Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xbjqSgOTVoqb_9ZUqKbfNfd0DQw.roa
File: xbjqSgOTVoqb_9ZUqKbfNfd0DQw.roa (raw, json)
Hash identifier: +H/DDAm6SFF0LrwuvZoM2yFQw0SkoOMufi0EBPg0mUg=
Subject key identifier: C5:B8:EA:4A:03:93:56:8A:9B:FF:D6:54:A8:A6:DF:35:F7:74:0D:0C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369091F7B4F336A4DAF19064B47FE70
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xbjqSgOTVoqb_9ZUqKbfNfd0DQw.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214466
IP address blocks: 109.176.253.0/24 maxlen: 24
213.218.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:1f:7b:4f:33:6a:4d:af:19:06:4b:47:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5b8ea4a0393568a9bffd654a8a6df35f7740d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:96:b1:ae:3c:37:70:01:80:82:d1:d5:00:
84:4f:5b:e9:5c:5d:bd:10:5e:5d:75:fd:43:9e:01:
bb:15:3e:42:3b:c6:0b:ce:c4:44:4b:17:6d:7a:45:
e9:a6:01:e9:3d:11:67:4b:f6:5f:6b:ba:c9:84:1b:
db:c9:a6:93:2c:94:2e:1b:55:46:e0:17:fb:75:d7:
39:95:08:4d:09:4f:86:16:9c:d4:70:c3:a9:eb:df:
f5:d7:f4:fb:7f:7b:57:71:a0:3d:85:30:65:b4:f3:
af:59:89:1a:96:b8:34:83:f1:54:ad:51:1a:77:f4:
81:3f:13:e7:f9:1c:a1:a7:ae:16:3c:c0:5a:de:72:
4d:36:6b:c0:ac:6a:a3:6b:4f:63:c6:41:40:75:15:
f0:27:f9:dc:93:aa:22:8d:4b:b2:4e:55:5e:d1:e0:
24:b0:8e:c6:d6:42:3e:0f:d1:ad:10:ea:6a:79:06:
9b:2d:49:97:a3:14:55:d2:8f:77:d1:fa:d6:0c:3f:
94:81:37:36:81:ca:c4:5e:bf:d6:3d:48:4c:5d:77:
1b:16:67:4e:77:ed:98:d8:40:61:c1:78:fb:95:2d:
87:b5:b9:ac:93:e8:e3:7b:6c:10:16:92:8c:06:11:
e8:e9:21:bc:69:d7:4a:95:8e:98:08:24:6e:93:11:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B8:EA:4A:03:93:56:8A:9B:FF:D6:54:A8:A6:DF:35:F7:74:0D:0C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xbjqSgOTVoqb_9ZUqKbfNfd0DQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
213.218.251.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:91:b4:85:ec:97:f3:72:1d:42:b4:cf:24:7e:cd:09:07:
0d:35:88:34:a2:d7:1f:90:1f:40:d0:4a:ab:3a:ca:b3:50:79:
41:96:84:09:b2:de:53:cb:5f:37:fe:f2:15:b2:33:6d:69:27:
19:e0:f8:d8:de:c6:18:9f:03:2a:cc:42:8b:e3:72:ab:6e:37:
13:6b:37:b5:82:21:e7:cf:64:f6:54:34:ca:cb:35:58:40:18:
a9:36:92:44:9d:68:fe:30:a9:85:bc:bc:e3:22:b0:a1:8c:e4:
e6:57:66:44:75:99:d6:4b:f8:51:f8:61:08:66:c2:62:e3:6b:
37:01:2b:ad:9b:b4:74:34:85:0c:b6:b4:4c:e1:03:67:20:27:
fa:b8:60:29:b4:d4:b3:ba:0b:1f:ae:f0:94:07:dd:74:a3:55:
cd:5c:22:33:b1:ce:00:99:3a:60:ff:6c:2a:6e:6b:28:97:d0:
7b:2f:0f:1a:12:d0:a3:57:ce:6c:bc:ef:aa:eb:b6:f1:12:e1:
ea:7a:48:d9:e9:fc:28:32:9a:a9:a0:59:04:fa:a8:2d:d1:aa:
e2:aa:77:c3:b5:6f:9a:ac:54:3f:60:9f:ab:63:aa:32:a3:1f:
41:8f:f9:41:14:61:30:01:e0:5f:65:43:9e:ce:5c:78:71:96:
0d:0a:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:52 2026 by rpki-client