Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/XcRInvJYcsn8LtFLNgtDJnMlA6w.roa
File: XcRInvJYcsn8LtFLNgtDJnMlA6w.roa (raw, json)
Hash identifier: 975sgmbb5YVMCQJ/ZuhSXOCDO/EGP3qD/sjyuljUer8=
Subject key identifier: 5D:C4:48:9E:F2:58:72:C9:FC:2E:D1:4B:36:0B:43:26:73:25:03:AC
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689FED2DE5377FE8AA388F5C7BD2A2
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/XcRInvJYcsn8LtFLNgtDJnMlA6w.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206717
IP address blocks: 93.109.217.0/24 maxlen: 24
213.7.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:ed:2d:e5:37:7f:e8:aa:38:8f:5c:7b:d2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dc4489ef25872c9fc2ed14b360b4326732503ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:fb:5f:17:c2:ae:74:b8:0a:79:84:35:43:
2f:fa:cc:c9:de:d1:e4:f9:5f:20:38:d7:47:b6:c8:
2f:37:92:a4:da:10:3e:16:a9:ea:63:d0:0e:37:ff:
30:50:1f:b5:fa:d1:46:15:3d:75:68:59:d1:36:29:
2a:20:8f:ee:ba:19:eb:9a:3e:13:d0:13:27:7c:51:
38:91:b8:87:5c:2a:ac:4f:9c:bb:0a:31:c3:03:e2:
23:67:16:f1:d4:46:4a:94:47:39:b3:21:f2:9c:96:
59:f8:40:0c:66:c9:5c:0d:ab:91:f0:1b:78:d8:61:
9b:d7:4f:26:cf:4d:ef:f5:7c:eb:a0:78:a4:d0:10:
cc:1d:91:fe:20:97:0d:4b:36:ec:38:4f:bb:2a:96:
e7:9d:3e:fc:58:00:9a:b3:7b:1c:b7:bb:26:52:b1:
a0:e1:64:98:c2:4c:07:d7:d4:7c:2c:29:2c:c1:d1:
a1:d5:43:8e:19:1a:49:5c:c1:01:b5:f4:24:f0:8a:
32:74:a4:26:81:56:9c:95:39:62:bd:9c:a4:e8:72:
08:e9:25:dc:17:e3:e8:bf:7e:30:cb:56:c4:80:52:
d0:2b:11:2f:be:00:d6:65:46:5d:33:5e:c4:ca:f6:
3a:52:70:a0:59:0e:a7:bb:98:28:08:42:84:8e:06:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C4:48:9E:F2:58:72:C9:FC:2E:D1:4B:36:0B:43:26:73:25:03:AC
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/XcRInvJYcsn8LtFLNgtDJnMlA6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.109.217.0/24
213.7.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:95:b3:d9:3f:42:46:9f:29:10:c6:51:6e:e1:56:28:f3:46:
2e:80:3c:23:0c:74:23:28:33:2b:e1:0c:72:d6:e7:5c:b1:c3:
bc:dc:40:d3:ce:f7:8d:96:d0:40:43:52:c7:6c:8d:ca:8e:08:
73:69:2d:83:38:6c:e6:68:9c:d8:22:c0:86:5f:bd:c2:32:d2:
00:12:3c:99:65:10:f8:dc:6b:3e:b6:8a:bc:ac:33:9f:e2:fc:
ed:cf:1f:92:94:be:ef:c4:db:6c:9b:62:cf:fe:7f:09:d7:5e:
b6:b3:f2:e9:72:7f:14:57:d8:ed:e5:bd:03:a4:6e:8b:8c:f0:
8f:ff:40:14:b7:e0:04:7b:5f:90:3a:39:e6:a7:57:47:79:c1:
2e:d0:a7:95:1e:e0:90:90:25:ec:dd:3a:ac:8e:5b:60:8e:aa:
4b:f4:01:e2:6b:5d:b2:f3:e9:43:0b:d5:54:d3:37:bc:64:09:
97:ce:2d:02:41:4a:86:2e:b6:02:d1:59:e3:fd:c4:cf:44:1d:
47:6d:ec:da:91:8d:76:16:04:47:87:77:27:07:54:fe:72:f7:
a0:16:f9:ad:27:9f:01:cd:d6:ef:37:5e:7e:18:91:bd:07:26:
31:cd:b9:57:bb:cf:ce:11:a3:8f:f4:19:d8:44:3f:ca:15:18:
55:08:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:27 2026 by rpki-client