Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/xqsec9z85vJMUxRiD3W9Y4bQe3E.roa
File: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (raw, json)
Hash identifier: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=
Subject key identifier: C6:AB:1E:73:DC:FC:E6:F2:4C:53:14:62:0F:75:BD:63:86:D0:7B:71
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019D02ABD891F3122069CB09284988554BCA
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/xqsec9z85vJMUxRiD3W9Y4bQe3E.roa
Signing time: Wed 18 Mar 2026 20:38:29 +0000
ROA not before: Wed 18 Mar 2026 20:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52209
IP address blocks: 80.244.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:ab:d8:91:f3:12:20:69:cb:09:28:49:88:55:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Mar 18 20:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6ab1e73dcfce6f24c5314620f75bd6386d07b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:a2:0a:96:a8:9c:3b:96:92:fc:cc:42:2c:
7f:b3:9d:f8:69:63:3b:cd:61:75:ad:dc:2e:a0:0a:
94:84:81:04:b2:66:22:26:0f:7b:d0:38:bb:e1:9a:
77:22:bd:f1:b0:d5:a5:56:2d:9b:c6:8c:f7:0b:00:
ef:19:5f:a4:92:31:4c:46:a2:3f:cb:70:ef:72:a1:
2c:b7:a9:25:92:be:14:78:1f:fe:74:c1:7f:d1:d2:
6a:07:ae:aa:56:25:c2:b4:6e:75:c2:cc:93:5f:3a:
6b:36:fc:72:17:17:4f:74:43:55:c1:cc:14:13:9e:
ce:df:72:5a:1e:f7:36:66:d0:14:9d:b1:24:fa:aa:
54:e0:0d:2e:ed:55:d0:a4:2b:ec:be:2f:b9:1b:66:
be:bf:26:eb:4e:b7:3d:da:58:5b:66:3d:7e:a3:29:
6b:74:96:85:dc:46:14:81:3f:f3:e6:5b:75:15:e3:
9e:87:56:68:3f:59:0f:97:09:66:00:8c:0a:bc:ec:
96:b0:7e:03:8e:8f:0d:56:e9:b7:70:36:7d:6d:21:
39:e6:89:25:1f:c3:62:d2:88:d5:0b:fa:16:dc:18:
5f:07:cc:05:72:5d:ff:27:3a:14:b7:d1:11:b6:fa:
a1:d5:0a:12:b5:40:38:eb:4b:21:ec:5b:90:5b:47:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:1E:73:DC:FC:E6:F2:4C:53:14:62:0F:75:BD:63:86:D0:7B:71
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/xqsec9z85vJMUxRiD3W9Y4bQe3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.11.0/24
Signature Algorithm: sha256WithRSAEncryption
65:76:7e:4a:34:6d:44:d5:fc:84:4b:6e:d3:e3:be:60:20:58:
b9:21:58:05:ac:46:77:3c:45:28:c3:ac:d3:7d:e7:5f:c8:fa:
62:84:f2:0c:b7:fb:34:44:c7:cd:73:72:cb:16:0a:a7:e2:63:
be:43:72:b1:1b:5f:ce:4f:b6:d0:59:07:b8:b7:10:d1:81:28:
7c:18:8c:3a:0c:2a:73:bb:14:fe:10:79:7e:56:ea:83:5f:28:
7f:2d:94:e8:af:04:21:91:d8:68:a9:96:ed:ab:99:55:10:55:
d8:60:90:f9:b9:ac:5f:d9:6b:a2:5a:f7:5b:0f:5e:b5:37:88:
d0:f5:28:04:80:63:e6:18:f8:42:2f:dd:79:75:c4:d4:c9:27:
e1:fb:e3:ec:91:c4:c3:da:07:58:c9:06:f3:9b:0b:34:36:81:
3c:86:23:fe:b9:b9:52:5a:1c:9a:b3:09:d6:61:be:62:9f:2b:
75:a3:ee:83:43:ce:41:48:d5:7b:ea:51:d3:bb:73:a9:0a:87:
13:d5:97:06:5a:61:37:cb:61:41:11:9a:9f:97:28:93:b7:26:
4d:02:f7:9a:c0:82:67:f3:6b:e6:91:ab:35:d7:43:12:dc:39:
05:49:b9:9f:da:0a:76:98:11:c0:60:13:51:42:a5:16:15:b5:
06:05:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:40:54 2026 by rpki-client