Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Xq4pCn1M3rQpm3U_hNpyAcxLHdI.roa
File: Xq4pCn1M3rQpm3U_hNpyAcxLHdI.roa (raw, json)
Hash identifier: UDX62df/lrFyBCMX1W4/eumLHH0Wb07oZiJJiyWLNGg=
Subject key identifier: 5E:AE:29:0A:7D:4C:DE:B4:29:9B:75:3F:84:DA:72:01:CC:4B:1D:D2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EFEF346BD1695D0547D720955B9400457
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Xq4pCn1M3rQpm3U_hNpyAcxLHdI.roa
Signing time: Thu 25 Jun 2026 13:23:36 +0000
ROA not before: Thu 25 Jun 2026 13:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 195.21.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f3:46:bd:16:95:d0:54:7d:72:09:55:b9:40:04:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 25 13:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eae290a7d4cdeb4299b753f84da7201cc4b1dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:38:28:9c:f6:84:fb:e6:8a:99:e3:a5:1f:
8a:1d:20:dd:6b:b2:53:8f:a4:e6:93:07:13:2c:f0:
d7:b6:26:65:f5:dd:2a:57:b5:6c:5e:19:da:3c:85:
8c:0f:a8:bf:73:0d:a3:54:9a:6b:3e:56:41:24:2f:
14:c7:ce:bc:1d:45:a1:fa:7c:83:90:17:49:18:15:
a6:1b:81:9b:9f:20:6a:fa:f8:e9:f6:7b:0d:16:b3:
74:2a:1c:44:63:54:d6:58:4f:1f:c8:18:06:c7:26:
d2:79:ec:c4:5d:ab:98:75:81:e5:24:d9:19:48:74:
cf:68:f0:f2:f8:f3:73:9e:c3:bf:7b:4f:10:01:fc:
0a:21:d2:0b:66:30:63:4d:59:13:6b:11:15:ef:ed:
57:f7:b7:a1:b7:b9:93:d7:01:0b:d0:6f:df:4a:22:
a4:06:a0:c1:75:a4:19:5c:d4:01:b0:01:b6:02:92:
90:98:b2:7d:1b:4b:6c:ed:79:aa:fe:91:4e:85:76:
b5:7b:d1:14:5d:ce:4d:f6:3a:66:2c:3a:31:5b:07:
82:94:ff:f5:10:09:b0:21:e7:44:9a:4a:a9:98:97:
24:27:bd:bd:3c:13:d8:0e:c3:09:a9:cc:c4:cb:f7:
51:eb:f6:d6:35:bf:72:dd:b1:8c:4d:af:5f:1f:d4:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AE:29:0A:7D:4C:DE:B4:29:9B:75:3F:84:DA:72:01:CC:4B:1D:D2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Xq4pCn1M3rQpm3U_hNpyAcxLHdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.149.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e3:48:cc:39:c3:f0:57:f1:83:f8:e2:e9:9b:91:55:39:83:
7b:34:2b:75:b9:31:d3:92:f7:5d:df:d2:99:79:33:4c:8f:12:
85:e7:e8:b4:60:c5:b7:a8:15:7b:4a:86:0b:a0:a1:07:fc:c6:
d8:b1:ab:44:26:bf:02:30:27:00:33:fc:87:59:be:c2:bb:4d:
90:7b:40:c3:0f:b6:f4:fa:2a:60:7e:46:19:1a:c5:c9:9d:53:
82:47:1f:fd:c8:cc:05:2c:f4:80:7f:8d:4d:85:3c:07:47:85:
fb:38:27:67:6c:1a:50:0a:48:cc:a9:71:58:c7:f8:30:10:93:
78:c6:10:ac:f1:23:24:b6:2a:b2:8e:39:47:63:c9:4d:90:6c:
8b:b3:1c:26:97:28:f7:ba:79:06:56:e2:75:4a:16:92:1a:1d:
3c:1b:21:16:ca:5b:fa:f8:84:f7:30:48:b2:2d:2c:30:27:7f:
7f:3a:5a:97:65:2e:fb:aa:ef:5b:bd:89:ae:d6:f8:3f:d0:36:
39:81:ec:36:c0:09:88:e7:2b:57:6c:78:c4:9f:68:26:2e:fe:
75:5b:82:89:9f:60:0b:70:2c:8c:cb:15:c3:59:44:57:51:83:
35:b4:1d:af:3c:91:47:30:89:3b:fd:38:60:24:07:29:07:d9:
f1:a8:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:27:54 2026 by rpki-client