Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XqirfhHa_9ClgqcKC2YOTrQb0LY.roa
File: XqirfhHa_9ClgqcKC2YOTrQb0LY.roa (raw, json)
Hash identifier: tiGTYhQFAD3ddWsh6FzqBteJ2VBynaTe24J7o3BQ/Sw=
Subject key identifier: 5E:A8:AB:7E:11:DA:FF:D0:A5:82:A7:0A:0B:66:0E:4E:B4:1B:D0:B6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E3B6F67A6F81FF6C7E10171C865B6A273
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XqirfhHa_9ClgqcKC2YOTrQb0LY.roa
Signing time: Mon 18 May 2026 14:13:37 +0000
ROA not before: Mon 18 May 2026 14:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48753
IP address blocks: 80.96.109.0/24 maxlen: 24
80.97.160.0/24 maxlen: 24
80.97.161.0/24 maxlen: 24
85.120.255.0/24 maxlen: 24
85.121.148.0/24 maxlen: 24
85.122.129.0/24 maxlen: 24
194.102.104.0/24 maxlen: 24
217.156.62.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:6f:67:a6:f8:1f:f6:c7:e1:01:71:c8:65:b6:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 18 14:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea8ab7e11daffd0a582a70a0b660e4eb41bd0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:3f:19:7c:27:f2:8d:e0:ec:d8:41:e3:66:
fc:b8:b6:96:74:cc:62:56:1e:ce:f6:7e:8f:1c:48:
b9:b1:68:e5:25:2c:14:5e:5e:fd:a3:61:73:2b:82:
40:39:c0:67:db:ff:75:ec:8c:21:70:21:17:ba:92:
90:9b:f2:19:41:00:ca:cf:96:3c:c4:36:8d:fe:1e:
43:f4:a9:b3:be:3a:0e:38:53:97:6b:1f:36:d8:08:
64:77:39:9e:59:00:33:27:a5:ce:b9:ce:84:d3:4d:
07:ee:a2:8e:84:c6:56:30:3c:d5:ed:08:24:e2:5a:
21:c2:a1:62:d5:e6:d8:7c:d8:ff:7a:51:68:a7:fb:
90:68:70:16:fc:b8:5e:02:67:a1:32:2b:8e:55:39:
01:dd:60:54:95:bb:20:5f:63:19:ec:17:7f:8c:b1:
3d:4a:e7:14:75:36:e6:c1:d0:a3:eb:5b:d6:4e:5d:
7c:36:86:37:8c:10:44:5e:34:40:50:56:a1:ea:0d:
87:eb:9b:df:ff:6b:99:66:b7:8e:a1:01:6b:77:98:
f9:f4:13:05:fc:f6:a3:77:fb:e1:2f:5c:e0:5d:88:
18:34:2b:0b:cc:59:60:46:ac:af:05:31:72:6b:f3:
ce:58:aa:b0:5c:f3:46:e8:4b:d6:c2:51:79:c9:bd:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:AB:7E:11:DA:FF:D0:A5:82:A7:0A:0B:66:0E:4E:B4:1B:D0:B6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XqirfhHa_9ClgqcKC2YOTrQb0LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.109.0/24
80.97.160.0/23
85.120.255.0/24
85.121.148.0/24
85.122.129.0/24
194.102.104.0/24
217.156.62.0/24
217.156.66.0/23
217.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:97:d1:29:dc:ed:a1:33:4b:08:4c:31:39:e2:38:21:91:86:
69:ba:be:f7:d0:3e:2f:b9:6c:94:85:1e:e0:e6:db:0c:52:5b:
21:b9:a0:3b:8d:be:5a:e9:a3:d5:09:05:0f:64:af:b3:5f:f5:
74:fa:83:9e:12:0b:92:ed:85:ad:59:e2:c8:fb:4e:6a:5f:3e:
f9:ad:44:d6:a4:30:2e:61:6f:9a:75:26:46:45:6b:53:01:cc:
c9:4e:84:2c:68:6d:d4:99:4e:16:93:81:09:b6:e2:2c:47:15:
26:f9:b2:18:09:ae:d0:da:4c:1c:84:7f:2e:2d:0f:74:b4:50:
b8:11:10:35:83:07:e7:d4:96:73:18:2d:5f:5d:82:19:15:47:
be:47:08:a9:71:d5:97:d1:90:2c:c9:3a:23:50:7c:4f:00:a0:
48:ba:82:d6:8b:d2:89:fa:a5:a4:cb:cb:19:5e:3d:07:20:45:
40:08:8d:a2:e4:6c:b4:16:92:51:62:7e:5e:b7:a3:01:b7:b5:
ac:3e:e8:c1:ab:df:6f:d0:3a:b2:2d:64:b8:94:2b:49:1e:6b:
f4:09:b1:0a:eb:ee:c0:bf:e8:9e:8b:86:cc:0c:85:fc:28:b2:
b3:a2:9f:68:fc:c9:89:90:19:2c:a4:3b:3b:ab:ea:76:ca:f3:
e5:f3:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:06:36 2026 by rpki-client