Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XPhSJ182pJX25xwr4Ej2apGDT1Q.roa
File: XPhSJ182pJX25xwr4Ej2apGDT1Q.roa (raw, json)
Hash identifier: xXpjBHJPnwh6Yp3WMwhYPtcW48+ZKLCbhLdqDOkAUvE=
Subject key identifier: 5C:F8:52:27:5F:36:A4:95:F6:E7:1C:2B:E0:48:F6:6A:91:83:4F:54
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A082AB1E9E9A3BAD8D1E1B9D2E6C3723C9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XPhSJ182pJX25xwr4Ej2apGDT1Q.roa
Signing time: Tue 08 Sep 2026 20:17:27 +0000
ROA not before: Tue 08 Sep 2026 20:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 80.244.12.0/24 maxlen: 24
80.244.13.0/24 maxlen: 24
91.208.108.0/24 maxlen: 24
91.227.62.0/24 maxlen: 24
93.95.24.0/24 maxlen: 24
146.19.21.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
185.244.104.0/24 maxlen: 24
193.104.245.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
195.182.25.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:ab:1e:9e:9a:3b:ad:8d:1e:1b:9d:2e:6c:37:23:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 8 20:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf852275f36a495f6e71c2be048f66a91834f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:dc:0d:92:8c:8a:2d:a5:46:68:51:15:43:
a2:f5:70:86:d5:c6:5d:8c:b0:f5:06:aa:11:a4:96:
fd:e6:9c:b0:29:97:b9:65:8f:73:ea:97:82:a7:96:
b5:b3:ca:a0:2d:6f:8f:eb:cd:23:2d:bc:c0:b7:89:
65:28:7b:15:9c:b0:ce:e7:3a:c2:8f:87:c8:00:d4:
ce:9e:08:2f:f8:ea:a6:92:a3:84:25:61:d5:66:17:
bc:38:bb:b1:00:2a:7b:44:26:25:56:7d:ec:58:40:
e0:8c:ca:e3:91:12:20:12:7b:17:24:19:82:21:1e:
6c:16:00:62:42:6d:27:9e:55:62:0a:6e:8b:54:ee:
b6:0e:15:ea:92:c4:84:94:de:f4:e7:72:fb:ed:4e:
23:90:63:ba:75:84:99:fb:37:4a:4e:b6:d4:b6:74:
3a:39:2a:4e:62:db:bf:b7:b5:6b:11:8a:d8:f0:0e:
7f:7f:68:fd:d1:48:ae:10:87:87:13:71:58:ce:9a:
e6:ed:b9:ef:39:f3:d9:13:ee:01:2b:74:11:41:e3:
78:71:ef:a7:30:b9:92:96:20:a2:70:0f:b6:81:f9:
4d:0e:fa:fa:de:b9:03:2d:a5:a5:9f:16:a9:8e:20:
13:78:17:d7:fb:1e:82:36:29:b8:4c:bb:02:c2:e2:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:52:27:5F:36:A4:95:F6:E7:1C:2B:E0:48:F6:6A:91:83:4F:54
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/XPhSJ182pJX25xwr4Ej2apGDT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/23
91.208.108.0/24
91.227.62.0/24
93.95.24.0/24
146.19.21.0/24
160.19.94.0/24
185.244.104.0/24
193.104.245.0/24
194.26.215.0/24
195.182.25.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2b:2b:7c:f3:cd:6d:e9:77:2d:96:2d:ea:4d:3b:c2:ec:b8:
44:40:10:be:15:65:55:8f:ce:ec:f8:8d:41:d4:52:7c:2c:c6:
fa:98:e2:29:f5:cb:e7:13:ae:24:a9:ee:1f:94:2b:d1:2e:4d:
f7:43:fa:d3:e7:9f:85:ca:6f:33:5e:f7:f6:28:51:1f:3d:7e:
ef:03:2a:5d:1e:20:c8:5f:58:1b:8f:5a:33:85:e2:0b:99:bf:
fd:0d:d1:9a:b6:fe:e8:82:ea:11:87:4e:b5:a6:25:1e:17:16:
d8:1f:c1:98:a6:88:0c:c7:5a:10:d5:89:ee:ec:b8:37:f7:d0:
57:5d:c5:c2:4a:4c:d6:b1:1b:28:51:96:f9:16:39:0c:01:e4:
73:cf:68:ca:5a:21:a8:95:fe:3f:3d:42:ca:47:3d:89:ff:5e:
00:52:00:89:f0:c7:09:27:c2:77:ef:47:d1:db:81:12:f0:83:
50:33:69:0f:a4:5d:a9:83:cb:02:3b:55:80:71:c9:fd:4a:8a:
87:3b:64:d7:43:7b:38:4b:6d:bb:09:82:50:80:1d:06:b3:40:
04:d6:a5:34:a2:31:9a:26:c3:4a:78:3e:5e:44:31:cf:c3:4f:
19:82:44:8c:e7:d5:6d:76:30:4a:1b:1e:9c:c6:04:48:cd:5a:
96:db:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:35 2026 by rpki-client