Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/XuYhwk-vZ6eHT9NMXZQLHvYX3mk.roa
File: XuYhwk-vZ6eHT9NMXZQLHvYX3mk.roa (raw, json)
Hash identifier: BjmLFR3czcNpgH0BRh9yLVvvlaso2JNdlmTSCadoaH8=
Subject key identifier: 5E:E6:21:C2:4F:AF:67:A7:87:4F:D3:4C:5D:94:0B:1E:F6:17:DE:69
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019E878BDFF2B9864E83B82C25E7358281E2
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/XuYhwk-vZ6eHT9NMXZQLHvYX3mk.roa
Signing time: Tue 02 Jun 2026 08:55:51 +0000
ROA not before: Tue 02 Jun 2026 08:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134854
IP address blocks: 149.226.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:8b:df:f2:b9:86:4e:83:b8:2c:25:e7:35:82:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jun 2 08:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ee621c24faf67a7874fd34c5d940b1ef617de69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:74:c6:37:c5:04:f8:5f:45:d0:6d:c9:f2:
fb:2e:e3:8a:4d:f7:68:c5:ac:86:2b:09:f4:68:5a:
aa:a7:55:66:57:ed:00:f0:0d:a9:7c:67:6f:99:7e:
4e:fc:4b:e2:e0:de:13:8c:ae:c9:30:4a:72:bc:01:
57:1c:ab:b3:d9:a7:a7:ec:ce:6e:27:ec:66:d8:e4:
0c:e9:04:84:0a:da:b9:1e:2e:73:43:e9:da:08:1d:
a0:e5:32:98:95:fd:08:46:ff:2b:c5:3a:61:c0:40:
13:94:4b:eb:f4:20:88:20:bd:d2:56:ba:1e:ca:18:
18:d7:58:9d:c6:ef:a2:76:b5:bb:7f:4a:52:39:d7:
d5:38:ef:46:84:aa:95:63:e7:f2:f8:87:53:b0:81:
b5:3b:7d:07:09:b6:c8:fa:0a:f1:1a:91:fd:1e:47:
71:26:f6:e9:95:54:de:38:9b:58:4a:01:48:ab:a7:
37:34:0c:09:11:9c:b6:ad:e1:6b:b7:70:e4:9c:75:
e4:49:c4:cd:2b:ec:de:9b:8a:b0:73:d2:41:30:b8:
d6:11:24:66:25:2e:a9:25:e2:29:c3:db:e9:03:c6:
57:c3:a9:36:4c:f8:a5:2b:10:16:ec:6c:a9:3c:f1:
0d:62:b4:c9:88:85:26:74:40:84:ac:39:50:dd:6e:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E6:21:C2:4F:AF:67:A7:87:4F:D3:4C:5D:94:0B:1E:F6:17:DE:69
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/XuYhwk-vZ6eHT9NMXZQLHvYX3mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.128.0/22
Signature Algorithm: sha256WithRSAEncryption
22:1f:7b:a6:38:6a:e0:7e:c6:c7:33:f9:1c:92:b9:21:93:a6:
c2:6f:a2:d4:d8:c0:66:59:51:77:cf:9e:c3:2a:8e:18:48:98:
38:0d:51:4e:ca:17:1a:82:1f:fe:16:bd:31:f8:3b:81:6f:7a:
30:18:7f:62:cc:91:5f:8f:9d:06:55:b6:e3:78:c6:a7:aa:63:
24:03:61:fc:28:4e:91:4a:fd:92:f8:d8:49:e1:40:f3:da:45:
10:ab:1e:0c:02:65:8c:05:44:02:6e:fc:3f:1f:f6:34:c1:8c:
54:b0:03:60:df:6c:23:33:d2:9b:89:62:b3:b6:14:da:87:30:
2b:2b:be:04:be:97:91:4d:f0:b1:4e:ec:51:6c:f3:36:c2:94:
bd:1a:0b:36:d6:e6:2e:81:52:d0:37:b0:c7:9d:48:a6:e8:13:
3b:9d:67:24:3b:69:75:e8:d4:90:cf:a6:df:af:dd:59:53:f0:
f1:07:c6:86:18:af:70:db:f3:22:7f:14:67:39:4b:cf:5d:4f:
26:84:cd:ce:0d:09:10:ef:56:d2:e9:29:62:65:67:6c:c8:a4:
ba:9c:8f:37:2f:f5:18:ef:71:d5:6f:df:88:5c:06:1e:0e:a5:
31:50:cf:e4:8c:f3:33:06:3c:0f:a6:d4:21:21:56:77:b7:42:
33:f5:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:44 2026 by rpki-client