Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/xsv50bdrlhjVslC-d3EfouTes9E.roa
File: xsv50bdrlhjVslC-d3EfouTes9E.roa (raw, json)
Hash identifier: qOUxvczcP9qEDQf8ITK1cqOoImWNAIXwxpiqhps+Npk=
Subject key identifier: C6:CB:F9:D1:B7:6B:96:18:D5:B2:50:BE:77:71:1F:A2:E4:DE:B3:D1
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 019F23692E9B96795CB03575D65E4C40C12A
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/xsv50bdrlhjVslC-d3EfouTes9E.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202634
IP address blocks: 212.5.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:9b:96:79:5c:b0:35:75:d6:5e:4c:40:c1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6cbf9d1b76b9618d5b250be77711fa2e4deb3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:6c:03:31:8f:01:15:15:10:01:39:ba:59:
cd:30:28:aa:d0:fe:8c:11:da:be:50:f0:35:73:3b:
f8:ab:9e:a1:05:d6:bf:67:46:15:fe:b1:40:39:5c:
c2:d7:01:2a:4a:01:f6:38:2f:c7:25:51:f3:94:23:
2c:17:27:f7:75:d3:ae:27:67:bc:63:7a:d8:5e:f8:
a6:2f:3e:4d:0b:b9:a5:23:1a:3f:b7:cb:48:30:6b:
69:24:cd:30:b2:a5:cf:70:8c:6d:cf:c1:b3:a2:41:
cb:6f:40:0c:07:ac:f0:4f:b0:69:c2:71:f4:e6:59:
97:2e:25:04:e7:e8:39:88:b9:63:50:00:3a:80:f4:
4b:b3:ca:97:31:cd:61:be:f3:18:d8:57:2c:ca:32:
ae:32:eb:42:6e:9f:87:59:94:2f:7f:ab:55:0f:92:
76:2d:db:15:fa:6b:d3:d8:90:45:2b:6c:6d:0b:ce:
d0:8b:2e:d5:a0:f8:df:04:ec:5d:78:22:f8:cc:74:
ea:32:cb:f1:bd:34:39:84:88:6a:84:71:39:52:e9:
8f:46:0b:65:b8:73:b3:48:2c:d8:75:2a:79:e7:69:
67:e4:25:97:f6:dc:4c:dc:db:ef:75:35:8a:f9:62:
88:35:e6:1a:ed:36:c8:a5:84:4e:32:07:7c:37:2b:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:F9:D1:B7:6B:96:18:D5:B2:50:BE:77:71:1F:A2:E4:DE:B3:D1
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/xsv50bdrlhjVslC-d3EfouTes9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8b:58:59:ea:ef:76:bd:d8:b5:72:89:ba:88:a0:2a:ec:f0:
6b:8a:9d:d7:68:5c:d8:21:93:b4:a1:65:f4:ad:6f:06:4b:1a:
8b:3b:90:68:b3:34:58:cf:4e:df:ba:77:9c:47:e7:3d:02:b7:
07:52:03:e7:2d:48:39:e2:fc:93:21:75:5c:45:94:fc:7f:2b:
42:d5:6d:e8:c4:13:a4:ba:b3:e0:ed:9a:27:2c:f9:a6:12:f0:
cf:a1:7c:a1:38:59:a4:52:cd:5b:8e:b9:19:51:8a:6b:3c:0d:
1b:d9:02:91:17:65:55:03:65:17:09:91:86:ed:5a:0e:5f:41:
a9:8b:1a:36:09:d5:ed:46:aa:f3:3b:83:5b:d3:fb:8f:4a:c0:
d7:8d:38:98:96:c2:3b:1a:9e:37:c6:65:a3:f0:5e:5c:cb:e1:
1d:34:c2:5c:a8:b2:9d:26:75:1e:7e:ed:25:fd:ff:37:09:4b:
54:2b:39:d6:c6:55:c7:db:39:77:ed:88:a1:bb:96:f9:b1:ab:
fb:55:4f:85:24:5d:2d:e9:86:f9:de:fe:63:4b:c8:e7:d5:f4:
ee:40:3f:2b:87:3b:f9:ec:aa:60:84:56:bd:0f:ee:e7:ba:34:
a6:bf:f1:d7:41:f5:5e:38:9c:8f:91:b0:4e:46:44:94:13:fc:
c5:51:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:13 2026 by rpki-client