Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XKEcnf7DxuipkuGnV65E5wtxc0o.roa
File: XKEcnf7DxuipkuGnV65E5wtxc0o.roa (raw, json)
Hash identifier: gBk/3BfHBR598bsiq+ECDQUsTeYt/3o3l/0TbZ4BV+4=
Subject key identifier: 5C:A1:1C:9D:FE:C3:C6:E8:A9:92:E1:A7:57:AE:44:E7:0B:71:73:4A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019ED54F0CB2CEBA88E88535654256F490D8
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XKEcnf7DxuipkuGnV65E5wtxc0o.roa
Signing time: Wed 17 Jun 2026 11:19:48 +0000
ROA not before: Wed 17 Jun 2026 11:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 80.71.237.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:4f:0c:b2:ce:ba:88:e8:85:35:65:42:56:f4:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 17 11:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ca11c9dfec3c6e8a992e1a757ae44e70b71734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:14:3c:81:ff:69:9b:65:b1:dc:2b:28:a1:
a1:43:71:ac:49:8d:74:ff:d3:c8:34:96:92:f5:b8:
b2:1e:a9:8e:df:bd:9e:33:67:f6:1a:f6:c6:f6:8c:
79:ea:1d:7f:ed:1b:81:80:3a:81:b1:42:93:80:c3:
da:71:9d:db:dd:a5:f5:62:f2:c8:f4:19:b9:c5:d2:
6c:48:c8:38:dd:41:c2:2e:7b:c6:36:4b:10:d4:e9:
eb:f3:d0:c2:d1:42:c2:0d:bb:ed:1a:a1:27:e1:28:
8e:22:13:ab:88:d2:7c:f8:5f:77:55:8a:ba:17:26:
ef:65:22:7f:b6:dd:4a:89:3b:64:7c:1b:21:e8:7a:
6e:fc:09:c8:70:da:7d:9b:10:06:07:1f:9e:0b:f2:
a2:db:ac:62:95:b1:04:8f:a0:ed:64:01:19:ef:bc:
ec:fb:a5:74:61:b7:01:17:4b:78:9d:e1:39:d3:c4:
0b:b4:73:04:7d:36:a0:37:66:42:87:80:5d:fc:16:
a4:5d:74:30:e7:f4:85:f3:ba:fd:5a:8c:70:96:60:
30:0c:bb:d4:00:e7:22:5b:c8:3a:3f:93:b5:c0:d2:
87:a5:7d:e0:32:d0:f9:02:ba:7c:7f:f6:16:85:e8:
27:9e:b4:cd:ad:d8:52:de:83:10:9f:b4:e0:1a:4a:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A1:1C:9D:FE:C3:C6:E8:A9:92:E1:A7:57:AE:44:E7:0B:71:73:4A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XKEcnf7DxuipkuGnV65E5wtxc0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e4:5b:1e:c4:45:bf:b4:75:4f:b7:ec:c9:10:f1:70:89:99:
a1:55:be:75:83:7d:ee:df:44:90:21:a6:4f:00:17:d5:4a:33:
3a:13:bd:5a:2d:82:1e:d2:7c:1e:77:fb:05:f6:40:41:cd:ad:
83:c3:ab:4e:64:68:03:bf:25:63:21:6d:0e:1d:32:ff:34:3d:
69:ed:d2:62:de:1d:28:89:ce:a3:bc:3f:a1:fc:2f:87:3a:90:
ea:51:6d:55:6a:6a:5e:76:e6:c9:06:54:cd:57:0f:9b:02:39:
eb:bb:ec:2b:d2:cb:46:e3:bb:4b:9e:5d:b2:48:ed:b5:cb:31:
1f:1d:23:e0:15:2b:e8:0d:c0:35:08:4d:5e:66:b6:52:f5:da:
e8:07:b7:75:06:80:be:2a:9b:e4:0f:f0:27:1c:84:ec:47:0d:
41:3b:14:1c:e5:b2:d5:44:a9:be:6b:2a:1e:00:35:7c:2a:43:
86:e9:a6:15:54:17:b2:6c:e8:34:e9:eb:b9:e5:be:39:65:4a:
60:ee:b8:4a:2c:a5:70:8b:33:e8:49:42:99:64:75:b3:4d:5c:
3e:01:ef:34:59:a2:68:47:49:c2:9c:08:bd:ec:aa:63:1d:3c:
96:0b:89:2f:91:44:7f:68:1f:12:c6:58:83:8e:e0:7d:81:89:
3d:e4:25:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7VTwyyzrqI6IU1ZUJW9JDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYwNjE3MTExOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2ExMWM5ZGZlYzNjNmU4YTk5MmUxYTc1N2FlNDRlNzBiNzE3MzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMUPIH/aZtlsdwrKKGhQ3GsSY10
/9PINJaS9biyHqmO372eM2f2GvbG9ox56h1/7RuBgDqBsUKTgMPacZ3b3aX1YvLI
9Bm5xdJsSMg43UHCLnvGNksQ1Onr89DC0ULCDbvtGqEn4SiOIhOriNJ8+F93VYq6
FybvZSJ/tt1KiTtkfBsh6Hpu/AnIcNp9mxAGBx+eC/Ki26xilbEEj6DtZAEZ77zs
+6V0YbcBF0t4neE508QLtHMEfTagN2ZCh4Bd/BakXXQw5/SF87r9WoxwlmAwDLvU
AOciW8g6P5O1wNKHpX3gMtD5Arp8f/YWhegnnrTNrdhS3oMQn7TgGkrlpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFyhHJ3+w8boqZLhp1euROcLcXNKMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvWEtFY25mN0R4dWlwa3VHblY2NUU1d3R4YzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEftAwQA
UR2bMA0GCSqGSIb3DQEBCwUAA4IBAQAK5FsexEW/tHVPt+zJEPFwiZmhVb51g33u
30SQIaZPABfVSjM6E71aLYIe0nwed/sF9kBBza2Dw6tOZGgDvyVjIW0OHTL/ND1p
7dJi3h0oic6jvD+h/C+HOpDqUW1VampedubJBlTNVw+bAjnru+wr0stG47tLnl2y
SO21yzEfHSPgFSvoDcA1CE1eZrZS9droB7d1BoC+KpvkD/AnHITsRw1BOxQc5bLV
RKm+ayoeADV8KkOG6aYVVBeybOg06eu55b45ZUpg7rhKLKVwizPoSUKZZHWzTVw+
Ae80WaJoR0nCnAi97KpjHTyWC4kvkUR/aB8SxliDjuB9gYk95CXO
-----END CERTIFICATE-----
Generated at Sat Jun 20 06:11:36 2026 by rpki-client