Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XVT_8-X36xl84abz_blwIJxhR6E.roa
File: XVT_8-X36xl84abz_blwIJxhR6E.roa (raw, json)
Hash identifier: QPw/zMm4/hqqYT3wqjjGQOzyJRgkoL5nwEzzvR6GJts=
Subject key identifier: 5D:54:FF:F3:E5:F7:EB:19:7C:E1:A6:F3:FD:B9:70:20:9C:61:47:A1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DA70A46BEB74F9F3069D5AA7B7634F06B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XVT_8-X36xl84abz_blwIJxhR6E.roa
Signing time: Sun 19 Apr 2026 18:39:21 +0000
ROA not before: Sun 19 Apr 2026 18:39:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:0a:46:be:b7:4f:9f:30:69:d5:aa:7b:76:34:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 19 18:39:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d54fff3e5f7eb197ce1a6f3fdb970209c6147a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:37:eb:c1:8d:ba:2e:5e:db:1a:a2:78:80:
17:0a:4f:ab:66:71:b2:9e:d4:20:f5:d7:4a:80:ce:
98:35:04:d4:14:fe:82:66:a4:90:bc:24:24:1f:a3:
47:41:96:95:86:73:97:0a:98:6a:f1:a2:ed:6f:4f:
86:a8:cd:55:38:33:2e:49:e2:a5:f4:3f:66:8d:f8:
ec:9c:0b:2f:b7:d7:79:15:73:a2:e3:84:43:08:f8:
3d:6c:6a:60:e2:54:e5:a0:0b:e9:88:a6:bf:77:9a:
71:3f:03:51:b0:fa:02:ac:8e:69:1c:18:77:93:63:
28:0a:c6:87:7c:10:ca:a8:f0:72:30:c8:23:3c:60:
92:a8:08:54:dd:94:95:3c:70:a5:25:2e:48:36:19:
74:a0:17:e1:c3:eb:5a:e2:95:97:11:ec:98:98:74:
ba:fc:aa:0f:7d:79:22:6a:c2:3d:cb:94:43:bb:d3:
c4:7e:65:7a:ba:d5:be:80:93:f2:21:c9:72:21:24:
06:6d:f2:cd:6b:00:3d:79:05:0b:8a:81:73:19:69:
09:e3:f3:07:ce:ca:7a:50:67:42:8a:52:6a:34:8d:
f6:2a:79:e5:eb:92:4c:6b:9f:44:cb:7f:00:35:4f:
2a:af:88:23:74:20:98:5e:e9:7c:3a:b0:f9:37:29:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:FF:F3:E5:F7:EB:19:7C:E1:A6:F3:FD:B9:70:20:9C:61:47:A1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XVT_8-X36xl84abz_blwIJxhR6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
94.183.170.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0c:1e:d1:3f:f8:74:b6:54:1d:0c:f3:4d:7a:16:e9:44:63:
4b:d6:81:8c:a1:95:4f:ee:5c:14:61:c9:a8:bf:c2:36:31:04:
be:44:1f:74:78:f9:ca:1d:88:99:49:fc:45:93:57:5e:c5:68:
8c:ac:fb:be:40:c8:65:43:5f:25:a7:8a:f5:f6:00:cf:49:65:
62:94:2c:54:67:5b:09:fa:39:fe:c7:5b:85:75:b2:8c:8f:93:
d7:02:42:3d:b5:cf:d9:75:47:1c:13:0e:25:f3:f9:c5:2c:01:
71:90:40:6b:5b:52:c9:14:8f:d6:4d:9f:b1:ce:59:80:16:4b:
5c:e6:a3:b5:3a:21:77:4a:4c:ac:f4:90:3d:4a:f4:a3:89:33:
78:cc:b7:20:5c:f2:57:46:30:86:6e:d5:28:4b:74:fd:e7:fa:
33:d7:ce:71:cd:6f:1b:87:f0:c7:e6:c3:5c:07:2c:52:18:14:
20:73:3c:6a:ac:40:dc:a5:77:88:e0:18:83:92:d3:d6:7e:f9:
aa:f7:f9:64:d3:45:66:92:ad:08:b9:ec:b1:3e:31:75:90:76:
28:e1:e0:03:1e:02:9c:73:12:b2:51:09:ab:cb:ff:fb:a3:f2:
9d:59:b1:cc:af:42:71:81:6c:32:6c:2a:67:b3:2e:cd:7b:b1:
11:b6:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:40:39 2026 by rpki-client