Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XjWg2-gAUlZVAD3T8hgJCIHINH8.roa
File: XjWg2-gAUlZVAD3T8hgJCIHINH8.roa (raw, json)
Hash identifier: jhv9KOO04e5UnRCx2q5rUgDe9gLEMofyyXeTZuF/6kA=
Subject key identifier: 5E:35:A0:DB:E8:00:52:56:55:00:3D:D3:F2:18:09:08:81:C8:34:7F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019FFFEF4AF2ACBFE17D25DA0A0ABC93648D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XjWg2-gAUlZVAD3T8hgJCIHINH8.roa
Signing time: Fri 14 Aug 2026 11:01:40 +0000
ROA not before: Fri 14 Aug 2026 11:01:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 93.88.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:ef:4a:f2:ac:bf:e1:7d:25:da:0a:0a:bc:93:64:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 14 11:01:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e35a0dbe800525655003dd3f218090881c8347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:f4:7a:9e:4f:28:18:a6:a1:23:2b:97:17:
83:1c:23:79:3c:47:ca:7d:ce:05:63:3d:8e:b4:ae:
e5:c9:47:d8:54:25:d0:76:5f:13:d1:1a:0a:3c:14:
79:07:7b:ae:b9:de:0b:a2:44:cf:75:7a:19:47:01:
de:4f:cf:23:f5:2d:3e:f2:e2:fb:a8:8f:4e:09:59:
7a:5e:eb:d2:85:d9:75:ee:fc:9b:17:0e:a1:07:3e:
19:e0:f5:b1:fe:b5:bd:8c:6c:99:26:38:a5:78:3d:
6c:45:29:08:d3:49:fd:68:8e:74:20:f7:23:fc:d1:
6f:63:97:93:19:50:14:22:4c:e4:20:87:21:3e:a5:
0a:c1:9d:46:70:3c:c5:13:e9:58:16:08:7b:27:1b:
f5:21:63:30:fb:b5:6f:13:69:9d:60:59:4c:94:88:
e2:f9:2c:91:af:7d:80:d0:62:d4:77:7e:e1:c7:9a:
4f:c7:b7:78:2d:d6:ab:a7:ce:ac:99:c4:f2:ba:e2:
ea:45:f5:3c:80:b9:c5:39:db:24:62:02:30:ab:69:
18:9c:94:0d:6b:9b:b6:77:41:68:65:d4:11:05:9c:
36:33:e8:28:ed:64:ae:82:6f:5a:5a:f9:ea:e8:1a:
51:df:56:fc:47:c8:2c:7d:8d:e1:41:2a:91:f8:0e:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:A0:DB:E8:00:52:56:55:00:3D:D3:F2:18:09:08:81:C8:34:7F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XjWg2-gAUlZVAD3T8hgJCIHINH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.200.0/24
Signature Algorithm: sha256WithRSAEncryption
50:19:c0:72:90:ba:92:ef:c3:4a:69:2a:bf:8c:5c:7d:e5:1c:
19:90:85:2a:7c:a4:97:99:8e:02:12:98:ca:56:35:b9:eb:74:
5b:98:4a:04:b7:68:35:b7:3e:a0:ba:7b:e0:db:8c:45:f8:72:
d9:2d:4a:88:21:aa:ad:1d:ea:97:13:34:4f:cb:39:e9:dd:02:
4c:88:85:0c:3b:7d:e5:8b:7e:80:aa:27:25:56:15:95:36:a0:
d3:4f:5d:78:a3:d2:b1:d4:65:b7:f8:69:6e:f6:f1:a0:96:09:
3b:cd:7c:bd:7b:3f:3b:82:51:95:10:77:d6:b1:6f:c3:9e:a5:
ca:89:68:21:10:0f:25:52:20:0d:f1:2e:1f:b5:5d:ee:00:a3:
50:92:8e:b4:35:cf:32:72:e4:7e:db:8c:25:3d:9f:6d:14:f7:
46:df:ad:7c:58:95:87:e8:a5:7f:1f:ba:dd:c1:1e:c3:be:fe:
89:4d:be:81:d3:af:f3:28:98:f6:07:a4:3a:ae:ff:7e:dc:f5:
f8:38:3f:af:7b:11:2f:5e:85:9c:d2:84:7b:c6:e0:86:45:e3:
68:f9:ca:63:e9:65:00:7d:af:a6:37:8d:bf:21:d8:e6:5d:76:
3b:ca:a0:4f:57:9d:ca:3b:25:ad:a0:fd:8d:bf:bb:43:da:39:
1e:c9:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 16:18:32 2026 by rpki-client