Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/XOtSlpI3vWaxhlAcO0h3xNdnk4U.roa
File: XOtSlpI3vWaxhlAcO0h3xNdnk4U.roa (raw, json)
Hash identifier: R/sfrD9oSQfd7UDVRx8aNGM4jn+H6fK6S2aMYFspPw0=
Subject key identifier: 5C:EB:52:96:92:37:BD:66:B1:86:50:1C:3B:48:77:C4:D7:67:93:85
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1CC2CF44A4B056F3A7B8C1CE4FAD4F8F8
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/XOtSlpI3vWaxhlAcO0h3xNdnk4U.roa
Signing time: Wed 11 Nov 2026 19:54:20 +0000
ROA not before: Wed 11 Nov 2026 19:54:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60591
IP address blocks: 85.209.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cc:2c:f4:4a:4b:05:6f:3a:7b:8c:1c:e4:fa:d4:f8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 11 19:54:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ceb52969237bd66b186501c3b4877c4d7679385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:59:28:a5:ec:68:fe:3e:cb:cc:0e:f2:61:
a6:79:74:7a:52:cf:68:d8:db:29:c7:2d:e2:f4:33:
4a:0e:ce:0a:fd:d3:5f:5d:6b:11:04:ac:13:22:92:
0f:d3:4e:53:e1:0c:bd:64:0b:a9:ae:63:b6:19:3e:
67:0c:6b:25:37:bf:9a:90:3a:55:2c:92:47:64:dd:
92:4f:6f:eb:e2:49:98:12:41:c3:cb:75:82:0f:52:
82:86:1a:54:a6:b1:68:42:09:07:5f:90:14:a3:56:
f9:0f:1a:57:07:2b:ad:6e:48:10:af:89:bb:82:dd:
ba:34:46:fb:23:62:71:74:c8:78:76:78:48:37:01:
5a:cb:87:89:6b:bd:1b:8a:da:0b:80:c7:56:c0:da:
ef:43:3f:65:ef:8e:c1:43:79:93:fe:28:81:9f:59:
6c:6a:90:cf:49:d0:67:38:71:5f:9c:28:a6:b3:b6:
f7:d6:bc:20:77:b6:4c:f1:a7:8b:20:52:cf:f0:67:
97:53:62:94:31:c5:41:d1:14:02:06:dc:81:76:86:
a8:b3:c5:3e:85:40:69:f8:db:94:db:0d:12:27:32:
06:41:7e:3a:e1:c9:8f:47:81:04:dd:ce:a3:3f:f5:
eb:be:2d:1b:23:59:9e:ba:9a:30:87:86:e4:b8:a9:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:52:96:92:37:BD:66:B1:86:50:1C:3B:48:77:C4:D7:67:93:85
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/XOtSlpI3vWaxhlAcO0h3xNdnk4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.148.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d0:b3:d3:55:fb:44:f8:25:87:c1:a3:14:87:3f:dd:9e:33:
76:90:b6:d4:5d:33:28:1e:fe:b1:4c:df:3f:38:f3:e9:67:eb:
2a:d9:8a:22:e8:9f:07:65:d6:08:fd:8d:52:cf:f0:f8:62:a6:
db:60:1b:49:ea:e9:f2:4e:1d:61:99:a7:d1:15:27:c6:6c:ed:
b2:10:c9:97:dd:d7:f4:6b:99:08:29:f6:82:d5:df:2c:bd:66:
a4:30:7e:37:d6:a5:de:63:7e:28:ed:bb:4e:4f:23:09:cc:0c:
7b:b3:82:e2:f9:fd:23:02:d5:39:ef:95:50:d8:75:46:95:0d:
8f:4c:59:97:79:78:94:58:fb:a5:98:71:15:80:65:60:3b:26:
cd:80:0b:af:d7:2e:22:cd:f0:82:aa:ba:1c:ef:4c:56:14:58:
a4:a1:17:23:95:79:c0:99:44:9f:67:61:90:2f:85:60:e1:f0:
0a:2f:f0:71:47:9d:e5:46:f2:c7:ce:4d:5d:3c:08:39:06:55:
f2:20:30:c4:65:5d:05:9f:3a:4e:93:90:23:f3:d7:71:1f:74:
af:42:71:1e:a6:ad:cd:d4:42:3f:fd:a6:00:2c:0d:88:99:89:
5b:de:c9:4b:18:03:18:3b:fa:24:e9:a9:c3:55:92:93:88:17:
30:58:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:01 2026 by rpki-client