Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa
File: xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa (raw, json)
Hash identifier: GdkhncA6Cz+FJ2IUdWjBXkrGRY/WRmJ/1R0l4xrrdNo=
Subject key identifier: C6:92:67:5A:21:44:25:B0:B8:25:41:52:10:58:B0:3C:06:2F:97:00
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019E7029C86C53CC8397CD22640CE7297C6A
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa
Signing time: Thu 28 May 2026 19:57:26 +0000
ROA not before: Thu 28 May 2026 19:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 185.10.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:29:c8:6c:53:cc:83:97:cd:22:64:0c:e7:29:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: May 28 19:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c692675a214425b0b82541521058b03c062f9700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:54:94:76:c5:d7:a0:1c:00:7d:6d:d7:6d:
c1:5f:1c:ae:2b:32:fc:e4:7c:91:03:42:c6:d4:ac:
5f:a1:e0:21:01:e7:4a:cb:a6:28:91:2f:7d:cf:c7:
38:79:a2:b0:e5:f0:19:25:e6:50:ed:67:f8:65:17:
4c:97:57:87:8a:b1:ce:87:15:95:8f:b7:34:4d:52:
7c:35:96:45:18:39:64:82:4d:58:28:93:86:02:15:
cf:f3:5d:69:eb:e0:01:ee:72:db:89:28:25:c4:d5:
99:51:90:30:32:8b:50:e0:bc:0d:77:76:e7:63:6c:
a2:e5:d2:ca:eb:52:27:24:01:8f:70:b6:a9:d4:4b:
78:dd:fd:57:51:33:6e:d5:01:64:a3:1b:95:3b:e4:
71:7e:f6:e4:40:ee:11:2d:ba:b4:3e:79:ff:8b:4e:
57:03:8a:7a:27:d8:48:9d:cf:dd:c9:47:e4:c2:2e:
f1:09:c1:43:20:7c:c7:d4:9c:97:59:2c:e3:76:86:
a5:8d:6b:c1:3c:93:f4:21:bc:5f:d8:c6:c0:3c:61:
6b:2b:34:e7:2b:92:61:32:cd:0f:07:95:a7:77:da:
23:c7:23:9b:82:ed:0a:85:18:05:ea:96:48:2f:1a:
8d:9c:20:7a:03:13:07:5c:c4:82:09:cc:4a:4b:ef:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:67:5A:21:44:25:B0:B8:25:41:52:10:58:B0:3C:06:2F:97:00
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/xpJnWiFEJbC4JUFSEFiwPAYvlwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:57:e2:7f:5c:9c:68:25:8f:fc:17:ee:07:e9:f8:9a:cc:28:
a1:90:b8:b1:16:2b:5b:af:3b:39:15:f8:fb:61:c9:dc:86:3e:
84:2e:f7:96:5c:db:d6:60:94:38:b1:29:7d:69:83:f7:e7:0e:
50:16:5e:db:3d:75:4d:ca:7d:df:8f:3b:cb:46:ef:27:13:a0:
21:0f:c5:6d:32:74:f5:3f:9f:48:a9:69:92:22:e6:82:f0:fa:
c5:41:d8:9d:f5:f1:42:60:91:8c:6c:87:e6:bd:36:86:fe:a1:
89:49:32:7a:64:11:10:3f:55:c1:ef:20:b2:ce:62:bd:80:a4:
9e:4f:e1:8b:88:55:de:df:f9:23:43:58:53:bb:7d:5d:8f:ae:
60:5c:f5:c3:19:53:1d:10:9b:88:7f:07:c4:9c:a9:2d:71:5a:
e3:7b:6b:da:61:36:4a:51:eb:e0:58:17:67:88:05:83:81:1c:
77:98:17:ca:cc:7e:32:81:8b:a0:23:8c:6d:4b:cb:4e:d1:6a:
50:f6:48:d4:ea:90:b0:8e:8a:b3:16:e0:2a:d6:1f:1c:a0:00:
71:f2:ce:e5:ad:11:dd:ac:9f:94:ad:9d:91:0c:1a:7f:00:f2:
2a:2c:1c:28:82:ac:42:1b:e7:61:bf:ff:01:da:23:95:38:df:
e2:42:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:54 2026 by rpki-client