Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XPBg3V_nsxnBgq4Lu3_cZtlX2Ys.roa
File: XPBg3V_nsxnBgq4Lu3_cZtlX2Ys.roa (raw, json)
Hash identifier: 137tV+se8pjby2m7slSC0GxTIgMxS+qkx12c71hhEcA=
Subject key identifier: 5C:F0:60:DD:5F:E7:B3:19:C1:82:AE:0B:BB:7F:DC:66:D9:57:D9:8B
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694562605B67D71211A7B129587E16
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XPBg3V_nsxnBgq4Lu3_cZtlX2Ys.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54903
IP address blocks: 93.120.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:45:62:60:5b:67:d7:12:11:a7:b1:29:58:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf060dd5fe7b319c182ae0bbb7fdc66d957d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:06:ec:5b:08:55:28:40:fd:3b:6f:30:b9:
3e:5b:87:e5:18:1f:c7:d1:7a:a6:45:5a:95:b2:79:
2e:18:e0:33:22:bd:27:7b:4d:ac:c1:36:b3:81:dc:
4e:13:b4:13:9c:c1:8d:1a:e9:26:da:5e:61:ac:00:
fd:79:a2:fe:05:13:e7:98:c5:83:66:f0:c5:18:a1:
19:22:eb:a8:50:67:61:f0:19:7b:52:ee:20:06:49:
b2:7b:46:2b:55:08:8e:2d:85:af:0a:aa:28:09:ec:
ce:a1:f3:20:e1:ef:40:8d:1b:a2:1b:07:4b:a3:70:
73:ee:9a:12:88:bb:bf:02:b6:c6:5a:9d:b9:4b:0d:
0f:f5:06:53:a2:c5:5e:5f:9b:55:98:ae:70:ae:3e:
62:25:3d:2c:21:31:f8:6d:52:ff:b7:8b:65:43:2d:
ab:ae:99:ba:c4:ff:4b:d4:56:18:ee:cc:ac:72:44:
13:81:71:1e:d3:c0:34:8b:84:9c:95:f3:6c:db:95:
7a:7e:ac:3c:c4:6e:05:1c:29:b0:24:ec:3a:56:9e:
33:df:fd:a7:16:10:7f:50:4d:bd:55:52:19:e4:1e:
6e:1e:85:cc:94:f9:67:90:1b:ba:91:3e:53:23:f2:
7a:3f:5d:06:8f:31:7f:51:81:1b:3f:a6:6d:d1:62:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:60:DD:5F:E7:B3:19:C1:82:AE:0B:BB:7F:DC:66:D9:57:D9:8B
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/XPBg3V_nsxnBgq4Lu3_cZtlX2Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.0.0/21
Signature Algorithm: sha256WithRSAEncryption
85:df:f5:60:0f:e9:c9:04:d9:59:07:d1:ce:94:98:e8:5a:8f:
5d:0d:76:4e:ab:ce:c7:e2:f5:02:0a:8b:30:9f:ba:a7:71:97:
55:fe:e5:ff:93:4a:f7:9f:59:e4:c0:c7:54:50:0b:71:40:b9:
65:12:4c:cc:03:cf:74:45:5e:2f:bd:fb:08:f3:4b:d1:83:86:
a0:72:7a:15:e3:51:76:66:fb:4a:5b:c5:88:5d:dc:4a:7e:f4:
c0:23:86:dc:7c:92:47:8b:04:20:0e:43:f9:d6:26:97:4e:a3:
ed:4f:bb:37:3e:ca:65:b5:29:84:53:ad:98:53:8a:1e:70:83:
24:89:30:72:78:c0:e7:7d:d9:47:fc:73:c3:0b:81:56:0c:b8:
ae:6f:16:0a:1c:dd:10:33:43:c4:15:d8:1a:a7:3b:95:0b:b9:
5c:b6:c8:b7:c6:a7:d1:89:d6:81:51:57:31:ff:1a:57:92:08:
11:36:9e:23:e3:0f:59:0e:cf:e4:35:1b:12:01:2d:65:9d:5a:
53:d6:5b:58:2a:a2:35:fb:32:cb:83:e9:07:69:c9:01:3a:f1:
79:1f:e5:8c:6b:d2:8e:ca:12:37:00:74:c2:86:89:31:1d:b5:
cb:2c:a3:f6:34:63:95:94:8d:23:18:73:33:b7:03:06:2b:c4:
c0:ce:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:06 2026 by rpki-client