Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa
File: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (raw, json)
Hash identifier: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=
Subject key identifier: C7:71:11:0C:06:9E:3B:8F:0B:78:EA:FA:94:A4:0A:07:A1:32:DA:63
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019F7E307D86E0A31B496783C22380D097FB
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa
Signing time: Mon 20 Jul 2026 06:22:14 +0000
ROA not before: Mon 20 Jul 2026 06:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 5.181.200.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
195.5.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:30:7d:86:e0:a3:1b:49:67:83:c2:23:80:d0:97:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jul 20 06:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c771110c069e3b8f0b78eafa94a40a07a132da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:fe:59:30:93:1c:29:3b:37:4c:9c:5b:aa:
9a:63:e3:1c:7c:ab:6a:2a:6a:45:c7:4d:a6:8c:12:
42:ee:bd:f9:6d:67:2b:8a:7d:4f:8e:02:b0:d5:ab:
7a:3a:98:b2:ee:5b:2e:35:d4:c3:b8:ec:83:1c:bd:
f4:cd:f5:9f:fd:7f:13:83:d6:de:3d:91:13:f5:6f:
8e:d1:cd:2c:a4:89:b9:b1:bc:55:7a:7a:52:98:b0:
27:35:84:ef:76:af:6d:98:66:18:4c:5f:c1:7a:7f:
70:f7:83:d9:c6:62:7e:fd:61:74:6a:be:83:7b:7d:
7c:33:d3:8b:de:2e:bf:62:24:a5:f8:8c:de:be:36:
14:71:ec:9f:5a:3f:14:11:ae:7d:05:fa:e3:b3:5d:
fd:98:26:3b:a5:35:00:36:ce:41:b5:e9:5c:9f:95:
1d:6d:6f:f6:fb:3d:a2:44:4d:ff:e1:fc:9f:3d:6b:
d5:47:6a:6c:5d:76:fd:c4:99:ac:ed:e2:2b:26:c1:
cf:2d:57:57:8c:a2:15:74:f8:ca:b0:7e:79:33:47:
58:ae:e2:4d:ad:02:df:4a:98:b9:a4:1b:70:89:30:
0e:09:ea:cb:12:5a:a3:0d:65:31:59:26:1b:2c:91:
ab:b8:d2:7b:51:92:27:f1:8d:68:ee:18:a1:b2:47:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:11:0C:06:9E:3B:8F:0B:78:EA:FA:94:A4:0A:07:A1:32:DA:63
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
45.158.83.0/24
195.5.115.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4d:56:6f:04:a2:84:48:13:d1:8c:ba:18:73:8d:05:9b:8c:
25:c2:9d:a8:1b:39:c5:f5:f1:3a:0f:ab:48:57:ec:6a:11:43:
c6:21:63:5f:c7:7a:04:3a:bc:d0:38:e2:1d:42:e5:a5:2a:ff:
aa:01:26:d1:72:45:38:ff:0b:b6:35:84:41:b5:c1:9e:df:5c:
43:25:c0:ce:f7:de:28:05:01:0f:a6:50:13:ca:ee:26:ea:b7:
09:e5:27:cc:50:1c:3e:11:29:e2:f2:45:6b:ed:f1:06:1a:97:
ba:77:24:c8:00:7e:ed:d4:6b:dc:21:d1:4f:fb:cc:42:2b:60:
bc:4e:3b:64:3c:4c:df:85:52:8d:b4:c9:f9:f9:25:e1:bd:34:
07:22:93:06:eb:c7:fe:d8:c2:11:e9:c5:13:3d:61:8b:85:b8:
1c:10:6b:ff:a8:dd:6c:3b:59:ff:88:eb:9b:81:fa:c7:6a:0b:
8d:7f:40:64:b2:fa:1d:bb:60:21:ad:f3:34:8b:1e:3c:7f:ad:
12:7d:e9:42:13:57:f7:4a:9a:2b:7e:7d:6e:94:80:78:35:3e:
8e:67:d4:2c:84:49:67:fd:9a:f0:17:f9:e4:44:6a:8f:e9:d8:
af:eb:09:4b:22:a8:b8:20:28:ab:28:5e:eb:0b:98:bc:77:3a:
a8:ff:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:15 2026 by rpki-client