Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xe2LJFlWnPA4SNNBfckG7gQgxZU.roa
File: xe2LJFlWnPA4SNNBfckG7gQgxZU.roa (raw, json)
Hash identifier: 2D7Gmpxi4VzRrsHqSEr+b5BG4qK7GtM894+b+adGyyA=
Subject key identifier: C5:ED:8B:24:59:56:9C:F0:38:48:D3:41:7D:C9:06:EE:04:20:C5:95
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0F195CDA07F3656A9D45787717E82886C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xe2LJFlWnPA4SNNBfckG7gQgxZU.roa
Signing time: Wed 30 Sep 2026 09:12:01 +0000
ROA not before: Wed 30 Sep 2026 09:12:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 263812
IP address blocks: 93.152.30.0/23 maxlen: 24
93.152.38.0/23 maxlen: 24
93.152.46.0/23 maxlen: 24
93.152.52.0/23 maxlen: 24
93.152.62.0/23 maxlen: 24
93.152.76.0/23 maxlen: 24
93.152.80.0/23 maxlen: 24
93.152.84.0/23 maxlen: 24
93.152.94.0/23 maxlen: 24
93.152.98.0/23 maxlen: 24
93.152.102.0/23 maxlen: 24
93.152.124.0/23 maxlen: 24
109.174.220.0/22 maxlen: 24
109.174.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:95:cd:a0:7f:36:56:a9:d4:57:87:71:7e:82:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 30 09:12:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5ed8b2459569cf03848d3417dc906ee0420c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:a3:05:e2:97:04:b7:c9:76:a8:41:0c:f5:
58:4d:e6:57:78:6b:b9:5b:36:0e:38:e1:be:d7:71:
57:00:18:91:18:d8:8c:f7:84:d2:06:6b:6a:d8:42:
f3:fe:5e:05:91:a2:d0:cf:f8:11:3e:77:e4:77:5f:
4b:af:88:3c:f1:9b:08:ff:58:09:9b:60:3e:95:c5:
95:df:be:e0:33:c3:ac:48:a5:b3:14:e7:8f:d4:72:
48:25:7d:9f:f8:33:13:be:6b:a9:b9:eb:08:4e:f4:
24:5e:0c:7b:66:05:53:e7:76:3b:e6:29:12:55:20:
c9:84:fd:15:ad:a9:b6:42:16:7d:38:fd:b5:05:f7:
80:9f:35:8e:1a:23:27:91:dd:e3:cf:df:74:46:d1:
87:9d:59:2d:f3:32:2a:d8:fe:9e:ac:60:10:ff:98:
32:98:2f:b1:84:2f:ed:b6:e4:bd:8c:65:7a:5b:b6:
2f:38:95:7c:1a:5d:d9:16:6e:17:36:2b:19:1d:c2:
e2:57:6a:e4:a0:db:ff:18:8b:40:47:90:f0:20:ce:
27:e6:fa:8c:f9:de:c8:71:86:69:d1:71:64:c1:e0:
b0:2d:9f:f4:b3:79:02:66:25:43:6c:4e:f9:3f:e3:
1f:96:7e:a9:23:1e:4a:4e:fc:da:e5:43:db:44:5a:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:8B:24:59:56:9C:F0:38:48:D3:41:7D:C9:06:EE:04:20:C5:95
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xe2LJFlWnPA4SNNBfckG7gQgxZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.30.0/23
93.152.38.0/23
93.152.46.0/23
93.152.52.0/23
93.152.62.0/23
93.152.76.0/23
93.152.80.0/23
