Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/xee85XP9L7aWHvTNVB6I9nZcNlU.roa
File: xee85XP9L7aWHvTNVB6I9nZcNlU.roa (raw, json)
Hash identifier: R3ViaO85fnRciS7RiBQnaPMq6GgojqoWPmvM1MsLncY=
Subject key identifier: C5:E7:BC:E5:73:FD:2F:B6:96:1E:F4:CD:54:1E:88:F6:76:5C:36:55
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FCC43FDDA3269C7AADE748A824C36976F
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/xee85XP9L7aWHvTNVB6I9nZcNlU.roa
Signing time: Tue 04 Aug 2026 10:13:55 +0000
ROA not before: Tue 04 Aug 2026 10:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29287
IP address blocks: 83.229.64.0/24 maxlen: 24
83.229.93.0/24 maxlen: 24
83.229.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:43:fd:da:32:69:c7:aa:de:74:8a:82:4c:36:97:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 4 10:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5e7bce573fd2fb6961ef4cd541e88f6765c3655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:c7:02:ce:6b:c3:f0:29:4b:4b:9d:78:50:
55:30:87:9c:e6:78:a6:c6:2a:24:b7:2c:9f:12:52:
d1:b1:5c:47:53:d4:29:d7:a2:1f:d8:fd:46:cc:dd:
79:ba:7a:32:6d:9f:89:f9:60:c1:6c:ca:a6:85:4e:
79:89:11:da:60:fe:25:20:c1:2a:76:a9:da:2f:1c:
a0:d4:61:4b:1d:2a:68:93:ff:83:36:39:d3:83:f9:
1c:3f:f2:7f:a6:09:6c:da:9c:a1:ce:d7:23:94:9d:
8e:d7:85:03:84:d4:2d:8c:6f:08:d9:fd:75:4a:1a:
a6:7c:97:ee:77:ad:a2:34:e7:34:57:63:dc:0b:41:
64:39:5f:98:88:6f:d6:3d:88:b6:2f:60:ad:66:74:
8f:de:1d:9f:e6:f9:43:01:c0:88:ef:52:c6:c3:6d:
71:ec:0d:85:b1:44:fe:e5:19:40:17:ae:03:d7:f2:
41:4a:b2:82:e4:d8:15:a7:33:46:0f:94:d7:da:d6:
b0:49:ad:d3:09:75:85:f8:8e:e9:31:4e:ac:ab:f1:
c1:71:ad:20:62:e2:05:85:78:1e:b5:7b:57:3c:50:
2b:8a:41:74:08:c5:b1:d0:50:90:06:4e:aa:5f:ae:
ee:1b:a6:0b:d7:31:36:a7:18:60:19:06:c9:5c:38:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:BC:E5:73:FD:2F:B6:96:1E:F4:CD:54:1E:88:F6:76:5C:36:55
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/xee85XP9L7aWHvTNVB6I9nZcNlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.64.0/24
83.229.93.0/24
83.229.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e1:f4:fd:5d:53:14:24:11:f2:9f:62:13:98:45:85:7a:21:
f5:07:ab:ef:3d:e1:22:f1:9b:d6:78:74:e8:e3:dd:4e:1a:fb:
63:ea:09:4a:ca:2a:07:0c:2a:fb:3e:b6:50:49:ca:96:6a:75:
c3:c8:de:f6:d1:48:eb:5d:1b:b8:70:63:7d:2e:60:fd:08:9a:
8c:69:52:8b:e4:b5:32:25:9e:ed:72:37:37:ac:dd:4b:25:8a:
a1:8b:2c:3a:9f:f0:43:61:a6:fe:66:48:6e:98:27:ba:83:5e:
86:05:26:1e:27:bb:bb:01:c5:da:63:3b:55:b3:75:1d:52:4a:
41:2e:37:10:e9:f9:1d:78:13:0c:30:c5:14:28:54:58:90:43:
0b:e0:65:4d:b2:dd:eb:b3:44:29:a7:cb:bd:40:d8:63:ff:ad:
c8:52:ba:cc:85:84:45:d7:bb:e7:20:0c:aa:07:00:ed:64:a4:
04:06:b7:12:c4:3f:54:d8:6a:4f:3d:d1:bf:10:ff:8c:ae:88:
f4:37:3d:ce:9b:8a:5a:41:24:b6:85:8f:5d:19:69:d8:61:4c:
70:5f:69:fe:00:07:a7:3c:07:88:4d:ae:96:79:c3:17:bd:b8:
98:68:cf:d5:96:5c:77:ea:05:c1:c2:40:44:d3:4d:a8:7b:dd:
78:65:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:48 2026 by rpki-client