Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/XbE0JN5jq94dXWDTKIUYec-r3Lc.roa
File: XbE0JN5jq94dXWDTKIUYec-r3Lc.roa (raw, json)
Hash identifier: JOZZ+QdzMx2pEFrNvMLDdQZiQJU9htYpi2wTwwjdH54=
Subject key identifier: 5D:B1:34:24:DE:63:AB:DE:1D:5D:60:D3:28:85:18:79:CF:AB:DC:B7
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 01A04758AF1EC5375535D2EA9034D32810DD
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/XbE0JN5jq94dXWDTKIUYec-r3Lc.roa
Signing time: Fri 28 Aug 2026 07:49:49 +0000
ROA not before: Fri 28 Aug 2026 07:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43298
IP address blocks: 193.176.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:58:af:1e:c5:37:55:35:d2:ea:90:34:d3:28:10:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Aug 28 07:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5db13424de63abde1d5d60d328851879cfabdcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:b5:03:9e:34:77:c9:5f:0c:31:ff:82:c9:
58:6b:0b:4d:35:d9:4d:52:cf:61:ac:3a:0e:9f:2f:
dd:51:ae:49:53:e0:04:56:ab:70:e9:45:2a:20:b4:
c8:3c:dd:33:66:79:3c:43:07:63:8c:9c:5d:1f:eb:
43:7c:90:3c:78:76:2d:b4:c0:97:b4:2f:3b:9a:2d:
f4:52:da:77:11:7f:ef:8c:32:ed:55:7d:08:74:94:
07:21:f7:fe:c8:3b:63:6b:c8:93:fb:58:04:0c:a3:
eb:5b:15:2b:14:64:de:67:e3:40:08:16:7d:d9:9d:
40:ce:f2:94:7f:60:df:8f:12:7a:ed:87:ad:19:3e:
a3:bf:03:03:f6:b7:bf:29:34:5b:4e:5b:08:5e:e3:
f2:2c:db:87:93:e5:4a:b9:02:f5:80:d1:53:f4:12:
78:96:1a:c7:7f:84:cb:cb:7d:c3:a8:28:dc:46:d6:
98:bc:f4:93:4c:b6:a5:af:a5:e7:ab:85:ca:17:96:
bd:89:41:c8:fd:04:87:d1:2a:ab:c3:da:65:7a:a6:
2c:cd:e0:3d:43:e3:02:33:68:68:07:d3:93:97:94:
8c:e6:42:50:52:d4:4c:e0:34:99:b8:a4:93:f8:23:
91:15:b1:63:d7:2f:63:2b:90:3b:20:0a:f7:f4:27:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:34:24:DE:63:AB:DE:1D:5D:60:D3:28:85:18:79:CF:AB:DC:B7
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/XbE0JN5jq94dXWDTKIUYec-r3Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.95.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a4:fc:f7:db:3f:18:30:89:ea:34:cc:d5:42:b5:b3:9a:6d:
99:8b:a9:37:18:b4:40:36:50:3b:ac:76:2b:6f:c6:b0:3c:2e:
7b:0e:33:f1:32:af:1d:ec:34:94:53:a5:7c:53:70:c9:ab:66:
c9:c5:ec:dd:5f:0e:e9:f3:db:d1:5f:1d:37:64:3a:43:4f:6d:
c4:82:4f:0b:18:15:f7:a6:78:75:2e:6f:95:f1:9d:f0:9a:03:
42:9f:e1:3a:a4:33:30:1a:0a:b9:69:59:96:71:ae:f0:bf:c5:
f9:d7:23:11:b4:1b:ed:e1:9a:4c:f4:93:ca:b6:5d:60:21:d9:
20:64:b0:3c:06:7b:74:ad:7b:e5:dc:dc:28:9a:1f:ce:c7:55:
6a:34:32:10:d3:b5:bf:a0:7e:db:f2:91:85:57:02:64:d6:d1:
4b:e3:02:3a:85:17:9c:ee:f3:94:9d:9b:e8:1c:34:27:07:a1:
ec:93:f0:ed:b1:02:04:ee:7a:93:87:21:b8:28:eb:43:0d:de:
7a:ab:46:cc:2e:ec:5c:8e:79:ba:5b:e4:c2:7c:3d:74:ca:26:
05:71:d3:ba:a2:dd:37:ac:18:b0:22:1d:cb:6c:37:24:da:62:
a1:de:d0:c8:7e:55:1c:f7:22:29:62:55:ea:de:e7:90:75:3c:
24:5f:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:40:25 2026 by rpki-client