Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/XLClONptBOnoyds7ZRrXVeMA5OI.roa
File: XLClONptBOnoyds7ZRrXVeMA5OI.roa (raw, json)
Hash identifier: s9P5DAsWhxNq3izEap6h+SBQrZwu2+rZZv5QCDGjopU=
Subject key identifier: 5C:B0:A5:38:DA:6D:04:E9:E8:C9:DB:3B:65:1A:D7:55:E3:00:E4:E2
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019D0030781E3E4FB108D35A8C60789CE669
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/XLClONptBOnoyds7ZRrXVeMA5OI.roa
Signing time: Wed 18 Mar 2026 09:04:29 +0000
ROA not before: Wed 18 Mar 2026 09:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
92.235.0.0/19 maxlen: 19
92.235.32.0/21 maxlen: 21
92.235.40.0/21 maxlen: 21
92.235.56.0/21 maxlen: 21
92.235.96.0/19 maxlen: 19
92.235.128.0/17 maxlen: 17
94.168.128.0/17 maxlen: 17
2001:67c:794::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:30:78:1e:3e:4f:b1:08:d3:5a:8c:60:78:9c:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Mar 18 09:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cb0a538da6d04e9e8c9db3b651ad755e300e4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:40:1e:ed:f3:5d:72:aa:94:cb:71:8d:50:
43:c7:bd:31:f4:09:75:24:88:26:c1:1f:54:c4:57:
61:d5:14:1d:9e:20:47:c9:ab:4f:78:7d:ee:4a:9e:
06:06:ba:f3:76:d3:7d:b3:3f:d9:1a:22:fd:57:4c:
0d:5e:57:e9:6d:ce:b3:2f:f9:86:65:10:55:e1:80:
15:f8:13:02:74:34:23:30:f8:e9:3e:c7:4c:78:d9:
3a:5a:1f:3d:d1:76:6e:9c:76:68:6f:bf:73:1a:26:
c8:8a:f9:dc:f5:d4:ab:03:c6:7d:3d:75:53:18:7b:
e5:ce:1c:e7:ad:68:a6:27:56:40:38:77:fc:51:f5:
f4:ca:73:13:bd:8c:15:dc:60:11:d1:7c:c5:b8:ed:
3c:1b:4b:7c:fe:aa:9b:03:6f:35:b1:79:87:ac:b6:
0b:95:f7:41:f6:90:33:68:7a:10:4d:07:21:da:c4:
b6:4a:36:1e:86:dc:a4:90:36:93:9b:9d:33:d0:ef:
18:7b:b0:12:16:cb:93:0d:18:b0:94:77:76:ad:44:
b0:91:15:83:eb:01:29:67:47:f2:af:b3:7b:3a:d8:
ea:a5:f8:6a:28:ae:fe:6d:65:ca:f7:37:22:cc:33:
b2:b3:8e:35:96:d8:34:d0:e0:4f:68:11:ef:a3:61:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B0:A5:38:DA:6D:04:E9:E8:C9:DB:3B:65:1A:D7:55:E3:00:E4:E2
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/XLClONptBOnoyds7ZRrXVeMA5OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
92.235.0.0-92.235.47.255
92.235.56.0/21
92.235.96.0-92.235.255.255
94.168.128.0/17
IPv6:
2001:67c:794::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5a:5d:85:87:d5:95:14:c0:b0:14:02:94:41:b5:5b:cb:36:
19:4a:84:ec:c6:a6:b4:59:14:ac:44:a3:6e:10:7e:03:7a:17:
bb:e1:c7:84:9b:3a:e8:0e:5e:55:0d:b6:69:5f:48:7e:58:40:
81:7f:bc:16:47:5a:29:be:88:20:ee:67:13:be:7d:02:2a:9b:
01:96:bb:27:2d:48:a4:ac:3f:d1:7d:ba:e9:b3:87:aa:62:63:
34:1c:10:00:e4:c0:88:e6:3d:5f:dd:93:c7:52:b0:dd:ef:7f:
8f:81:67:39:db:32:1c:2e:97:2f:30:d2:0f:86:7f:85:46:90:
f5:e1:ba:0b:6f:6a:cc:a5:1e:ab:e0:8e:1f:a9:c6:39:5d:6d:
da:1a:fa:f1:12:bd:06:44:5c:d1:c1:42:22:8c:9a:3a:c1:87:
a4:49:68:c0:81:8b:3a:6a:42:a7:08:df:98:eb:1f:f8:fa:2b:
cc:5a:b4:ba:f0:d4:b8:a1:7b:a7:fb:86:c8:e6:73:11:f3:9e:
2b:8f:71:fc:ec:4d:3d:ab:9c:76:6c:22:f9:61:4c:e7:7d:29:
38:8a:19:fd:6e:52:3d:43:47:ec:bb:39:23:e5:2d:ac:f9:cd:
d6:dd:44:13:7a:07:86:0d:0c:54:04:da:93:c2:9f:34:f1:9a:
63:c1:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:32 2026 by rpki-client