Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/sxio-JXZNlFkXF8EoRP4tx5DL7c.roa
File: sxio-JXZNlFkXF8EoRP4tx5DL7c.roa (raw, json)
Hash identifier: IdBSRsFLBVFfvelPbMkEHbKxbVg+TQkt4twf6UFXM2s=
Subject key identifier: B3:18:A8:F8:95:D9:36:51:64:5C:5F:04:A1:13:F8:B7:1E:43:2F:B7
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019CD936C485B0B30B0DC5FBCEB5CA191B7E
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/sxio-JXZNlFkXF8EoRP4tx5DL7c.roa
Signing time: Tue 10 Mar 2026 19:26:10 +0000
ROA not before: Tue 10 Mar 2026 19:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205282
IP address blocks: 5.181.161.0/24 maxlen: 24
194.48.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:36:c4:85:b0:b3:0b:0d:c5:fb:ce:b5:ca:19:1b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Mar 10 19:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b318a8f895d93651645c5f04a113f8b71e432fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:92:f6:86:e3:50:69:b7:84:a7:b0:3b:a2:
ac:7e:ab:bc:11:f3:55:90:93:59:9f:38:ef:5d:bf:
a3:b4:9a:19:43:ac:68:a9:47:6e:34:1c:a3:c8:b0:
48:83:8e:e2:e7:b5:ab:b3:3b:a6:21:f0:bb:4f:65:
c8:93:14:02:a4:be:1a:b6:0a:05:42:e1:28:6e:bb:
b2:f8:b9:cf:70:d2:d2:69:b3:fc:d8:60:24:6c:de:
00:e6:97:d6:4c:80:d2:7c:7b:34:0b:fc:2d:df:f1:
3b:1c:2d:c1:c5:72:54:a3:ef:52:b1:21:71:dc:02:
e3:ef:12:28:b7:f6:bd:38:41:be:d9:34:b1:05:c2:
17:eb:01:78:3b:b5:74:42:61:e0:9b:f9:20:d0:35:
fe:44:ab:18:b0:d0:4b:c7:5b:c6:55:9d:f7:70:b4:
83:60:26:b2:a9:b3:d4:94:4e:a3:81:54:b2:1d:45:
bf:ff:3f:82:b6:d4:42:c3:91:5f:a2:04:2b:a3:a9:
2d:00:ac:1f:e1:93:01:ac:e5:fa:48:e5:cb:06:5f:
67:64:e5:8c:82:1c:10:db:e6:53:3e:54:b8:11:66:
74:d4:c3:39:f9:2f:78:b3:5b:9b:ee:9d:eb:9c:c6:
12:d4:e1:97:1d:57:62:43:56:cf:85:6a:9b:07:32:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:18:A8:F8:95:D9:36:51:64:5C:5F:04:A1:13:F8:B7:1E:43:2F:B7
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/sxio-JXZNlFkXF8EoRP4tx5DL7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.161.0/24
194.48.203.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5f:38:27:fb:0f:4c:30:ef:37:42:1d:ef:1f:75:e6:48:b0:
f6:9a:f2:ad:4f:65:90:dd:97:21:5b:a0:df:11:15:45:55:6c:
ba:10:f1:c6:7b:c9:33:30:32:25:0d:fb:9e:50:ea:b2:a9:80:
ed:22:85:44:69:34:de:2d:2d:33:a0:88:2a:09:35:5c:b0:4c:
fc:9e:f5:5d:97:1b:5c:ab:aa:6f:2b:fd:7e:4d:5d:a8:94:08:
29:55:99:0d:de:86:46:46:d9:90:91:89:c2:94:98:40:0c:40:
6c:0c:a2:c2:7f:0e:7a:91:14:80:e5:28:c0:f8:6a:4a:85:4e:
cd:9e:cd:0a:a1:e8:0e:bb:88:ba:ab:2e:f3:c6:b2:cf:a4:4b:
05:fe:a9:d7:63:e9:4c:83:7f:cc:52:0f:9a:c1:82:76:42:ab:
47:da:1f:b8:dc:34:c7:0e:57:67:35:3d:90:2b:7f:a1:8d:8a:
af:c5:cd:2f:ef:b6:c0:7f:c6:23:d4:eb:a1:35:e7:eb:4c:34:
e2:c5:8d:04:56:35:b0:f8:ea:be:51:a8:c7:37:d5:52:55:db:
8d:ad:2a:aa:c4:b6:00:c2:4a:87:9f:bb:02:48:a0:6c:41:3a:
77:0d:f8:d4:7d:70:74:96:e5:87:be:a5:90:22:e0:a9:1f:e0:
56:e9:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:09 2026 by rpki-client