Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/XP6_BAcYWa5WMtXOqsr8Nd4YOXQ.roa
File: XP6_BAcYWa5WMtXOqsr8Nd4YOXQ.roa (raw, json)
Hash identifier: koRMWG7PfVh3x7ZWhsKfazhU/Y927qVy5yPx2a20iGM=
Subject key identifier: 5C:FE:BF:04:07:18:59:AE:56:32:D5:CE:AA:CA:FC:35:DE:18:39:74
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 01A042F46B3051F2C1996AFCB8F397E7378E
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/XP6_BAcYWa5WMtXOqsr8Nd4YOXQ.roa
Signing time: Thu 27 Aug 2026 11:21:49 +0000
ROA not before: Thu 27 Aug 2026 11:21:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210465
IP address blocks: 193.163.36.0/22 maxlen: 22
193.163.36.0/23 maxlen: 23
193.163.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:f4:6b:30:51:f2:c1:99:6a:fc:b8:f3:97:e7:37:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Aug 27 11:21:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cfebf04071859ae5632d5ceaacafc35de183974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:35:f1:cc:4d:6e:35:dc:7f:89:16:14:d6:45:
7d:fe:da:30:54:27:37:05:64:30:3b:12:f3:ef:95:
a3:3f:51:c4:08:29:da:18:8e:07:71:b7:e5:ef:b7:
7e:be:af:66:66:0b:cb:73:4a:bb:78:3b:5c:39:b4:
f5:43:57:93:d2:d0:c4:fa:c8:93:e6:31:c1:e6:57:
19:88:76:cc:52:05:c2:d9:f1:0b:2c:d0:a3:c6:39:
84:47:33:3a:10:ab:cc:a3:12:9e:9c:48:ff:1e:16:
a2:42:2b:78:23:58:83:d4:ee:ec:b1:80:27:5d:25:
0e:5a:07:86:43:47:33:8d:c6:d2:72:0e:d0:19:50:
b5:51:aa:92:a2:6a:a0:10:c4:3a:75:1c:b9:5f:89:
d7:bc:c8:00:7c:84:83:6e:7c:d8:cf:e2:bb:c1:30:
d2:11:02:89:11:e1:ce:59:a1:8d:1c:b5:52:f5:1b:
8b:9e:43:94:ed:98:74:47:4c:84:97:ea:75:38:c4:
1f:1b:b1:57:f7:dc:62:39:e0:46:ba:30:a4:1a:2f:
17:61:4e:13:3f:ba:a7:2b:1c:5c:f1:b1:ea:06:d8:
88:95:68:36:50:7f:b7:89:07:8d:ad:b2:a8:3a:34:
10:73:52:74:3c:31:87:aa:40:cd:39:0f:e5:1e:d7:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:BF:04:07:18:59:AE:56:32:D5:CE:AA:CA:FC:35:DE:18:39:74
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/XP6_BAcYWa5WMtXOqsr8Nd4YOXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
93:77:66:8b:da:29:6f:79:a9:3a:24:5d:0c:b0:23:24:6d:85:
bf:63:63:91:29:f9:98:bd:39:70:d3:6a:15:26:96:24:ce:7f:
58:08:cb:a1:c2:bd:da:01:15:01:43:03:07:b7:4c:97:4a:e8:
16:0f:c4:51:3a:06:73:44:5d:34:57:90:0f:61:c4:54:4a:fc:
71:bf:23:45:e5:75:88:e2:ad:eb:f4:cb:1f:73:ee:87:a9:dc:
bd:1b:32:78:98:53:8e:bf:0e:ba:20:cb:d0:71:15:d2:eb:03:
e1:7d:01:49:98:38:2c:34:23:54:a7:d8:3b:32:ae:56:64:b4:
47:10:f5:0f:83:06:f2:fa:59:f3:39:b8:7f:bc:62:d3:fa:ce:
42:a3:3f:40:ce:8c:21:e0:74:b1:da:15:06:1d:3d:07:cd:85:
cc:e5:e1:90:e5:ba:90:c8:60:6d:89:69:ed:7a:bd:59:e1:ec:
a7:be:60:e1:a4:55:87:04:fe:ef:8b:64:09:c5:d9:59:83:f7:
a2:4b:92:22:ba:a6:56:94:47:8a:ee:75:a7:65:79:0f:20:08:
e7:db:0b:63:2e:eb:57:7a:3b:1f:eb:34:d5:9b:33:5f:c1:94:
3d:7f:a0:2b:41:18:84:25:e9:e1:57:8d:fc:d7:e5:24:03:e2:
3e:2c:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:20 2026 by rpki-client