Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xtgpyZ2Tl7iqhdaXFFCvo5_awdg.roa
File: xtgpyZ2Tl7iqhdaXFFCvo5_awdg.roa (raw, json)
Hash identifier: 0WNBcA0hxe1xXCIQZ42rUFjQgNVP8pARXmKjq5883YE=
Subject key identifier: C6:D8:29:C9:9D:93:97:B8:AA:85:D6:97:14:50:AF:A3:9F:DA:C1:D8
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0DD4AFD97D4984DC71994B96E94CB7712
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xtgpyZ2Tl7iqhdaXFFCvo5_awdg.roa
Signing time: Sat 26 Sep 2026 10:37:54 +0000
ROA not before: Sat 26 Sep 2026 10:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.91.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.94.0/24 maxlen: 24
178.254.168.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:4a:fd:97:d4:98:4d:c7:19:94:b9:6e:94:cb:77:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 26 10:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6d829c99d9397b8aa85d6971450afa39fdac1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:11:71:df:f5:a7:c8:ef:3e:54:89:76:5b:
b7:c9:3d:76:32:66:98:97:16:db:fa:ef:4a:b0:ac:
a2:19:68:95:94:eb:2c:07:5c:d2:1c:81:42:1c:ba:
1f:27:bc:fb:a8:cf:20:3a:a3:72:c7:13:31:51:f2:
41:7b:e8:60:79:72:55:ee:65:84:b7:7a:51:c9:5b:
77:a1:72:41:3e:7e:99:48:7b:fb:c6:d7:96:d7:00:
b4:bb:0e:54:0a:d6:43:2a:5f:0d:73:db:b8:ed:30:
a0:2c:bd:31:8c:cc:c4:33:8f:9e:aa:d7:3e:d3:d5:
c4:22:2a:18:04:03:80:a0:ca:2a:81:3a:69:bc:60:
55:26:df:25:d9:f3:ad:33:1e:f6:db:83:70:64:59:
91:7c:32:f8:d3:4f:7b:ff:33:be:03:09:0f:66:29:
09:69:e5:23:eb:77:5e:31:31:91:45:a5:16:f0:cb:
2d:a6:f3:c6:4c:e7:74:4e:37:6b:84:56:1e:66:a7:
ec:ab:03:80:24:14:2f:d8:5a:c2:ef:34:60:90:ab:
40:99:22:ab:63:63:14:bc:49:b7:2e:9c:16:53:d7:
4d:a8:dd:be:6f:b4:de:7e:fc:7c:27:19:3b:89:03:
2d:58:87:ed:c4:e7:c6:24:f4:ef:47:e6:a0:24:47:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:29:C9:9D:93:97:B8:AA:85:D6:97:14:50:AF:A3:9F:DA:C1:D8
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xtgpyZ2Tl7iqhdaXFFCvo5_awdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
89.23.93.0-89.23.94.255
178.254.168.0/24
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
26:38:a7:b1:bb:be:ac:47:85:23:d2:8d:b6:2c:bd:f9:67:e4:
5b:b7:38:4b:fb:02:c9:fb:d4:3d:47:d5:e4:5b:82:b7:ee:3a:
e0:0c:b8:4e:a3:26:e5:74:42:a9:5a:67:90:7b:c2:de:a6:e0:
e7:9e:ee:4e:bd:18:cd:57:dd:9d:47:44:b5:4d:5b:c0:d1:14:
6f:f4:1a:5a:cd:5f:9b:b2:43:bd:6a:cb:98:de:69:15:bd:d1:
df:0f:46:ea:b3:3f:ab:de:75:97:0f:25:9b:e5:01:46:50:70:
a6:e6:7f:7e:9f:0e:88:cc:11:16:9a:9e:79:ed:9c:92:cd:2b:
76:5f:11:66:e3:82:da:05:ba:f0:34:a4:7b:9f:ef:e0:1e:d6:
4a:4d:1a:21:1e:7e:f9:5d:95:09:15:8f:5e:ba:ae:67:8d:6d:
c2:d9:9b:7d:d0:a1:f5:96:0d:e2:e8:22:26:7a:c9:25:6e:2b:
67:d3:dc:45:7f:cc:17:72:3c:aa:c6:e0:c1:3e:d4:17:c3:71:
1f:e5:c6:d4:b9:4f:c5:c7:b3:d8:ba:ee:44:8f:75:87:f7:6a:
23:cd:55:cf:11:16:4b:a7:e6:08:75:9c:eb:51:0c:7d:fe:38:
84:0f:62:e3:4b:ed:c9:78:e4:4e:21:a1:ef:4c:33:33:b6:62:
6e:b9:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:55 2026 by rpki-client