Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XujVcHVaHYoU8Ne7tA9VmKfnI9s.roa
File: XujVcHVaHYoU8Ne7tA9VmKfnI9s.roa (raw, json)
Hash identifier: iVS85J1Cf27qEiEKRKPtTjpBQTowAO0OqpokXuiVgrY=
Subject key identifier: 5E:E8:D5:70:75:5A:1D:8A:14:F0:D7:BB:B4:0F:55:98:A7:E7:23:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13EE02626E25F3C9D77A57ACE97A0F36A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XujVcHVaHYoU8Ne7tA9VmKfnI9s.roa
Signing time: Thu 15 Oct 2026 09:23:59 +0000
ROA not before: Thu 15 Oct 2026 09:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200367
IP address blocks: 192.124.177.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:e0:26:26:e2:5f:3c:9d:77:a5:7a:ce:97:a0:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 15 09:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ee8d570755a1d8a14f0d7bbb40f5598a7e723db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:c3:0d:e7:90:0e:77:8b:1d:1f:67:e5:5c:
bc:1d:ab:f1:15:d6:03:ec:d3:bf:4c:73:1d:5b:a6:
9f:4b:22:a3:fd:fb:79:14:d9:8a:cd:c3:59:b3:03:
37:be:44:a7:8c:64:6e:73:fe:82:c5:74:ab:f5:4f:
ce:e5:35:6b:13:f1:ef:aa:29:ca:c6:13:dd:d4:b9:
50:7d:05:19:3d:04:a7:b4:b3:a0:13:6a:1e:49:37:
82:63:5c:5e:30:4f:74:31:ce:91:6d:1b:a3:0e:17:
71:60:40:7d:17:44:a6:ea:d0:a0:51:ea:aa:1b:e4:
02:4d:38:17:6c:f2:fe:7c:52:e0:14:d0:62:c5:3a:
c7:3f:27:fe:67:38:9a:f1:14:6b:d7:d4:e9:3b:d7:
5a:d5:0d:6c:01:3c:ae:ed:2a:a0:f6:9c:d8:d5:78:
54:d3:86:35:a7:2c:7a:77:1a:c8:de:bf:2e:47:ed:
0f:f7:21:09:a0:30:b9:98:4a:71:38:96:79:92:f0:
b3:e3:8c:f0:72:ec:25:a9:90:77:89:cc:22:af:d1:
7d:e2:24:63:0b:b5:46:12:5c:76:30:ac:54:db:4f:
5c:f5:2f:a1:f4:65:ce:fe:7f:48:2f:5c:8c:64:b0:
d4:1c:b5:f3:3f:b8:18:fe:63:47:5f:a5:2e:f9:9d:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:D5:70:75:5A:1D:8A:14:F0:D7:BB:B4:0F:55:98:A7:E7:23:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XujVcHVaHYoU8Ne7tA9VmKfnI9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.177.0/24
193.124.89.0/24
193.124.226.0/24
212.193.28.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ca:b4:84:42:24:04:01:38:3e:01:4e:0d:90:45:a3:b2:b5:
10:d1:30:ee:91:e6:60:f2:e3:46:ee:ad:cf:8a:86:25:7b:34:
b3:d7:7e:1e:41:f5:89:ba:b5:73:b6:94:ab:47:d7:14:74:1b:
43:a2:79:bf:f8:6b:16:03:ec:20:df:b8:f3:2c:ba:d8:49:57:
07:2c:81:0e:bf:35:69:43:4d:61:15:7e:a3:fc:62:51:ed:36:
cf:31:79:ba:ea:77:2a:4d:95:16:f8:89:73:3b:24:86:fa:2d:
bd:e4:6a:1b:91:6a:07:b2:4f:0e:52:ca:c2:b9:99:2a:46:c2:
80:be:1f:39:26:41:e8:66:0a:2f:3e:b8:de:75:a2:7b:f9:7a:
fd:31:7e:1a:14:08:c9:1f:3c:8e:0d:5e:0b:bb:10:dc:88:e5:
4f:6a:b2:90:5d:ae:43:29:77:70:47:9f:46:5a:81:b1:7d:1b:
e6:18:92:93:6f:a7:b4:9c:d1:d2:de:e4:73:06:9a:13:74:1b:
8d:bc:b8:9c:d5:ab:3b:fd:89:e1:bd:d8:04:42:78:44:5a:3a:
a6:a2:d5:92:5f:a1:7e:fc:70:6b:08:4c:d4:bb:98:26:48:13:
c1:7a:0c:e3:fb:04:79:ed:65:87:81:9c:73:15:42:56:7d:02:
54:99:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:00 2026 by rpki-client