Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/XtaIHpvrjSOxxeu0RVe1HL2uAl8.roa
File: XtaIHpvrjSOxxeu0RVe1HL2uAl8.roa (raw, json)
Hash identifier: OgXC3DCqKxRWxtuAmp+GN4aNU2gzSqf6+Uzl0vJ843o=
Subject key identifier: 5E:D6:88:1E:9B:EB:8D:23:B1:C5:EB:B4:45:57:B5:1C:BD:AE:02:5F
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A1AB18A2BB6AC982BD12165F527D8C5230
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/XtaIHpvrjSOxxeu0RVe1HL2uAl8.roa
Signing time: Thu 05 Nov 2026 09:44:40 +0000
ROA not before: Thu 05 Nov 2026 09:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 87.232.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:18:a2:bb:6a:c9:82:bd:12:16:5f:52:7d:8c:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Nov 5 09:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ed6881e9beb8d23b1c5ebb44557b51cbdae025f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:64:0f:ff:89:a2:d0:3d:24:90:0c:b8:58:
6e:81:da:81:5c:ee:6d:8a:1e:91:81:8b:00:76:0a:
05:e1:8b:78:96:70:8b:74:02:cd:a0:88:d8:0b:dc:
81:b3:bc:ee:30:a5:77:7a:90:2f:7f:72:c5:76:2d:
93:d5:8f:3a:eb:03:9a:2c:72:e6:94:74:14:0c:93:
b8:1f:4c:54:6d:4d:0d:01:fe:46:ac:13:3a:fe:ff:
6b:4b:74:be:92:cc:6d:7c:7f:11:0c:9e:f5:f6:9b:
8a:81:13:27:6e:82:6c:e7:db:7e:10:69:ef:92:eb:
36:c0:03:0c:36:2a:56:79:d6:c8:c2:c7:97:b2:c9:
19:14:5d:26:8b:74:9c:52:f2:ed:89:78:f0:72:ed:
84:dc:ba:e9:ef:88:91:2d:8f:e5:c1:70:4c:dc:25:
25:e3:eb:a4:68:48:ee:0f:c7:62:ef:52:b2:a4:f3:
24:79:8e:7a:91:48:01:33:5c:92:6d:3f:04:c7:04:
29:43:53:4b:13:9b:8f:b5:8d:9f:35:6f:54:11:d9:
b7:b9:b0:b7:57:a6:50:a9:73:e3:e8:70:f2:c8:5b:
56:2b:3a:4f:b3:51:c4:c4:3c:db:0a:f8:16:59:a2:
0b:71:f5:60:72:97:2b:8f:47:c2:13:5a:50:41:6b:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:88:1E:9B:EB:8D:23:B1:C5:EB:B4:45:57:B5:1C:BD:AE:02:5F
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/XtaIHpvrjSOxxeu0RVe1HL2uAl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.229.0/24
Signature Algorithm: sha256WithRSAEncryption
76:74:3f:b6:03:bc:56:15:a5:b4:4e:79:e9:42:0f:c2:55:45:
17:76:02:8c:cc:aa:17:6f:1f:cb:0f:da:d7:b1:83:81:ca:b1:
37:2e:05:41:e8:10:05:2f:af:55:7a:64:a0:77:9e:1d:fa:14:
b4:59:de:7b:5b:e7:ef:64:54:88:3d:55:be:18:5a:f7:00:ca:
7f:3c:eb:a1:35:dc:1c:a2:c5:a9:92:f6:63:bf:b8:42:25:06:
1d:38:d8:3a:e3:b3:dd:52:9c:f5:6d:7b:a3:b4:4e:a4:ee:28:
83:0c:88:6a:9d:1a:d1:5d:0b:92:39:e4:11:bc:b6:32:d1:97:
dd:00:17:dd:3f:dc:b8:3d:1c:45:9d:f1:63:61:de:a3:36:9b:
88:ba:6a:82:db:f5:39:a7:d6:c7:0d:21:dd:da:bf:03:3c:35:
22:07:88:df:c0:64:52:d6:72:0e:5c:dc:8a:50:4b:58:ed:65:
e4:28:bd:c5:b3:a9:bc:87:f1:9e:b9:fe:ee:2a:86:ca:e4:22:
34:df:ec:57:c7:3d:60:95:ca:cb:f8:f2:10:2d:a4:5f:52:91:
ea:8a:87:c0:c5:2d:30:0b:41:97:01:58:b7:93:c9:a5:88:94:
00:e5:e6:a2:93:cf:6a:27:a1:ef:d3:54:cb:51:b9:33:f8:eb:
c6:ae:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:40 2026 by rpki-client