Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/xbvLEl-bI1ZciTrjNpTpBkbZl5w.roa
File: xbvLEl-bI1ZciTrjNpTpBkbZl5w.roa (raw, json)
Hash identifier: sRB5VYXPyhewd7A0bgkSSR8jyDORVWSWKW7icOY0Uro=
Subject key identifier: C5:BB:CB:12:5F:9B:23:56:5C:89:3A:E3:36:94:E9:06:46:D9:97:9C
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 019DE1A91A1E605CDE118576E1F8DA77952C
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/xbvLEl-bI1ZciTrjNpTpBkbZl5w.roa
Signing time: Fri 01 May 2026 03:50:49 +0000
ROA not before: Fri 01 May 2026 03:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 2a13:a287:ffc0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e1:a9:1a:1e:60:5c:de:11:85:76:e1:f8:da:77:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: May 1 03:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5bbcb125f9b23565c893ae33694e90646d9979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:ff:a8:b0:33:57:ce:68:50:6f:b1:c7:18:
f4:ec:f0:25:81:a0:d7:ff:e1:5a:c0:14:77:31:12:
3e:97:48:3d:c7:40:d3:4e:c7:21:7d:a4:91:f6:2e:
c2:c4:ce:bd:0f:9d:05:ac:08:e1:01:b4:5f:9a:f5:
ca:4f:db:50:59:d4:a5:b2:81:92:f8:5d:cb:92:d7:
a9:ba:c7:08:08:f9:c6:3a:de:55:fb:d2:8d:e2:64:
e5:53:1c:dd:c2:af:35:5e:10:33:88:82:bb:5a:d2:
42:0c:28:23:67:4b:8a:04:4d:6b:eb:08:82:23:c4:
ab:08:7c:ec:db:59:b2:3a:17:5a:61:0a:96:19:21:
fc:d0:0b:d4:01:6a:d2:36:97:86:c2:d9:c5:54:80:
c2:a7:ac:d0:14:52:72:93:e9:e4:9b:a9:5a:ba:9f:
94:2e:c3:73:ad:e9:4a:aa:d3:86:ab:1d:96:3b:f7:
6a:23:65:5f:2c:61:25:06:39:f7:e6:b9:43:59:e8:
6e:c3:5c:55:c4:e0:a6:23:76:79:74:b6:63:9f:b1:
1a:4b:d7:42:ef:78:d4:85:96:f2:e9:c2:22:ca:fc:
37:37:2b:1f:a1:a2:74:30:0e:5d:50:39:ef:91:b8:
b5:f5:33:06:91:70:2c:89:66:68:01:7c:9e:9d:8c:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:CB:12:5F:9B:23:56:5C:89:3A:E3:36:94:E9:06:46:D9:97:9C
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/xbvLEl-bI1ZciTrjNpTpBkbZl5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a287:ffc0::/42
Signature Algorithm: sha256WithRSAEncryption
5d:51:bd:58:03:bc:4d:13:0d:06:05:16:61:b2:f7:ff:2c:45:
f5:d7:29:50:87:e4:a7:7c:8b:24:de:e6:b1:83:83:86:ac:12:
57:75:db:35:7c:74:75:ea:c2:88:a3:c1:8e:9d:0f:0f:3b:1b:
9c:bc:24:67:f1:15:05:d6:e7:3e:f5:07:c5:7d:61:e0:ee:18:
1d:cb:74:69:a8:c6:2d:d3:b7:91:e9:1a:2f:92:e9:8b:8a:93:
c8:8b:bd:7a:33:8c:d4:55:7a:19:1c:ee:76:49:00:fc:4a:68:
b9:8c:2c:d0:7e:19:98:93:c6:da:df:16:5b:75:55:e5:7b:e1:
f6:c7:4b:cd:b9:b0:eb:53:13:81:94:7a:d4:e0:61:fa:12:20:
51:d2:ce:15:48:21:ac:c8:80:1e:e8:5a:d1:0e:f3:d9:03:07:
5d:2d:3f:ab:ad:92:a9:75:18:a2:b4:5b:bf:bb:57:c4:17:5c:
cc:e7:47:46:f5:c0:37:d6:63:ab:67:48:ba:05:9b:65:e4:a0:
93:bf:d9:26:35:be:78:c9:ee:24:a5:dc:2b:bb:7f:65:5d:76:
23:ef:32:62:b4:9f:1f:2d:7a:f4:9f:f5:75:0f:43:92:77:f9:
58:f0:f1:94:af:3a:0e:35:7b:ff:44:bd:91:52:97:fa:57:f1:
f9:78:8f:9b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ3hqRoeYFzeEYV24fjad5UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDZmNWE3MzE0YjJmOTY2YjI0ZmM1MzE1NWNlN2JmNjA0
YzA3YTYwHhcNMjYwNTAxMDM1MDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWJiY2IxMjVmOWIyMzU2NWM4OTNhZTMzNjk0ZTkwNjQ2ZDk5NzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtD/qLAzV85oUG+xxxj07PAlgaDX
/+FawBR3MRI+l0g9x0DTTschfaSR9i7CxM69D50FrAjhAbRfmvXKT9tQWdSlsoGS
+F3LktepuscICPnGOt5V+9KN4mTlUxzdwq81XhAziIK7WtJCDCgjZ0uKBE1r6wiC
I8SrCHzs21myOhdaYQqWGSH80AvUAWrSNpeGwtnFVIDCp6zQFFJyk+nkm6laup+U
LsNzrelKqtOGqx2WO/dqI2VfLGElBjn35rlDWehuw1xVxOCmI3Z5dLZjn7EaS9dC
73jUhZby6cIiyvw3NysfoaJ0MA5dUDnvkbi19TMGkXAsiWZoAXyenYydPQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMW7yxJfmyNWXIk64zaU6QZG2ZecMB8GA1UdIwQY
MBaAFI4G9acxSy+WayT8UxVc579gTAemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MjYzM2YtMmIzZi00MDcyLThmNGEt
YjQ3NDk3MGVjYTY2LzEveGJ2TEVsLWJJMVpjaVRyak5wVHBCa2JabDV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82MjYzM2YtMmIzZi00MDcyLThmNGEtYjQ3NDk3MGVjYTY2
LzEvamdiMXB6RkxMNVpySlB4VEZWem52MkJNQjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKhOih//A
MA0GCSqGSIb3DQEBCwUAA4IBAQBdUb1YA7xNEw0GBRZhsvf/LEX11ylQh+SnfIsk
3uaxg4OGrBJXdds1fHR16sKIo8GOnQ8POxucvCRn8RUF1uc+9QfFfWHg7hgdy3Rp
qMYt07eR6RovkumLipPIi716M4zUVXoZHO52SQD8Smi5jCzQfhmYk8ba3xZbdVXl
e+H2x0vNubDrUxOBlHrU4GH6EiBR0s4VSCGsyIAe6FrRDvPZAwddLT+rrZKpdRii
tFu/u1fEF1zM50dG9cA31mOrZ0i6BZtl5KCTv9kmNb54ye4kpdwru39lXXYj7zJi
tJ8fLXr0n/V1D0OSd/lY8PGUrzoONXv/RL2RUpf6V/H5eI+b
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:31 2026 by rpki-client