Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1XFk1ExeqsCBAx_oziZSRyl3zi4.roa
File: 1XFk1ExeqsCBAx_oziZSRyl3zi4.roa (raw, json)
Hash identifier: Yt87onWM6fEfD7br2c3H1sP0G6a6274xSYNwfMn9OP0=
Subject key identifier: D5:71:64:D4:4C:5E:AA:C0:81:03:1F:E8:CE:26:52:47:29:77:CE:2E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398253032D2ABBE607A36B988FA073E0
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1XFk1ExeqsCBAx_oziZSRyl3zi4.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
92.249.61.0/24 maxlen: 24
141.98.51.0/24 maxlen: 24
176.96.131.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:53:03:2d:2a:bb:e6:07:a3:6b:98:8f:a0:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d57164d44c5eaac081031fe8ce2652472977ce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:a4:96:5e:93:8e:98:17:da:cc:e2:ff:2a:
f1:11:76:2b:85:bc:da:ea:e0:d0:73:32:a4:31:15:
e0:a5:1b:72:24:8f:cc:15:24:af:04:7a:3c:91:57:
8c:6e:39:c5:6c:eb:86:4b:f2:42:ad:e6:09:ca:d5:
34:d7:94:00:cf:db:5a:98:66:82:61:ed:a2:68:0d:
17:d5:f2:86:91:b5:90:f1:0d:89:0c:20:93:4d:de:
4a:e7:89:57:09:3e:91:46:ef:bb:c5:f2:5f:f2:28:
e9:9c:cc:e2:fb:e4:0e:2d:de:3d:dc:03:ac:d5:84:
d9:b8:87:43:68:60:5e:b6:45:be:de:9f:b0:16:6d:
9d:17:60:c5:a9:d0:bd:8f:4a:dc:e3:19:e5:c6:3c:
ce:fa:11:f0:c8:ea:26:cb:6a:88:11:21:0b:a2:b2:
b5:01:27:15:41:40:1b:7e:3f:b0:18:b5:94:ad:ab:
b7:d0:0d:d9:58:97:b1:b5:de:69:36:f6:08:0e:b5:
05:d1:21:ea:bf:80:fe:ea:4c:54:f2:e7:67:00:d0:
00:99:74:c3:58:77:27:fb:d0:29:44:e1:7e:bf:16:
c6:e5:f3:6f:fb:4a:dd:1b:08:26:ef:f5:78:f3:dc:
5a:c7:49:cd:c0:10:48:13:1a:5d:1d:d6:d8:de:e6:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:64:D4:4C:5E:AA:C0:81:03:1F:E8:CE:26:52:47:29:77:CE:2E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/1XFk1ExeqsCBAx_oziZSRyl3zi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.102.0/23
92.249.61.0/24
141.98.51.0/24
176.96.131.0/24
193.111.77.0-193.111.78.255
217.18.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ed:b3:57:26:72:1f:46:c7:11:cf:78:94:7c:1f:03:1c:9a:
75:63:78:ca:ac:fe:48:9b:5e:24:f2:9a:a2:a9:7d:50:f8:46:
4c:d6:67:71:37:64:f2:69:2a:3b:3d:14:e9:d3:e8:20:39:77:
f4:13:b6:95:65:fb:c8:d5:9c:23:44:18:c5:62:5e:56:35:97:
16:a3:8b:ec:24:75:0e:7f:6b:98:f8:ae:e3:a2:9e:ce:1c:4c:
0c:e4:3d:cf:df:0b:46:1b:7a:e0:18:87:e7:b4:39:07:79:46:
50:5a:2a:51:00:e8:92:05:e5:e1:ed:35:d2:55:05:c0:ad:4d:
26:e9:64:40:50:a2:03:b1:48:8d:ca:2a:fe:33:58:22:45:df:
79:a4:d6:30:62:03:c8:5e:87:11:eb:ac:93:f0:0d:6d:f2:82:
f8:dc:1e:a0:77:30:83:18:17:00:f8:01:e2:09:3e:bd:4d:5c:
9c:c8:2b:35:6e:36:9b:d9:18:80:44:73:2d:67:5f:38:19:26:
e9:d5:1f:bf:f6:0f:f3:46:3e:4f:7b:a0:a9:b2:7c:f9:83:b0:
f9:dd:cb:ff:c9:1e:08:17:43:af:69:91:21:db:f7:cc:ca:6e:
32:ab:41:7b:7e:af:a2:52:6d:7e:9d:2c:4c:86:db:6b:9f:55:
23:03:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:59 2026 by rpki-client