Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/XXeLHruP0nbsWvMm3V9G4Zn9HkY.roa
File: XXeLHruP0nbsWvMm3V9G4Zn9HkY.roa (raw, json)
Hash identifier: 3E0IuQz+7noWLXA2NKJLU4OxDK/ASN3bJHJ0TXKIxpY=
Subject key identifier: 5D:77:8B:1E:BB:8F:D2:76:EC:5A:F3:26:DD:5F:46:E1:99:FD:1E:46
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01A1A62C39806269F4E50A77F451AB9B483F
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/XXeLHruP0nbsWvMm3V9G4Zn9HkY.roa
Signing time: Wed 04 Nov 2026 10:47:58 +0000
ROA not before: Wed 04 Nov 2026 10:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42873
IP address blocks: 134.107.202.0/24 maxlen: 24
2a02:d480:240::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:2c:39:80:62:69:f4:e5:0a:77:f4:51:ab:9b:48:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Nov 4 10:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d778b1ebb8fd276ec5af326dd5f46e199fd1e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:5e:a3:6b:51:28:b1:30:a9:ea:c5:fa:8a:
8c:be:f8:02:e9:2f:55:32:1b:30:f4:54:0f:cc:46:
c4:3a:e7:db:a2:cc:8c:2a:df:d1:5e:e4:d2:43:50:
35:cb:c1:40:a0:07:b3:c0:d7:80:99:02:58:8f:8a:
9b:bb:75:b5:fb:bb:7e:7a:d3:e3:d0:6c:67:9e:83:
99:29:de:28:83:3a:11:36:77:b7:58:41:df:60:a9:
e7:22:39:cc:96:a4:7c:1a:0f:4f:3c:7c:90:52:b3:
0a:d3:8c:50:f2:b2:38:e2:07:e5:2a:29:70:cb:48:
ff:83:ea:a9:78:8f:6f:85:d1:4d:ef:f9:e1:39:0f:
1f:4f:6e:c1:c4:93:25:57:21:d0:b7:9e:c5:16:76:
78:e6:7f:f4:7b:ae:d2:1a:6a:c0:f3:ff:6b:f6:fc:
5b:ed:53:b2:16:ac:4e:ef:61:ea:c2:85:fd:d6:9b:
c3:70:1b:f5:a6:e3:0a:60:e2:22:a0:be:2b:1e:f2:
35:0e:14:b4:69:70:52:ce:04:1c:ae:02:e9:7d:7a:
d0:10:66:4f:04:a6:ca:7b:38:c4:16:0d:89:f8:06:
bd:62:55:3d:4f:54:2c:df:e0:8c:21:68:f2:18:3a:
02:8d:b3:ad:71:96:28:8e:32:aa:d0:f9:99:03:d5:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:8B:1E:BB:8F:D2:76:EC:5A:F3:26:DD:5F:46:E1:99:FD:1E:46
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/XXeLHruP0nbsWvMm3V9G4Zn9HkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.107.202.0/24
IPv6:
2a02:d480:240::/42
Signature Algorithm: sha256WithRSAEncryption
83:b9:84:02:ba:1e:0e:72:bf:4d:e5:99:d8:89:36:8d:cc:ef:
a9:91:71:8c:04:82:b7:22:dd:e1:5f:77:f6:33:95:76:09:39:
c6:99:bc:3c:2d:5a:ae:06:7f:f3:42:7d:b8:e2:3b:81:82:26:
08:22:b0:cc:da:b1:e4:dc:b4:3f:7d:d6:ba:36:97:8c:d9:37:
87:b8:91:6b:ef:5c:b5:6d:8e:8e:86:dd:e9:3e:c5:5d:c5:a2:
aa:1f:0d:37:f5:dc:28:f7:d8:fa:e8:a8:4b:bc:40:8d:d0:74:
54:51:c4:13:25:dd:ff:96:ef:03:51:c1:18:b4:da:71:ee:99:
9d:19:6c:83:da:11:1a:d8:af:ca:fd:99:f1:a8:c7:4c:3b:5f:
71:aa:1a:60:98:49:20:07:d7:e0:fd:f5:ec:dd:8e:ea:2a:5d:
e5:96:9d:fd:6a:ff:3a:31:ba:cc:4c:85:44:82:96:af:eb:96:
e6:ac:70:b0:91:45:6b:cb:15:d2:fa:a8:a2:82:87:68:67:98:
db:6b:fc:34:6d:97:b8:21:5f:dc:c2:37:15:8b:fb:f1:14:47:
f1:b2:64:88:10:c2:d3:84:df:98:d9:cb:c0:30:46:f0:31:aa:
31:71:84:84:af:a5:d0:e1:82:ea:ac:25:4a:a8:fa:f1:b1:da:
a8:23:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:39 2026 by rpki-client