Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/XAVwzLpGhQO1y0W_uNJYh7k_CNE.roa
File: XAVwzLpGhQO1y0W_uNJYh7k_CNE.roa (raw, json)
Hash identifier: dv4Yw2hzt00BZAwMKj0v1aIsBWYKV+CRQPxZRLVSEm4=
Subject key identifier: 5C:05:70:CC:BA:46:85:03:B5:CB:45:BF:B8:D2:58:87:B9:3F:08:D1
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0245D94CA7C3735EC1335220A07562F21
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/XAVwzLpGhQO1y0W_uNJYh7k_CNE.roa
Signing time: Fri 21 Aug 2026 12:48:27 +0000
ROA not before: Fri 21 Aug 2026 12:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43991
IP address blocks: 193.135.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:5d:94:ca:7c:37:35:ec:13:35:22:0a:07:56:2f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 21 12:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c0570ccba468503b5cb45bfb8d25887b93f08d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:62:8d:89:79:0f:ac:ab:db:4d:05:36:ad:
83:03:4c:db:1e:c2:b0:a7:49:5d:b7:0c:d5:7b:b5:
cd:bb:1a:d4:92:8a:44:08:b7:e1:c1:0b:2e:fa:ce:
7f:21:97:24:27:97:ae:ff:7e:a9:43:f0:8d:8c:8a:
52:99:f4:24:18:b7:32:4f:c0:d3:b5:a6:29:24:03:
3c:40:ab:a1:73:2b:b9:d3:ad:87:39:ec:d8:b5:95:
9e:d5:49:9f:14:ff:40:b1:db:b1:17:50:12:54:1f:
fd:e7:8c:fe:21:1d:e6:2c:7c:77:53:66:16:3f:98:
b9:a6:94:5a:3e:70:7e:b7:d0:4f:ca:df:bb:65:74:
de:63:60:61:f3:6a:35:b6:0a:7b:5c:67:06:23:e1:
31:1c:bd:41:c5:fe:15:f7:1b:17:f7:21:c6:49:5f:
24:1c:97:19:b6:68:f1:fa:15:19:a1:35:8a:5b:fb:
ea:0a:4c:6a:25:fe:35:60:21:5a:b4:14:82:db:01:
1a:e3:2f:92:ff:ba:81:32:96:f9:28:fd:be:8c:73:
b4:97:67:5b:f4:8f:8d:15:2e:5b:02:d3:be:50:f1:
c8:9d:21:de:50:28:43:6c:f0:74:63:33:ef:72:40:
18:7b:62:17:ec:33:06:9c:b5:40:01:ad:ce:51:36:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:70:CC:BA:46:85:03:B5:CB:45:BF:B8:D2:58:87:B9:3F:08:D1
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/XAVwzLpGhQO1y0W_uNJYh7k_CNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.135.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6d:39:f3:e5:7f:d0:92:71:4d:25:fc:2f:1c:8c:b4:3f:c6:
01:2c:b4:84:78:35:ac:2d:cd:50:47:94:e7:16:87:62:48:22:
ce:c4:93:13:a6:f2:08:68:5d:6a:79:e6:aa:84:3e:15:34:c2:
b8:d9:cd:89:f4:6a:96:3b:20:f9:24:a4:5b:9a:ce:e3:36:27:
b5:24:36:b8:db:e7:62:db:d0:ef:75:73:4b:aa:be:5c:60:09:
9e:ac:51:0a:6b:ee:07:28:a3:14:2a:29:53:f5:58:b3:2d:a3:
4b:c6:1d:ca:70:dd:b8:31:d7:c3:61:62:ae:95:cd:09:a6:2c:
9e:38:02:9d:93:57:5e:dd:66:89:55:5e:b1:45:ef:df:85:9d:
46:28:7a:ab:24:c0:0d:05:9e:9f:b4:b6:bc:24:f9:12:72:e1:
5a:7b:97:ee:5e:2d:41:2f:de:2a:23:92:29:2e:f5:d4:f4:23:
b0:2b:3c:9e:20:71:de:84:76:9d:55:c5:51:be:72:52:4c:3d:
f4:21:16:d5:34:ba:0b:f7:ab:ce:c7:10:23:0d:0e:1f:4b:7e:
8d:7c:41:7b:53:a6:3f:04:f0:52:a8:97:48:73:43:9d:7a:dc:
11:78:95:44:51:a2:67:88:23:87:1c:f3:5b:c6:d3:d5:c2:9a:
d3:2e:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:37 2026 by rpki-client