Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/XdlPMT-bB9justbDAchQlf2GaJA.roa
File: XdlPMT-bB9justbDAchQlf2GaJA.roa (raw, json)
Hash identifier: NVx53WaZg/EMVCB0M10esFX/diAZvcM3gZhX72tXbMQ=
Subject key identifier: 5D:D9:4F:31:3F:9B:07:D8:EE:B2:D6:C3:01:C8:50:95:FD:86:68:90
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 019F12899E6B5BDB43A9F478865EC072B81B
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/XdlPMT-bB9justbDAchQlf2GaJA.roa
Signing time: Mon 29 Jun 2026 08:40:36 +0000
ROA not before: Mon 29 Jun 2026 08:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199009
IP address blocks: 2a0e:eac0:2020::/44 maxlen: 48
2a0e:eac0:2020::/48 maxlen: 48
2a0e:eac0:9000::/36 maxlen: 36
2a0e:eac0:9000::/48 maxlen: 48
2a0e:eac0:9105::/48 maxlen: 48
2a0e:eac0:9120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:89:9e:6b:5b:db:43:a9:f4:78:86:5e:c0:72:b8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Jun 29 08:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dd94f313f9b07d8eeb2d6c301c85095fd866890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:5d:b1:89:36:b7:e8:70:23:72:9f:e9:c4:
4a:11:42:78:e6:bb:19:e0:b3:a0:1c:97:01:17:69:
0a:70:32:6e:6b:05:c8:ad:84:a3:a8:f7:70:b1:2e:
d8:2e:81:71:53:ba:37:a1:10:f2:08:bd:f3:3f:45:
4a:03:e0:11:0c:72:d0:c1:08:9d:f1:29:e4:f6:4f:
d6:72:67:b8:e6:f8:42:d7:aa:34:4e:4a:aa:e1:8c:
90:6a:0c:d8:b2:ee:8d:3c:4f:ff:c6:83:d5:8c:50:
d9:9c:31:d6:ca:cb:d1:d1:86:da:05:a7:70:91:27:
08:04:28:5c:5f:80:68:43:a8:c6:76:a7:ee:1d:b0:
87:0d:61:52:ae:4f:6d:48:4c:5a:7a:90:1d:fe:63:
76:76:a9:0d:31:62:06:d7:f9:f5:f0:e0:e3:d7:a1:
c1:90:33:16:ec:8c:83:49:1c:64:ab:77:c8:58:86:
27:f7:e5:95:32:4b:f5:42:1f:38:9c:3b:79:98:fb:
ab:9b:bc:14:e0:c3:ba:3e:62:7b:c5:21:7d:53:1d:
79:88:e2:44:e4:60:c4:04:d3:35:2a:c0:21:57:17:
60:b1:77:b0:7c:3f:a0:79:7a:c7:e2:54:13:1a:ee:
a1:4a:d9:74:c6:1b:fb:75:65:f0:90:e7:44:d1:cd:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:4F:31:3F:9B:07:D8:EE:B2:D6:C3:01:C8:50:95:FD:86:68:90
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/XdlPMT-bB9justbDAchQlf2GaJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:eac0:2020::/44
2a0e:eac0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
98:ef:ef:a9:d5:f7:09:fd:b1:7c:ad:7e:3c:ac:71:60:15:5d:
ea:8a:8a:4f:3d:73:6c:2c:39:a5:4e:0e:87:cf:2a:ae:86:77:
14:5d:a5:27:41:89:4d:3b:6f:b9:cd:69:f8:ab:46:3f:e6:ce:
7b:b6:e4:f8:53:6c:9b:c1:ec:38:0f:05:6f:d8:52:5c:3e:48:
5e:9a:24:17:5c:f2:fb:29:ad:b2:25:62:66:c4:ae:f9:ad:ca:
23:e0:8c:85:80:94:39:ce:5c:2e:e7:64:fc:51:3b:af:c4:62:
14:e6:83:4b:51:a6:0c:68:3a:2c:62:1d:76:55:05:ae:d3:a4:
d9:81:66:97:f2:e9:a7:5f:83:81:88:2b:1f:26:c7:f5:0a:5d:
01:81:de:8c:b3:cd:1b:fb:d2:48:6e:cb:90:c7:4d:6f:c0:d7:
89:27:f6:0d:4e:78:eb:e8:a3:5c:54:56:70:bd:87:b5:c6:1e:
2c:e1:8b:94:6f:87:e6:2d:0f:89:5a:20:1e:39:dd:89:29:19:
75:b4:d4:4e:30:6f:8c:82:16:d2:76:90:39:e3:54:ee:db:15:
28:31:37:e3:72:56:3a:ee:2a:56:83:64:85:29:76:67:5d:e1:
6c:81:d9:f0:a8:9c:dc:6e:79:29:89:66:96:d6:c8:3c:40:96:
fc:86:df:77
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZ8SiZ5rW9tDqfR4hl7AcrgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw
ZWEzYTAwHhcNMjYwNjI5MDg0MDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGQ5NGYzMTNmOWIwN2Q4ZWViMmQ2YzMwMWM4NTA5NWZkODY2ODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL5dsYk2t+hwI3Kf6cRKEUJ45rsZ
4LOgHJcBF2kKcDJuawXIrYSjqPdwsS7YLoFxU7o3oRDyCL3zP0VKA+ARDHLQwQid
8Snk9k/Wcme45vhC16o0Tkqq4YyQagzYsu6NPE//xoPVjFDZnDHWysvR0YbaBadw
kScIBChcX4BoQ6jGdqfuHbCHDWFSrk9tSExaepAd/mN2dqkNMWIG1/n18ODj16HB
kDMW7IyDSRxkq3fIWIYn9+WVMkv1Qh84nDt5mPurm7wU4MO6PmJ7xSF9Ux15iOJE
5GDEBNM1KsAhVxdgsXewfD+geXrH4lQTGu6hStl0xhv7dWXwkOdE0c086wIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFF3ZTzE/mwfY7rLWwwHIUJX9hmiQMB8GA1UdIwQY
MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt
MDBjYTMxMjZiM2ZlLzEvWGRsUE1ULWJCOWp1c3RiREFjaFFsZjJHYUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl
LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKg7qwCAg
AwYEKg7qwJAwDQYJKoZIhvcNAQELBQADggEBAJjv76nV9wn9sXytfjyscWAVXeqK
ik89c2wsOaVODofPKq6GdxRdpSdBiU07b7nNafirRj/mznu25PhTbJvB7DgPBW/Y
Ulw+SF6aJBdc8vsprbIlYmbErvmtyiPgjIWAlDnOXC7nZPxRO6/EYhTmg0tRpgxo
OixiHXZVBa7TpNmBZpfy6adfg4GIKx8mx/UKXQGB3oyzzRv70khuy5DHTW/A14kn
9g1OeOvoo1xUVnC9h7XGHizhi5Rvh+YtD4laIB453YkpGXW01E4wb4yCFtJ2kDnj
VO7bFSgxN+NyVjruKlaDZIUpdmdd4WyB2fConNxueSmJZpbWyDxAlvyG33c=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:06 2026 by rpki-client