Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/XCjw9b2OwQl43FlCHMe4Y7ZHEf4.roa
File: XCjw9b2OwQl43FlCHMe4Y7ZHEf4.roa (raw, json)
Hash identifier: wCbMmCARfzkMC7BdujK2S3qjjOC1hyZJ59PQGiRtmM8=
Subject key identifier: 5C:28:F0:F5:BD:8E:C1:09:78:DC:59:42:1C:C7:B8:63:B6:47:11:FE
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 01A1153A47C204F8BC83EE8AA00A3B40E295
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/XCjw9b2OwQl43FlCHMe4Y7ZHEf4.roa
Signing time: Wed 07 Oct 2026 07:18:23 +0000
ROA not before: Wed 07 Oct 2026 07:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 93.191.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:3a:47:c2:04:f8:bc:83:ee:8a:a0:0a:3b:40:e2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Oct 7 07:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c28f0f5bd8ec10978dc59421cc7b863b64711fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:d5:36:44:64:d1:f7:22:c2:d0:38:7e:33:
fa:7e:fa:a5:ff:b7:03:ec:ae:e2:42:da:c8:5b:ad:
8b:b6:4c:94:b5:11:41:4d:24:64:c3:f1:4d:f1:5a:
2c:29:af:fc:90:97:01:8a:a9:65:72:62:ee:50:e4:
c6:ce:1f:a8:b0:c2:fd:14:58:0e:11:33:a0:a8:72:
bd:dd:12:f8:2c:1e:33:68:fd:3d:86:2d:36:0a:ed:
07:0f:9a:7b:ed:ea:d7:f4:ec:7a:82:f0:bd:f1:4d:
4a:58:56:3c:c9:41:53:7d:84:16:ad:29:c6:e4:92:
24:dc:16:50:05:fa:43:ae:35:61:73:f1:ad:e5:9a:
90:a2:c4:75:7d:25:22:b5:72:9e:0e:88:c3:66:f8:
da:60:ae:96:2b:a3:cd:af:3e:d3:c5:45:8b:19:76:
e5:e0:5e:de:02:ec:1c:f6:27:8e:a1:78:3d:be:50:
6b:a2:3b:c0:1f:eb:6d:c0:ba:f9:55:42:44:4a:55:
61:cb:c4:5d:e7:8d:d2:8c:18:26:f9:40:ac:5f:c5:
96:bc:de:fc:f8:8c:ae:38:85:07:4f:81:77:34:d3:
f1:31:ba:d3:03:7a:9b:c2:a1:60:85:07:73:85:9c:
85:4e:ef:e1:30:da:18:a7:f6:92:cb:c8:94:aa:8c:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:F0:F5:BD:8E:C1:09:78:DC:59:42:1C:C7:B8:63:B6:47:11:FE
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/XCjw9b2OwQl43FlCHMe4Y7ZHEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.255.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:dd:67:0b:3f:a0:f7:89:59:30:4c:4b:1f:22:22:77:b4:
af:a1:ec:a3:dc:1c:3d:bf:71:72:da:cc:c1:c9:cd:3e:5f:a7:
89:e9:d8:fa:4f:4d:85:57:80:d2:10:99:80:ab:2b:6e:24:13:
88:46:55:e6:2a:4c:ac:a1:a8:9f:50:7a:cb:c8:a4:b4:57:24:
b6:d6:7a:4f:8b:99:e6:ea:1b:aa:f1:42:2c:47:35:f2:7d:e7:
a0:0f:0e:5e:70:1d:ee:75:85:9b:18:02:ec:b8:1f:c2:6a:80:
7c:72:83:3e:8c:89:26:15:40:1a:f3:15:6d:40:86:38:e2:94:
8e:72:78:2e:05:ae:af:85:fe:c8:58:45:77:c4:b5:9e:db:85:
7d:26:2d:7a:89:c9:88:65:db:5a:a8:2c:8b:af:4c:57:cb:9a:
7c:72:58:8a:82:c0:15:d2:45:e8:da:20:24:6b:ae:31:62:e2:
58:30:be:c3:36:b2:4c:8a:c3:89:a9:00:d9:bb:97:88:81:57:
1a:1e:2c:2a:a1:41:92:b9:5b:f4:b0:d5:36:9a:97:a5:46:16:
06:32:4a:fe:38:0f:58:47:8f:f3:09:37:a8:fc:9e:7e:79:32:
97:9e:13:d3:d1:52:25:64:49:26:3b:9a:a4:83:6b:1a:e1:f2:
70:b1:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 18:31:42 2026 by rpki-client