Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/XNkrx59zpC0_pN79AveN6B8ZmuY.roa
File: XNkrx59zpC0_pN79AveN6B8ZmuY.roa (raw, json)
Hash identifier: r2UBCS+W0864KtqIA+Q8Kina74BaezRnuOARe+U+4nI=
Subject key identifier: 5C:D9:2B:C7:9F:73:A4:2D:3F:A4:DE:FD:02:F7:8D:E8:1F:19:9A:E6
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A037A2715685FA8C9FE805F760D61A980C
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/XNkrx59zpC0_pN79AveN6B8ZmuY.roa
Signing time: Tue 25 Aug 2026 06:36:27 +0000
ROA not before: Tue 25 Aug 2026 06:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 136.176.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:a2:71:56:85:fa:8c:9f:e8:05:f7:60:d6:1a:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Aug 25 06:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cd92bc79f73a42d3fa4defd02f78de81f199ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:cf:8d:cd:e8:a2:44:1c:78:6f:28:ea:cc:
db:c4:4d:d0:9e:94:37:9c:f0:ca:d8:27:d8:20:56:
ba:08:47:9f:39:3b:ac:9e:ab:c8:40:12:27:71:89:
d1:3e:74:be:d2:40:2b:6b:15:5a:0d:8e:a3:20:e5:
20:64:08:31:a7:58:d0:85:65:6d:9f:ce:af:dc:ae:
58:4b:d9:3b:e6:f2:cf:73:bb:25:8c:ef:06:46:3f:
73:94:ac:2b:5e:70:da:1b:3c:b5:2e:ae:5c:16:6b:
d9:f9:56:14:43:7b:3c:87:63:ae:be:ff:0e:6c:2f:
71:35:fc:6d:50:65:04:dd:64:03:ea:05:ad:57:0e:
91:85:ab:a2:0f:65:92:c3:ff:d1:51:e4:5b:e2:ad:
73:2a:4f:61:8c:12:e7:77:b0:d1:a2:22:bb:05:5a:
fd:78:41:5b:97:db:b6:f3:a8:44:80:fc:52:08:d2:
4c:a0:a5:66:a5:24:07:2b:87:66:58:ce:b3:0e:1b:
18:f7:af:c8:48:db:00:c3:95:ea:72:f1:b0:c1:40:
ec:51:15:b2:af:08:04:be:b5:bb:45:cd:81:52:8b:
1b:30:5e:78:d5:07:7e:63:80:6f:3a:43:54:f8:00:
5d:93:fc:17:86:0a:08:2e:ea:89:e2:3e:0b:89:38:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:2B:C7:9F:73:A4:2D:3F:A4:DE:FD:02:F7:8D:E8:1F:19:9A:E6
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/XNkrx59zpC0_pN79AveN6B8ZmuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.192.0/24
Signature Algorithm: sha256WithRSAEncryption
34:07:aa:79:a3:e8:b4:40:10:aa:da:8c:6a:0b:4a:93:9c:1e:
10:87:44:79:90:69:91:39:1f:89:cd:5f:c7:fc:84:6d:73:16:
e9:53:43:48:56:c7:47:3a:c4:ab:82:a8:85:33:77:ae:f6:7c:
9f:3a:90:c3:80:3c:77:4b:17:10:71:9e:1d:01:de:2f:82:d5:
3f:ba:b8:ec:7c:e0:a4:e5:fe:b3:8f:6a:06:e6:2c:70:c1:2c:
e8:b9:53:eb:16:41:e8:b2:45:af:df:2f:f3:1b:f5:f9:2d:c8:
8e:6b:a7:9d:3c:75:8f:c6:09:eb:13:f2:67:d7:c2:08:18:32:
e5:6f:fe:ad:a2:30:06:97:af:b0:ef:19:85:0b:1c:b8:e0:01:
76:e2:2b:6a:01:84:ab:94:ec:00:c9:e3:e1:26:5c:67:be:c2:
ef:d1:8b:58:98:05:87:4f:51:a0:1b:b2:66:0e:a4:6a:1e:91:
be:19:e7:93:6c:bb:1f:db:4f:4f:5a:82:c8:2a:be:f9:14:e5:
5b:23:67:f7:f1:ed:56:74:47:79:6e:fe:f1:be:e8:d2:5c:71:
21:ae:ce:11:9e:0d:66:e8:43:95:ea:dd:7f:54:53:33:88:18:
9e:df:45:0c:b5:b9:67:f6:43:4d:1c:80:47:af:d5:ad:c3:56:
f1:84:38:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA3onFWhfqMn+gF92DWGpgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjY3Yjc0Y2U4ZjJhNGNhMzUwMTYzYTdiM2UxM2MzNzE3
M2M3YWUwHhcNMjYwODI1MDYzNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2Q5MmJjNzlmNzNhNDJkM2ZhNGRlZmQwMmY3OGRlODFmMTk5YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULPjc3ookQceG8o6szbxE3QnpQ3
nPDK2CfYIFa6CEefOTusnqvIQBIncYnRPnS+0kAraxVaDY6jIOUgZAgxp1jQhWVt
n86v3K5YS9k75vLPc7sljO8GRj9zlKwrXnDaGzy1Lq5cFmvZ+VYUQ3s8h2Ouvv8O
bC9xNfxtUGUE3WQD6gWtVw6RhauiD2WSw//RUeRb4q1zKk9hjBLnd7DRoiK7BVr9
eEFbl9u286hEgPxSCNJMoKVmpSQHK4dmWM6zDhsY96/ISNsAw5XqcvGwwUDsURWy
rwgEvrW7Rc2BUosbMF541Qd+Y4BvOkNU+ABdk/wXhgoILuqJ4j4LiThgcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFzZK8efc6QtP6Te/QL3jegfGZrmMB8GA1UdIwQY
MBaAFC72e3TOjypMo1AWOns+E8Nxc8euMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZaN2RNNlBLa3lqVUJZNmV6NFR3M0Z6eDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xOWNlNzUtMTRlMy00NzA3LWFmNDUt
MGY5M2VlMzM1YzIzLzEvWE5rcng1OXpwQzBfcE43OUF2ZU42QjhabXVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xOWNlNzUtMTRlMy00NzA3LWFmNDUtMGY5M2VlMzM1YzIz
LzEvTHZaN2RNNlBLa3lqVUJZNmV6NFR3M0Z6eDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLDAMA0G
CSqGSIb3DQEBCwUAA4IBAQA0B6p5o+i0QBCq2oxqC0qTnB4Qh0R5kGmROR+JzV/H
/IRtcxbpU0NIVsdHOsSrgqiFM3eu9nyfOpDDgDx3SxcQcZ4dAd4vgtU/urjsfOCk
5f6zj2oG5ixwwSzouVPrFkHoskWv3y/zG/X5LciOa6edPHWPxgnrE/Jn18IIGDLl
b/6tojAGl6+w7xmFCxy44AF24itqAYSrlOwAyePhJlxnvsLv0YtYmAWHT1GgG7Jm
DqRqHpG+GeeTbLsf209PWoLIKr75FOVbI2f38e1WdEd5bv7xvujSXHEhrs4Rng1m
6EOV6t1/VFMziBie30UMtbln9kNNHIBHr9Wtw1bxhDi1
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:46 2026 by rpki-client