9:84:42:5d:ad:e0:62:80:62:25:45:66:56:f9:f0:f6:
36:60:e0:98:6a:58:ff:5a:b3:5b:de:31:93:fe:fd:ee:cc:d6:
6d:67:b3:59:4d:ba:ce:bb:62:b7:41:3b:99:5f:a3:74:cf:93:
93:9d:0c:a4:14:8e:f5:9e:b9:a4:38:8c:67:5a:cb:8b:1b:4b:
17:68:39:bd:1b:ba:02:55:21:eb:d8:39:bb:61:6c:2c:c0:23:
d8:9f:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:47 2026 by rpki-client