Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/xoVdajL76fye7P6XwxykQnBfFok.roa
File: xoVdajL76fye7P6XwxykQnBfFok.roa (raw, json)
Hash identifier: Z/ra1rJt04zEADNTFhyNCrO/n2DM7mnlqdURXkLLHd4=
Subject key identifier: C6:85:5D:6A:32:FB:E9:FC:9E:EC:FE:97:C3:1C:A4:42:70:5F:16:89
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 01A19BD5D2DE987EDEDE08630FE197DBADBF
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/xoVdajL76fye7P6XwxykQnBfFok.roa
Signing time: Mon 02 Nov 2026 10:37:23 +0000
ROA not before: Mon 02 Nov 2026 10:37:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49902
IP address blocks: 5.57.96.0/19 maxlen: 20
5.57.100.0/24 maxlen: 24
5.57.110.0/24 maxlen: 24
109.122.128.0/18 maxlen: 19
185.147.224.0/22 maxlen: 22
213.55.0.0/18 maxlen: 19
2a00:a080::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:d5:d2:de:98:7e:de:de:08:63:0f:e1:97:db:ad:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Nov 2 10:37:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6855d6a32fbe9fc9eecfe97c31ca442705f1689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:cc:b5:80:b8:0d:96:77:b5:45:1c:ba:6c:
0e:6f:fb:8f:09:5b:11:e6:b6:a0:1b:d5:c1:fc:e7:
ac:60:6e:09:79:17:b7:90:58:13:06:87:88:00:16:
09:16:34:35:36:95:8b:47:00:0e:c1:6a:05:c9:54:
fa:20:31:50:8b:5a:c0:2e:b8:c5:c6:7f:3b:b8:8e:
dd:5f:25:9d:e6:03:fa:5d:19:54:bf:dd:e6:8c:71:
7a:57:77:9c:55:c2:56:c3:ab:a9:31:15:fd:f3:30:
33:3c:fc:41:37:8f:a3:d6:32:0a:c1:c4:fc:92:a2:
14:1a:05:b3:f2:dc:59:a1:e5:f3:4b:b2:a4:54:4f:
3b:bf:c4:6a:83:2c:92:65:25:8b:ac:19:86:08:e6:
45:94:cd:a4:6d:cd:18:f8:1a:05:2e:84:d5:e8:b8:
51:cc:c8:37:bb:0f:db:8b:7b:1f:f9:6c:65:10:51:
2d:04:94:fd:a1:72:16:25:ca:01:51:42:b3:9b:ab:
d6:40:b9:13:91:e9:40:4c:5a:fb:a2:92:70:68:e8:
3b:0e:34:42:fe:19:c4:8d:b3:97:0f:cf:f6:ca:f1:
4f:91:24:89:14:5a:50:f4:02:55:0f:13:c4:4e:23:
0c:8d:74:a9:6c:e7:e4:b4:cb:97:6e:51:27:45:48:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:5D:6A:32:FB:E9:FC:9E:EC:FE:97:C3:1C:A4:42:70:5F:16:89
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/xoVdajL76fye7P6XwxykQnBfFok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
185.147.224.0/22
213.55.0.0/18
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
0f:66:72:cd:52:57:73:1d:99:ad:dd:74:d7:9f:56:84:34:7c:
54:4a:0c:1a:76:d7:fb:4c:d6:ed:16:05:89:25:d1:cc:a5:c3:
85:bd:f4:3f:08:a1:2e:03:e5:64:16:c5:ac:cb:f6:60:8a:24:
09:c1:cf:9a:f8:6e:32:7e:fb:8e:1a:33:88:c0:f2:df:88:34:
e1:a6:53:e9:ee:38:22:b2:07:32:6f:c9:34:7d:da:e7:22:0c:
07:3c:d3:37:1c:94:c8:85:e1:1e:9c:65:e8:24:9b:7f:2f:00:
15:74:b1:44:84:0c:d3:6d:39:f9:c8:9d:49:c7:37:0d:93:98:
a3:56:31:78:47:2e:49:6c:d0:66:db:4a:43:80:67:7a:57:5f:
43:e7:3b:3d:01:86:27:73:72:3b:c4:af:1d:8b:bb:74:12:43:
15:e0:ce:80:ba:dc:0f:2b:44:2e:58:ef:37:7b:cb:f8:90:98:
ed:7c:dd:25:89:5d:c3:64:d0:91:e2:6e:46:9e:d2:10:2d:42:
97:45:bb:f0:2d:78:c3:4f:ad:e8:39:d5:d7:83:9e:10:1c:6d:
53:12:cf:99:b9:b7:c5:05:9d:a6:d7:17:fc:24:84:eb:4a:c0:
f9:5b:0f:7f:b0:ea:0b:27:23:92:da:ab:e3:42:64:e7:33:99:
9e:31:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:18:26 2026 by rpki-client