93.152.84.0/23
93.152.94.0/23
93.152.98.0/23
93.152.102.0/23
93.152.124.0/23
109.174.220.0/22
109.174.236.0/22
Signature Algorithm: sha256WithRSAEncryption
46:81:54:41:65:42:9d:f8:c4:d1:49:79:db:91:bb:fc:38:c2:
cc:8a:da:4a:8d:6e:08:58:34:56:ef:7a:1a:4a:d5:c7:05:aa:
05:a0:28:5d:e6:9a:69:67:a8:26:db:ef:ec:a7:f0:8b:59:09:
4e:90:47:0b:2b:b9:e8:7e:2a:51:63:d2:b0:b8:0b:6c:7d:8a:
1b:7a:09:75:fa:5f:a3:3e:1d:6a:2f:01:0f:16:b8:54:6b:83:
f2:2b:dd:e0:cf:56:3c:16:c6:95:41:ab:ce:0b:f0:a8:76:f9:
f5:5b:67:6d:7a:fd:1e:af:ff:d1:18:0d:14:e7:87:c8:bd:d6:
dd:96:89:0e:3d:9c:09:8e:6e:4c:67:2f:3b:8f:91:9a:2d:52:
8b:a7:e3:03:eb:f9:b7:92:6a:3a:db:3e:8b:9b:1d:c4:f0:7d:
3d:a9:76:24:e8:6c:cf:9b:5e:95:8a:99:5d:7a:8c:bc:95:a1:
a3:5b:87:19:98:17:b6:bb:16:78:a0:87:eb:9d:08:33:14:ed:
83:f6:4e:36:b3:17:16:db:24:98:8f:97:23:5a:7a:65:ca:d3:
5c:d6:72:86:5f:d3:df:fa:82:ce:b7:c5:60:4d:86:43:d2:07:
db:b2:e8:e9:ad:ba:56:e8:97:4e:02:57:2f:66:61:f2:7a:29:
f5:c6:16:aa
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaDxlc2gfzZWqdRXh3F+gohsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTMwMDkxMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWVkOGIyNDU5NTY5Y2YwMzg0OGQzNDE3ZGM5MDZlZTA0MjBjNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLWjBeKXBLfJdqhBDPVYTeZXeGu5
WzYOOOG+13FXABiRGNiM94TSBmtq2ELz/l4FkaLQz/gRPnfkd19Lr4g88ZsI/1gJ
m2A+lcWV377gM8OsSKWzFOeP1HJIJX2f+DMTvmupuesITvQkXgx7ZgVT53Y75ikS
VSDJhP0Vram2QhZ9OP21BfeAnzWOGiMnkd3jz990RtGHnVkt8zIq2P6erGAQ/5gy
mC+xhC/ttuS9jGV6W7YvOJV8Gl3ZFm4XNisZHcLiV2rkoNv/GItAR5DwIM4n5vqM
+d7IcYZp0XFkweCwLZ/0s3kCZiVDbE75P+Mfln6pIx5KTvza5UPbRFr09wIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFMXtiyRZVpzwOEjTQX3JBu4EIMWVMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEveGUyTEpGbFduUEE0U05OQmZja0c3Z1FneFpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBXZgeAwQB
XZgmAwQBXZguAwQBXZg0AwQBXZg+AwQBXZhMAwQBXZhQAwQBXZhUAwQBXZheAwQB
XZhiAwQBXZhmAwQBXZh8AwQCba7cAwQCba7sMA0GCSqGSIb3DQEBCwUAA4IBAQBG
gVRBZUKd+MTRSXnbkbv8OMLMitpKjW4IWDRW73oaStXHBaoFoChd5pppZ6gm2+/s
p/CLWQlOkEcLK7nofipRY9KwuAtsfYobegl1+l+jPh1qLwEPFrhUa4PyK93gz1Y8
FsaVQavOC/Codvn1W2dtev0er//RGA0U54fIvdbdlokOPZwJjm5MZy87j5GaLVKL
p+MD6/m3kmo62z6Lmx3E8H09qXYk6GzPm16Vipldeoy8laGjW4cZmBe2uxZ4oIfr
nQgzFO2D9k42sxcW2ySYj5cjWnplytNc1nKGX9Pf+oLOt8VgTYZD0gfbsujprbpW
6JdOAlcvZmHyein1xhaq
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:36 2026 by rpki-client