Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/xdfHz51H2U_drRVl99FgU2CFlPQ.roa
File: xdfHz51H2U_drRVl99FgU2CFlPQ.roa (raw, json)
Hash identifier: BLDc4xOeEFuPu6EvzSRPfHwGo2Y4vTDZuLs9dGjD79Y=
Subject key identifier: C5:D7:C7:CF:9D:47:D9:4F:DD:AD:15:65:F7:D1:60:53:60:85:94:F4
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 019C0496622B7ADED05092E70A625C94BD36
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/xdfHz51H2U_drRVl99FgU2CFlPQ.roa
Signing time: Wed 28 Jan 2026 12:31:30 +0000
ROA not before: Wed 28 Jan 2026 12:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44805
IP address blocks: 193.19.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:96:62:2b:7a:de:d0:50:92:e7:0a:62:5c:94:bd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: Jan 28 12:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5d7c7cf9d47d94fddad1565f7d16053608594f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:da:4d:cf:3f:b3:be:08:71:cb:85:53:e5:
7d:39:92:6a:38:d7:a3:64:52:4a:33:6b:a7:33:38:
fa:12:e4:fd:a7:98:c8:10:94:6e:f1:a0:e2:b1:90:
c1:c5:1e:61:91:b1:58:d2:ea:13:f3:80:66:25:7f:
bf:36:09:fd:34:cc:20:7a:00:47:d5:8e:0e:50:30:
39:ec:55:7e:80:a3:f4:3f:b9:5d:03:96:ca:e9:67:
e2:06:45:66:1a:5e:cf:59:52:6a:28:45:42:a3:3e:
f1:8b:60:4f:4f:37:bb:fb:a7:ab:4e:68:65:c5:58:
6d:56:86:9d:c6:c8:da:eb:97:9d:8e:9b:e8:20:06:
63:d9:d1:9a:98:56:60:80:25:3b:a5:6e:4d:98:0b:
b0:7d:73:57:dc:56:e3:e7:9e:4e:d6:3f:86:ed:c6:
94:ba:b9:b9:ae:78:70:d5:ae:5e:75:70:8c:0f:3f:
cf:46:d9:29:0a:fb:2a:16:bf:c5:f5:bd:41:dd:bd:
c8:a0:bf:65:91:72:a2:c2:e4:46:ab:53:6f:55:3c:
46:76:15:99:5b:38:ac:56:aa:2f:d7:9c:40:4f:8c:
e5:5e:e6:d9:49:9a:40:f6:5d:45:c0:5c:dc:e1:97:
57:30:e0:4a:0b:fc:7f:82:8b:4a:bc:8a:2d:86:bf:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:C7:CF:9D:47:D9:4F:DD:AD:15:65:F7:D1:60:53:60:85:94:F4
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/xdfHz51H2U_drRVl99FgU2CFlPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.172.0/22
Signature Algorithm: sha256WithRSAEncryption
44:12:53:e5:41:56:75:97:75:63:4d:3d:27:de:0c:03:0f:2f:
8c:f3:02:f1:a1:3f:ea:1e:b3:7c:ba:c5:fc:ba:f5:86:28:27:
10:8d:96:10:8e:cd:b0:0a:c5:cb:da:fa:5c:c3:27:55:00:d2:
32:24:a1:36:d7:3e:a2:f3:08:d2:2e:f5:f9:6a:2a:eb:18:41:
1c:28:e5:24:05:a3:f4:22:17:de:e1:4f:b5:cb:97:5b:d3:89:
92:c4:19:fd:7d:a2:56:1d:a0:1a:6a:dd:62:ae:02:7c:a7:05:
fe:f6:55:fd:c6:f3:12:b5:ab:0d:0a:5a:4a:10:eb:2f:f2:87:
27:69:02:bc:0d:4b:1d:75:e2:d5:9d:b4:b2:1b:ee:4e:dd:22:
b7:31:b3:ac:b1:c2:ff:02:fe:f9:49:b0:d2:5f:19:1d:91:45:
bf:5c:2d:16:af:83:b9:b0:d1:39:02:e5:d7:f2:b2:36:07:7e:
35:76:cf:27:61:c1:d6:02:2c:dc:48:73:34:20:ae:80:26:38:
ad:d7:eb:4d:84:e7:0c:01:75:1d:3c:e4:37:9c:e0:26:d8:89:
ba:a4:d9:95:02:b5:3b:ce:b6:62:4e:a8:4c:16:ae:35:11:01:
cc:54:8f:a1:1a:5d:aa:2f:86:93:55:81:36:f7:09:d3:f1:2e:
d5:a9:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:55:31 2026 by rpki-client