Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa
File: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (raw, json)
Hash identifier: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=
Subject key identifier: C4:14:88:F2:E9:61:C7:33:DA:0F:5C:17:CC:89:56:1E:47:EB:31:91
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019E20901FD03D95973B13D0A126127CF529
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa
Signing time: Wed 13 May 2026 08:59:36 +0000
ROA not before: Wed 13 May 2026 08:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203330
IP address blocks: 194.49.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:90:1f:d0:3d:95:97:3b:13:d0:a1:26:12:7c:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: May 13 08:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c41488f2e961c733da0f5c17cc89561e47eb3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:70:f2:d0:db:a1:e6:31:16:d8:f7:fd:17:
88:1c:ca:1f:e1:f9:03:72:df:8e:58:06:77:14:06:
af:e9:dd:a0:32:1f:13:b6:58:a8:be:6c:bc:98:70:
39:66:61:0c:0a:fe:ec:89:24:11:ba:89:04:9a:8d:
43:bb:5f:d8:20:dd:a7:0c:8a:6f:5d:c8:3d:33:53:
00:28:a7:0b:ec:e7:fb:ea:fa:51:28:3c:b4:16:82:
84:d4:57:b3:d6:dc:27:cd:2c:2d:ed:bb:35:25:d0:
75:55:5f:d8:73:1c:93:f2:88:fe:60:2b:c6:4c:60:
72:8e:9f:30:cc:55:3a:68:2d:2a:b1:7d:d0:95:21:
0d:04:31:9e:8d:66:79:0c:bb:34:8d:57:94:12:c5:
64:93:7d:03:ac:63:3d:4b:eb:8d:50:a4:d0:0c:c2:
d2:a2:28:ad:4b:85:64:45:4e:61:46:51:c4:47:a4:
a6:e5:58:c4:13:7d:d2:11:73:4d:0e:64:8d:b8:c6:
51:bf:cd:5b:7d:95:b7:53:97:59:28:d0:e9:6e:7e:
60:ad:27:e6:3c:02:24:13:e9:80:12:a3:70:f8:96:
da:9d:7a:a5:44:b3:cf:8e:27:79:da:36:66:14:9e:
74:d7:c4:95:a1:50:c5:4a:13:bc:2c:5d:ea:38:8d:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:88:F2:E9:61:C7:33:DA:0F:5C:17:CC:89:56:1E:47:EB:31:91
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:af:b3:cf:3d:38:c5:3f:66:4a:16:2b:63:3a:f2:67:fc:0c:
54:70:ea:1d:ac:08:bd:ba:3e:63:45:35:97:f6:44:12:46:df:
2c:52:bc:b9:1b:e1:05:fb:2f:56:66:b4:f5:3e:00:e4:51:a7:
92:1a:04:ad:fe:2b:3e:c4:ae:38:6f:a7:43:93:97:44:a7:6c:
ae:96:ec:7c:e4:2b:f0:bf:8f:4f:6f:a0:8e:ac:6e:87:0c:06:
71:5d:4e:cc:2d:56:ed:8a:bc:d1:fb:ef:48:12:81:93:1e:5e:
7c:5e:24:c0:42:61:0f:bc:29:3f:ee:29:89:4e:bb:d6:0e:bd:
10:12:82:43:fb:c8:b9:54:53:09:68:bc:1f:66:b6:48:a9:da:
7a:b4:0a:40:cc:f8:43:28:52:55:a5:59:ba:37:cf:1c:17:49:
fd:b3:4c:24:df:e0:5f:18:68:af:2d:e8:5a:1d:03:ce:c9:3f:
41:ec:2a:d3:73:de:be:22:23:2f:90:90:18:6f:a3:bc:9e:b2:
53:3e:36:2a:90:34:d9:08:ef:bd:5c:f5:57:b6:67:a2:d8:68:
7d:74:bc:d0:a5:71:25:1e:f3:0f:8e:46:64:a4:ac:5b:b1:b2:
a2:33:45:fb:f4:03:0e:c1:d9:e3:25:a1:71:93:e1:8a:cc:53:
f0:c0:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:21:00 2026 by rpki-client