Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/XoFzh61HvXn8N4_uYDhIsdZ7-FM.roa
File: XoFzh61HvXn8N4_uYDhIsdZ7-FM.roa (raw, json)
Hash identifier: RfmrC2Sb0knZBCFUN5W+wRzUQ+Ae+sn1nnBRNPAHalI=
Subject key identifier: 5E:81:73:87:AD:47:BD:79:FC:37:8F:EE:60:38:48:B1:D6:7B:F8:53
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019F13C663B15DBC6AB48EE0D4AAE957A867
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/XoFzh61HvXn8N4_uYDhIsdZ7-FM.roa
Signing time: Mon 29 Jun 2026 14:26:36 +0000
ROA not before: Mon 29 Jun 2026 14:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 2a14:a087:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:c6:63:b1:5d:bc:6a:b4:8e:e0:d4:aa:e9:57:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jun 29 14:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e817387ad47bd79fc378fee603848b1d67bf853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:b2:4b:e4:8a:9f:a2:4c:61:35:7e:a8:8b:
fd:9f:ad:b5:e8:ac:18:37:ee:74:37:44:32:94:3c:
8b:5f:72:9c:9f:cd:35:57:08:6a:62:67:9b:53:84:
0b:f9:3f:ed:24:0b:19:b9:10:1c:59:92:2a:7a:88:
66:f4:ad:fe:65:67:f1:ac:f6:8d:b5:55:f4:59:11:
e9:31:6c:04:f9:d8:20:27:9c:1b:d8:d7:a1:a4:16:
60:51:1d:b0:e7:56:4c:91:0f:e0:6b:13:a7:45:64:
47:b6:38:7a:dd:d5:10:c6:e0:b7:87:1c:b8:52:79:
e3:73:1f:18:9d:36:8f:da:d7:bf:8e:0e:8e:41:b8:
f1:90:42:ea:31:c9:73:16:36:12:ea:3e:0e:be:2d:
18:f5:b6:f7:6e:9b:09:cb:52:22:85:d2:81:d8:ee:
4f:23:c1:78:c2:4c:97:7b:90:dd:0f:3e:84:74:20:
e3:17:20:8f:61:96:09:98:29:0f:df:63:78:20:5c:
ab:b2:ee:db:b1:ca:09:2a:1c:78:f3:13:19:aa:5e:
4f:35:f4:03:a1:a7:70:5d:79:68:a7:93:13:94:86:
84:31:85:e5:a2:85:13:ff:55:87:ca:85:fe:bc:41:
fd:1f:bd:81:d6:b3:69:6e:b2:bf:5c:ae:4a:7f:e4:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:81:73:87:AD:47:BD:79:FC:37:8F:EE:60:38:48:B1:D6:7B:F8:53
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/XoFzh61HvXn8N4_uYDhIsdZ7-FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a087:8::/48
Signature Algorithm: sha256WithRSAEncryption
a0:0d:32:a1:cb:07:4c:c7:5d:b3:68:3b:2b:4c:2e:5a:1d:3b:
de:34:ea:9e:b8:49:04:a5:ce:07:d2:73:6a:7c:ed:8c:4e:44:
2a:58:10:49:a7:d2:f2:cd:8d:b3:a9:ba:b6:29:a1:10:e3:4b:
a9:41:7b:51:9f:15:3d:e4:a1:ef:da:a6:5d:d0:75:65:99:98:
3e:67:d8:40:95:65:7d:8f:b9:24:b2:d8:cc:68:8a:fc:40:a8:
ad:95:a4:fc:e3:d6:ee:9f:b7:91:56:50:87:95:ac:1a:c9:3b:
02:54:a8:25:71:32:87:04:c2:7d:23:8f:e9:01:42:8f:54:41:
ac:8b:8b:87:0f:42:89:53:f5:65:79:42:df:29:2f:a6:d9:cd:
80:0c:66:a2:f8:54:cd:79:25:8c:97:35:fc:4f:c2:2d:a4:14:
4b:74:e8:ac:a9:7d:c6:42:47:7e:a3:7f:5b:a4:2e:cd:0f:da:
ac:74:eb:0b:81:ae:d6:89:0e:19:26:3d:dd:70:b8:a1:9d:cf:
f0:1e:2b:64:55:a5:30:fc:c5:06:6d:54:07:1c:8b:e5:ae:cd:
d6:14:d8:1f:be:17:ab:82:73:f0:d1:04:21:c3:a3:43:55:d5:
ac:cb:98:3a:eb:d9:1f:98:6e:65:ab:fd:d5:9c:7c:30:07:d5:
8f:55:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:01 2026 by rpki-client