Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XeQf3Y18ES0LW67xUDNrUexlgro.roa
File: XeQf3Y18ES0LW67xUDNrUexlgro.roa (raw, json)
Hash identifier: VNf8Eh2bdWq9ZoljfO20NisJveQIl1ZsjoNbUQ0HXCA=
Subject key identifier: 5D:E4:1F:DD:8D:7C:11:2D:0B:5B:AE:F1:50:33:6B:51:EC:65:82:BA
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2369026B52149F89C8CBD3774D2C6E25
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XeQf3Y18ES0LW67xUDNrUexlgro.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48318
IP address blocks: 194.209.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:6b:52:14:9f:89:c8:cb:d3:77:4d:2c:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5de41fdd8d7c112d0b5baef150336b51ec6582ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:e7:59:ae:7d:91:84:18:b0:bb:a2:56:9f:
5c:18:d5:e8:07:53:17:19:cc:23:d3:51:8a:53:09:
fa:60:03:8c:63:99:1c:cb:93:92:07:5a:46:6b:9a:
04:ee:c9:2a:04:c8:bc:55:5e:44:fd:3c:07:b0:92:
19:bf:d0:ec:54:b8:24:57:bd:a5:19:1b:8c:98:72:
78:0f:73:45:c4:b9:d8:50:d4:a3:64:58:f5:dc:43:
93:be:58:a2:be:39:f4:99:14:15:e0:21:f0:d8:49:
f4:74:4f:00:d9:87:b2:85:6c:f5:31:f8:93:63:81:
af:ad:f9:f3:db:7e:a4:d2:5c:4b:22:c5:6e:f3:95:
10:bb:a8:2f:f3:99:60:e0:e0:46:c1:07:13:29:9c:
ab:3a:bd:08:1d:43:56:fc:32:f6:a8:13:ed:2b:5d:
c8:97:86:c7:84:f3:62:6b:3f:90:53:95:ef:36:11:
0e:48:56:5e:b9:53:13:f7:d7:c4:fd:45:41:1e:a6:
8e:03:af:bf:c7:eb:13:b9:8e:e4:bd:89:83:0f:84:
6e:57:b8:f7:ea:50:ed:82:9c:d0:c8:ec:8b:9f:a9:
e4:c8:fb:72:66:54:75:f9:a9:a4:38:f7:bd:31:bd:
96:69:ef:f3:49:dc:73:7b:eb:53:27:3a:78:37:f0:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:1F:DD:8D:7C:11:2D:0B:5B:AE:F1:50:33:6B:51:EC:65:82:BA
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XeQf3Y18ES0LW67xUDNrUexlgro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:66:25:ce:a0:a1:db:1f:13:b1:68:b9:b2:23:51:f1:a2:04:
a7:9f:c2:de:52:58:1b:53:6d:9c:0b:2c:73:43:38:f0:ac:4c:
e3:ba:0a:58:47:fa:74:3a:7d:fb:9c:6f:b1:eb:73:95:77:45:
85:3b:b3:d7:3b:56:00:10:8a:b6:eb:ff:5b:cf:09:bd:e1:81:
7c:63:d2:a7:04:b8:b9:3f:f1:2d:5e:7d:78:25:4b:d5:1a:a4:
db:6e:d4:e1:be:92:1e:1c:d6:9f:d9:95:bc:01:fe:79:b8:e5:
49:a5:f3:c0:85:13:22:7f:4c:78:15:d1:be:23:12:f3:18:b1:
2e:22:23:b8:2e:40:b3:5e:03:f1:17:9f:6c:43:49:8f:b1:cf:
ab:a7:bc:11:13:b6:ba:1d:a8:1b:f1:2c:fb:e5:25:0e:5d:bb:
ca:38:0a:a1:00:04:26:cf:8d:be:1e:c8:3f:a0:62:52:9b:3c:
f0:3f:d2:a2:17:82:8a:61:05:22:03:4d:26:55:8c:9e:d9:ed:
0c:f5:d9:40:4b:33:59:33:73:09:34:77:de:2f:c4:4d:f4:fc:
59:16:7d:8f:1a:4b:b7:ce:22:43:9c:50:6a:97:3b:cf:dd:b5:
ea:ab:d3:5c:89:e1:d7:44:56:d1:54:3b:da:62:03:e6:35:46:
c4:ea:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:47 2026 by rpki-client