Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/XHxe1-qX4t2Dx84VrJy5MR5VJxY.roa
File: XHxe1-qX4t2Dx84VrJy5MR5VJxY.roa (raw, json)
Hash identifier: qLY0NP2EhLPbGczNmnseJG+F2uZdCpBrp1ojCBqpVu4=
Subject key identifier: 5C:7C:5E:D7:EA:97:E2:DD:83:C7:CE:15:AC:9C:B9:31:1E:55:27:16
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825CD30A9412A0EED1062F7D5C77D7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/XHxe1-qX4t2Dx84VrJy5MR5VJxY.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219464
IP address blocks: 194.93.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5c:d3:0a:94:12:a0:ee:d1:06:2f:7d:5c:77:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c7c5ed7ea97e2dd83c7ce15ac9cb9311e552716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:dc:54:9a:54:7d:6f:b1:0a:50:a3:d0:ee:
5f:16:66:1f:4b:5f:3d:4a:9f:4f:0d:22:01:39:bc:
58:ef:5e:1c:e7:cc:a0:e5:5a:e8:4f:89:fa:b6:2e:
2e:e4:6b:c5:a5:a3:f7:0c:73:c1:7a:0b:64:37:99:
ee:c9:28:78:a6:55:f9:3d:6a:de:c8:ae:fc:21:c2:
98:10:bd:99:5e:9c:c7:1e:a2:fd:04:db:45:34:b7:
c9:18:e2:40:fa:71:2b:de:fd:89:df:50:e0:7b:ae:
cb:bc:d1:1c:60:5a:0a:b1:c9:d6:46:56:57:dd:0b:
55:2e:86:10:19:e0:9e:d5:c2:a6:ef:92:c3:07:4f:
9b:4a:4a:8e:d5:6d:9a:fc:45:23:88:83:88:80:24:
30:f1:39:14:35:7b:ac:ea:6a:9d:2a:e0:94:45:d4:
0d:f2:d2:0a:ea:78:ad:61:92:c1:86:2e:93:96:c0:
32:35:fd:d2:2e:82:d7:f6:40:9d:5d:da:a8:90:1f:
d7:74:88:d9:b9:e6:be:6a:c6:a2:4c:10:ff:01:5b:
68:29:35:74:36:89:70:3a:1f:79:e8:65:ba:60:ef:
cc:c6:07:2b:65:ed:9a:f1:b4:af:bf:fe:0c:c6:55:
ce:f5:e6:7f:54:14:df:16:60:f7:56:e7:e4:79:e3:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:5E:D7:EA:97:E2:DD:83:C7:CE:15:AC:9C:B9:31:1E:55:27:16
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/XHxe1-qX4t2Dx84VrJy5MR5VJxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.61.0/24
Signature Algorithm: sha256WithRSAEncryption
60:78:0f:36:96:09:8a:47:04:c6:0a:55:8f:39:f1:8e:4a:9c:
e2:c0:de:8f:f2:6e:a4:34:45:46:43:7e:dd:02:07:4e:72:30:
65:bd:bf:d8:b8:db:08:89:6e:09:52:bf:88:8d:aa:28:ea:8e:
ac:a9:26:35:c1:52:9e:26:52:9c:ec:e2:67:48:04:11:8c:72:
a8:15:de:ff:10:7f:19:1f:2e:0c:7e:f2:e7:91:09:88:74:77:
15:58:7b:f2:f8:bc:46:24:a2:12:b4:9d:33:fc:f8:91:68:8d:
0d:3f:46:e6:b9:f8:55:b5:9a:23:e1:95:1c:0b:4a:c7:49:7a:
db:d8:ab:62:23:5b:d2:0e:d9:0e:4b:58:6c:58:5c:11:dd:de:
38:a2:4d:86:9d:ad:97:b4:87:ff:a2:36:19:e9:f2:1d:23:83:
e7:76:ec:12:b3:af:cb:20:13:c1:5b:55:e7:ab:91:70:f5:d2:
b7:e7:b3:1a:6c:3a:a7:7e:11:59:e0:64:3d:f7:1a:0a:fb:49:
99:c5:98:d6:7d:3f:95:8a:40:4f:fd:57:f2:2b:69:4c:6d:27:
62:65:e5:ae:bf:19:60:91:28:61:65:5d:84:86:d8:81:b0:b6:
cf:01:f0:5e:d1:80:48:4b:55:f9:3c:2b:06:fa:cd:7b:65:32:
97:d0:46:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5glzTCpQSoO7RBi99XHfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzdjNWVkN2VhOTdlMmRkODNjN2NlMTVhYzljYjkzMTFlNTUyNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnizcVJpUfW+xClCj0O5fFmYfS189
Sp9PDSIBObxY714c58yg5VroT4n6ti4u5GvFpaP3DHPBegtkN5nuySh4plX5PWre
yK78IcKYEL2ZXpzHHqL9BNtFNLfJGOJA+nEr3v2J31Dge67LvNEcYFoKscnWRlZX
3QtVLoYQGeCe1cKm75LDB0+bSkqO1W2a/EUjiIOIgCQw8TkUNXus6mqdKuCURdQN
8tIK6nitYZLBhi6TlsAyNf3SLoLX9kCdXdqokB/XdIjZuea+asaiTBD/AVtoKTV0
NolwOh956GW6YO/MxgcrZe2a8bSvv/4MxlXO9eZ/VBTfFmD3VufkeeNy6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFx8Xtfql+Ldg8fOFaycuTEeVScWMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvWEh4ZTEtcVg0dDJEeDg0VnJKeTVNUjVWSnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl09MA0G
CSqGSIb3DQEBCwUAA4IBAQBgeA82lgmKRwTGClWPOfGOSpziwN6P8m6kNEVGQ37d
AgdOcjBlvb/YuNsIiW4JUr+Ijaoo6o6sqSY1wVKeJlKc7OJnSAQRjHKoFd7/EH8Z
Hy4MfvLnkQmIdHcVWHvy+LxGJKIStJ0z/PiRaI0NP0bmufhVtZoj4ZUcC0rHSXrb
2KtiI1vSDtkOS1hsWFwR3d44ok2Gna2XtIf/ojYZ6fIdI4PnduwSs6/LIBPBW1Xn
q5Fw9dK357MabDqnfhFZ4GQ99xoK+0mZxZjWfT+VikBP/VfyK2lMbSdiZeWuvxlg
kShhZV2EhtiBsLbPAfBe0YBIS1X5PCsG+s17ZTKX0Ebo
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:02 2026 by rpki-client