Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/XPOEWfnMVhe80O0PhqrGqhClcfw.roa
File: XPOEWfnMVhe80O0PhqrGqhClcfw.roa (raw, json)
Hash identifier: SlGsDafqes4vsxe9B3q0eS5Wdrhz1vStfHdoa8gVTIw=
Subject key identifier: 5C:F3:84:59:F9:CC:56:17:BC:D0:ED:0F:86:AA:C6:AA:10:A5:71:FC
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E885E126A7E513194DA1C33AF952F3D93
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/XPOEWfnMVhe80O0PhqrGqhClcfw.roa
Signing time: Tue 02 Jun 2026 12:45:26 +0000
ROA not before: Tue 02 Jun 2026 12:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197139
IP address blocks: 189.74.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:5e:12:6a:7e:51:31:94:da:1c:33:af:95:2f:3d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 2 12:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf38459f9cc5617bcd0ed0f86aac6aa10a571fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:89:aa:7f:82:ef:09:65:9b:90:73:cd:4e:
d4:0e:03:44:0f:b7:d4:2e:26:d0:9c:bb:5e:2d:72:
c3:a3:14:b6:6c:fe:b2:14:c2:9f:a8:7e:43:8c:0c:
86:46:80:c6:3f:dd:3e:7a:84:08:7b:89:3e:ff:fb:
8a:cc:d0:cf:fe:18:ff:33:6d:cd:6c:10:d9:92:63:
da:c1:84:3d:6f:e9:e2:91:b7:d3:c7:ca:00:dc:02:
61:39:20:93:98:2c:93:76:bf:b9:57:d8:07:0b:aa:
ba:f3:c8:fb:04:29:29:bc:f2:dd:c5:f4:96:1b:46:
42:14:89:68:d7:64:1c:6e:36:b7:00:b8:a5:2d:33:
a7:64:83:30:06:53:b8:3e:50:36:11:6b:1a:d2:41:
01:35:38:08:f0:f5:70:79:ed:4d:9f:bf:f9:f2:64:
7a:c7:43:ad:2e:10:32:3b:be:b5:9e:43:e8:4d:5e:
9a:1b:b5:66:55:da:75:e9:f6:31:8b:02:24:d0:d2:
57:5e:3f:3a:01:76:99:f1:0a:ca:11:f8:f0:1e:78:
e3:d2:25:98:af:6c:16:87:06:fb:8e:07:fe:bb:60:
83:54:50:77:30:20:94:c2:1e:23:a2:22:6e:42:e1:
c8:74:44:25:6a:8c:14:2c:fe:82:0c:09:37:30:eb:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F3:84:59:F9:CC:56:17:BC:D0:ED:0F:86:AA:C6:AA:10:A5:71:FC
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/XPOEWfnMVhe80O0PhqrGqhClcfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b8:31:dc:2d:6b:92:0e:1a:c0:c7:0d:fa:c4:47:a8:a8:e9:
f4:b3:86:0c:e5:dc:b6:f9:ee:a6:03:8a:30:71:49:b9:ec:e9:
16:a9:69:db:28:ee:0b:3f:41:86:5f:c9:f9:64:46:7f:7d:01:
4b:8c:88:18:71:5f:6d:e3:90:f5:e0:e8:9d:ba:1a:19:7c:d8:
ec:27:5e:ef:f0:c9:4f:fe:3b:61:cf:dc:07:ab:1b:b8:6d:12:
15:8c:d9:9a:e7:0d:8a:62:11:64:30:0b:66:b3:3b:82:37:dc:
d6:80:5b:98:a9:20:22:5a:ce:99:68:da:f8:4b:69:4a:93:ab:
70:ce:a0:00:99:74:41:76:94:db:09:9f:18:91:df:a8:8e:e4:
57:75:32:2d:6b:1b:e0:08:0b:d6:9d:70:a5:0b:2c:15:46:ca:
bd:f3:0a:7b:85:78:13:24:06:2b:4b:41:21:61:5e:1a:f0:42:
04:e8:d5:3b:5c:d3:9d:da:93:ff:5c:6c:d3:22:fd:74:0f:11:
8c:65:ef:ca:aa:8b:59:10:9d:3b:10:66:0e:7e:df:d4:a5:46:
96:4c:4c:32:09:5f:19:0c:7f:4c:d1:b2:5f:88:a2:d1:eb:a5:
0d:1f:d4:9e:47:3f:35:c4:7e:6e:7b:5d:96:a7:4e:56:07:6d:
c9:53:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:56:40 2026 by rpki-client