Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/XxzUIXht33wUOnqXfgpFWGTDr90.roa
File: XxzUIXht33wUOnqXfgpFWGTDr90.roa (raw, json)
Hash identifier: yN300BCm4Elic3UzkvmyHuG3LK3KG9GIXHgsu2jsYdo=
Subject key identifier: 5F:1C:D4:21:78:6D:DF:7C:14:3A:7A:97:7E:0A:45:58:64:C3:AF:DD
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019F4E6A6677C7E3B18CC53FAED09DF1BEF5
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/XxzUIXht33wUOnqXfgpFWGTDr90.roa
Signing time: Fri 10 Jul 2026 23:43:43 +0000
ROA not before: Fri 10 Jul 2026 23:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33387
IP address blocks: 147.189.142.0/24 maxlen: 24
185.127.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:6a:66:77:c7:e3:b1:8c:c5:3f:ae:d0:9d:f1:be:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jul 10 23:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f1cd421786ddf7c143a7a977e0a455864c3afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:a4:3a:a5:17:70:6f:76:50:bf:4a:86:78:
a0:c4:09:45:2e:9d:0e:f2:34:be:72:06:f0:44:ab:
2a:7a:e2:39:e5:f5:7a:77:1e:ad:af:82:e5:a6:f8:
16:9f:b0:a3:77:fb:d8:2e:0c:f2:5b:2c:57:84:bf:
44:2a:dc:ba:4e:a4:21:c1:f8:f8:8e:0d:9f:f7:d8:
9f:c9:32:40:24:f9:d4:ca:24:63:13:48:32:82:9f:
5e:a1:24:c0:7e:f7:30:bc:73:b0:67:d4:59:38:8c:
d4:18:ff:fa:07:54:17:ad:c1:a0:33:0f:9b:f5:d2:
fa:c8:82:d6:bf:4f:31:d8:87:3d:63:c4:6a:74:22:
c4:d2:10:b2:0e:c3:15:85:88:9b:9d:8b:0d:1e:95:
18:13:59:01:9e:c9:94:ab:6c:53:ec:d8:c0:a6:3a:
00:2a:ab:d4:5d:14:93:90:20:33:09:80:9f:9a:e1:
56:18:35:13:f2:d7:c0:ef:33:55:65:54:6d:51:44:
bc:92:bc:4c:56:80:37:47:06:10:4d:a8:ad:9e:c5:
b1:3b:1d:07:8f:0b:1f:a5:a4:a9:2d:19:55:4f:a1:
02:2e:e8:bd:91:f5:0d:bb:a0:2f:f9:d3:9b:f8:6f:
8a:b4:2f:2f:7c:4b:4d:30:d8:69:ed:52:20:6d:f0:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1C:D4:21:78:6D:DF:7C:14:3A:7A:97:7E:0A:45:58:64:C3:AF:DD
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/XxzUIXht33wUOnqXfgpFWGTDr90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.142.0/24
185.127.93.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e6:c0:77:ba:5f:4b:27:94:ba:c3:85:f7:5d:3d:20:86:b9:
2b:4e:1f:de:07:89:01:8a:7e:25:bc:5b:fb:1a:81:95:86:e0:
ca:61:c7:f9:c5:0a:ce:eb:79:11:0b:9f:c6:8d:7c:e8:51:a3:
39:18:18:ea:3a:d7:0d:c0:14:6f:26:39:f4:08:4e:9b:80:96:
41:cf:28:7d:91:a0:20:22:3d:35:be:c5:f1:55:67:d8:ed:d4:
81:96:dd:bb:8a:cc:f2:e4:a7:0a:5e:78:11:b8:7a:51:23:47:
1e:1c:d5:9b:3a:f2:97:90:74:06:51:8d:f2:cf:d8:44:f1:92:
79:c5:b8:a1:d4:0a:18:bf:10:f4:58:ff:64:0e:fb:75:3d:6d:
6c:b6:62:23:79:c5:9e:0d:57:85:3a:18:42:ed:59:e8:72:92:
85:4c:90:d8:ea:6d:6e:4d:37:b7:fa:c1:b7:7c:02:de:f8:1d:
93:fc:02:31:1d:35:3d:21:7f:12:32:5c:a6:6b:2b:6d:f4:ef:
07:57:60:cc:24:6b:99:11:01:08:2f:d4:3d:fd:11:1d:88:bf:
d5:0d:56:38:39:56:0d:b7:0e:6a:5a:c1:1f:a4:2a:6a:01:a3:
dc:5c:66:a6:6b:93:2a:e1:9b:3e:4a:0c:a0:84:e8:dd:5f:18:
c6:9b:fa:88
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ9OamZ3x+OxjMU/rtCd8b71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjYwNzEwMjM0MzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjFjZDQyMTc4NmRkZjdjMTQzYTdhOTc3ZTBhNDU1ODY0YzNhZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY2kOqUXcG92UL9KhnigxAlFLp0O
8jS+cgbwRKsqeuI55fV6dx6tr4LlpvgWn7Cjd/vYLgzyWyxXhL9EKty6TqQhwfj4
jg2f99ifyTJAJPnUyiRjE0gygp9eoSTAfvcwvHOwZ9RZOIzUGP/6B1QXrcGgMw+b
9dL6yILWv08x2Ic9Y8RqdCLE0hCyDsMVhYibnYsNHpUYE1kBnsmUq2xT7NjApjoA
KqvUXRSTkCAzCYCfmuFWGDUT8tfA7zNVZVRtUUS8krxMVoA3RwYQTaitnsWxOx0H
jwsfpaSpLRlVT6ECLui9kfUNu6Av+dOb+G+KtC8vfEtNMNhp7VIgbfCmQQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFF8c1CF4bd98FDp6l34KRVhkw6/dMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL1h4elVJWGh0MzN3VU9ucVhmZ3BGV0dURHI5MC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACTvY4D
BAC5f10wDQYJKoZIhvcNAQELBQADggEBAInmwHe6X0snlLrDhfddPSCGuStOH94H
iQGKfiW8W/sagZWG4Mphx/nFCs7reRELn8aNfOhRozkYGOo61w3AFG8mOfQITpuA
lkHPKH2RoCAiPTW+xfFVZ9jt1IGW3buKzPLkpwpeeBG4elEjRx4c1Zs68peQdAZR
jfLP2ETxknnFuKHUChi/EPRY/2QO+3U9bWy2YiN5xZ4NV4U6GELtWehykoVMkNjq
bW5NN7f6wbd8At74HZP8AjEdNT0hfxIyXKZrK2307wdXYMwka5kRAQgv1D39ER2I
v9UNVjg5Vg23DmpawR+kKmoBo9xcZqZrkyrhmz5KDKCE6N1fGMab+og=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:11 2026 by rpki-client