Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xSW_eMFHSvsfev_iaynNgnmqhqQ.roa
File: xSW_eMFHSvsfev_iaynNgnmqhqQ.roa (raw, json)
Hash identifier: 13hf6azGm18CYlBzhvMoRx2iTlBMgx5qojcaaxsu6uQ=
Subject key identifier: C5:25:BF:78:C1:47:4A:FB:1F:7A:FF:E2:6B:29:CD:82:79:AA:86:A4
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A13E3B907FE296BF893C58BDD17BE08BE2
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xSW_eMFHSvsfev_iaynNgnmqhqQ.roa
Signing time: Thu 15 Oct 2026 06:24:13 +0000
ROA not before: Thu 15 Oct 2026 06:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218687
IP address blocks: 80.71.237.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:3b:90:7f:e2:96:bf:89:3c:58:bd:d1:7b:e0:8b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 15 06:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c525bf78c1474afb1f7affe26b29cd8279aa86a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:2e:7e:ab:ba:b0:0b:b0:b8:18:56:c0:39:
9b:de:70:d9:59:0c:a7:e5:a5:e1:3c:77:6b:3b:08:
62:4c:9c:c5:79:8e:2b:b1:39:62:38:d1:27:27:e9:
42:b8:f6:e6:a6:a4:e1:27:31:06:aa:b0:c1:53:47:
a1:25:47:9d:b4:0c:e8:05:b8:d2:6d:ba:5c:16:4e:
20:e2:51:d1:de:da:3a:c6:eb:10:ca:16:99:01:9e:
e7:38:84:87:61:c5:d1:74:5d:92:6b:4f:26:31:28:
30:84:6c:36:e4:b4:67:2f:7f:f5:4b:51:fb:f5:45:
d9:a8:ab:c4:95:07:fa:4f:37:68:e5:73:dd:5b:93:
61:97:38:ff:eb:a8:bd:c9:77:90:66:e5:b5:fd:f9:
b4:3e:a8:8e:1f:17:51:2e:dc:b3:84:3d:5a:b1:09:
e2:95:af:7d:e0:f7:6e:50:5b:9f:dc:77:73:40:7a:
89:f4:22:73:4f:fe:33:c4:25:eb:5c:ab:b2:f2:24:
8e:0c:28:d1:41:97:ad:0e:4a:d3:71:bc:77:55:1a:
9b:79:72:3c:8d:4f:26:a1:bd:56:a8:d7:f4:8b:ac:
90:81:1c:9c:0e:82:5d:f8:de:fc:33:03:95:db:c6:
fb:20:01:bf:98:4d:66:f3:eb:ad:f1:63:2a:e2:56:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:BF:78:C1:47:4A:FB:1F:7A:FF:E2:6B:29:CD:82:79:AA:86:A4
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xSW_eMFHSvsfev_iaynNgnmqhqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
41:81:74:8b:54:33:94:01:f3:0f:26:54:89:45:6a:05:97:7e:
d5:54:25:0e:5c:16:d4:5f:44:75:63:48:ea:60:c5:52:41:fc:
65:96:fa:0d:15:0c:a0:36:b6:83:3a:63:b5:96:6b:b7:48:5c:
ac:f7:45:75:96:24:9b:f1:38:0a:86:c3:3e:ad:9f:59:59:70:
a3:ec:c2:3d:36:e3:55:68:2c:c2:22:9a:0c:52:04:1d:5b:80:
9b:6b:98:88:07:b0:e9:2e:53:48:2a:ef:57:40:33:89:d3:bb:
ac:4e:82:66:04:f5:ea:73:3f:ff:9f:3a:ba:35:e3:d6:b2:97:
61:3b:e4:8c:a8:f9:2f:3d:be:a5:cf:3e:42:fd:ea:62:62:d1:
3a:0f:07:2d:59:4f:ed:ab:28:23:7b:32:4f:e6:8e:12:84:cb:
74:0b:ba:72:d0:23:15:3d:51:0a:ce:c7:ec:e6:1d:8a:44:d8:
9b:28:e2:21:00:b9:83:e4:d4:6e:3d:9b:83:d1:94:5b:a4:10:
0a:ed:9c:51:3d:09:ce:11:9a:b5:88:04:4b:7d:36:54:51:1f:
76:ad:d0:06:9b:54:9b:6d:68:cf:88:14:19:df:bc:82:5f:b2:
fd:20:24:d6:14:19:d6:46:56:a0:de:3b:08:35:48:3f:c8:38:
55:8d:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:46 2026 by rpki-client