Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xjOs8qlUsGhyu34m1P2xnv-eeqI.roa
File: xjOs8qlUsGhyu34m1P2xnv-eeqI.roa (raw, json)
Hash identifier: mJuHz0AQbHgFJztZVFjfZHnSm2bFqWir9/D7uLllVZk=
Subject key identifier: C6:33:AC:F2:A9:54:B0:68:72:BB:7E:26:D4:FD:B1:9E:FF:9E:7A:A2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019F908AF88CC26FA34CA6CC768BD0B2022E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xjOs8qlUsGhyu34m1P2xnv-eeqI.roa
Signing time: Thu 23 Jul 2026 19:54:14 +0000
ROA not before: Thu 23 Jul 2026 19:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53730
IP address blocks: 45.135.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:8a:f8:8c:c2:6f:a3:4c:a6:cc:76:8b:d0:b2:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 23 19:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c633acf2a954b06872bb7e26d4fdb19eff9e7aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:ba:46:af:ed:6c:65:4a:93:a3:bd:46:f2:
d4:54:18:ce:b5:5d:f3:ea:0c:cc:3a:54:27:18:34:
c6:11:6a:41:a8:e6:17:6c:9f:4c:1c:37:b0:ef:bd:
9f:a2:af:74:4b:8a:ee:d1:c6:4e:fb:ce:bf:16:f9:
56:66:ae:a5:88:61:82:1b:56:16:e5:f0:54:66:57:
3d:0b:bd:8c:7e:ee:5f:38:09:cd:60:93:e3:52:5a:
e1:3f:bf:11:62:0b:2d:6d:84:50:d4:73:8b:fe:61:
d9:f6:2a:9b:3d:8b:f6:d7:5f:4b:6e:b0:a1:e6:77:
35:97:67:ed:67:c5:97:56:17:84:62:d5:4f:55:8d:
d3:0d:d8:cd:7b:e1:c1:9a:8e:c5:69:2c:02:a5:3d:
59:cb:4c:17:42:71:70:b3:7a:47:e4:1e:39:9f:08:
fa:2d:b5:27:87:f7:b8:90:38:a0:8c:71:74:f3:9f:
b9:bd:b3:83:e4:b6:e9:97:3b:d3:bb:5e:5f:17:f1:
df:83:10:bc:c8:ee:61:75:84:19:c8:f9:65:37:4e:
a3:a1:cb:32:d3:15:ba:8c:fd:fa:59:09:84:67:df:
19:77:ae:2f:13:67:52:a6:7c:99:62:7a:ae:9d:7e:
3b:f2:cf:69:4b:b9:fe:6c:8d:e2:89:8d:aa:64:3a:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:AC:F2:A9:54:B0:68:72:BB:7E:26:D4:FD:B1:9E:FF:9E:7A:A2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xjOs8qlUsGhyu34m1P2xnv-eeqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.128.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ca:eb:03:24:b9:bc:e0:48:3f:39:19:3e:70:ec:76:44:20:
43:c4:3d:1f:d6:fd:e8:1a:3a:f0:bb:ee:74:14:6a:8b:73:56:
5a:d3:8b:ea:e2:1c:26:ce:d7:e1:19:70:74:81:6d:0f:73:a9:
23:94:d0:ea:4e:1f:8f:1b:7c:a3:8d:cc:f0:7f:a1:9c:9d:d7:
8d:bc:51:f2:b1:93:90:b8:59:3d:2d:8a:43:9f:48:a3:87:d2:
dd:56:e2:d7:53:ec:98:a7:29:d5:a9:93:ff:31:9e:e6:da:da:
db:af:55:62:e9:f4:d8:39:2f:2a:0b:68:01:f3:65:b8:ff:18:
02:38:70:75:1c:44:53:f2:d7:40:a0:54:9e:ea:34:33:4e:35:
33:4d:97:9c:ec:d0:b0:45:06:97:5e:02:20:d5:24:38:64:bd:
5f:0d:79:6f:bb:60:8a:c5:f5:de:b6:e3:bb:18:bf:b1:a5:1e:
9d:90:c7:58:0f:8d:33:c6:db:05:3d:a9:6e:69:7a:c8:36:7d:
d5:0f:dd:7d:49:b1:fa:82:f4:1d:65:c6:ba:fa:e4:f6:3e:20:
1b:6d:e6:d3:18:02:6d:f8:79:0a:84:45:75:34:14:7f:48:97:
71:09:e0:81:bd:57:9d:24:19:49:b9:73:01:31:ba:e6:7a:ea:
e9:67:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:11 2026 by rpki-client