Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/XBtHtuKci1agMYoAIbxlgLgNorQ.roa
File: XBtHtuKci1agMYoAIbxlgLgNorQ.roa (raw, json)
Hash identifier: K/XN2YjLK2jmisrBtvQv+NBYLEC9Bay9uqdYWiM4dHY=
Subject key identifier: 5C:1B:47:B6:E2:9C:8B:56:A0:31:8A:00:21:BC:65:80:B8:0D:A2:B4
Certificate issuer: /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial: 01A169148165395DE708E27D977FCCEE144F
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/XBtHtuKci1agMYoAIbxlgLgNorQ.roa
Signing time: Fri 23 Oct 2026 14:05:13 +0000
ROA not before: Fri 23 Oct 2026 14:05:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201706
IP address blocks: 109.238.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:14:81:65:39:5d:e7:08:e2:7d:97:7f:cc:ee:14:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Validity
Not Before: Oct 23 14:05:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c1b47b6e29c8b56a0318a0021bc6580b80da2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:e4:5f:f9:40:76:c1:93:9e:dc:02:bb:95:
67:76:fd:ce:01:67:5a:87:11:76:39:a1:64:03:2c:
cf:f9:df:05:56:c6:4d:6e:55:8f:f6:d6:23:6f:5d:
0c:a8:7e:a4:b2:81:14:92:2f:ed:2b:7a:70:49:8d:
a8:3b:a3:88:5c:96:cf:92:fa:99:c7:52:79:a1:4e:
81:28:19:31:cb:34:a4:59:67:fc:fc:ee:61:17:d8:
78:8d:f0:ad:07:7a:f5:2f:79:bf:ef:d2:df:e8:3e:
64:47:70:56:a0:55:cb:9a:d5:ae:4b:47:5b:0b:4e:
e3:da:7c:0d:52:ae:91:ff:1e:e2:86:0b:8b:af:42:
a6:e7:a9:85:f3:ba:0f:98:dc:67:bd:c9:24:d5:f4:
98:60:d7:5e:a9:7d:4d:ea:ae:8b:38:ba:56:96:0c:
26:af:7c:f2:f9:0d:05:26:7b:51:cb:23:42:34:91:
56:df:eb:74:64:95:77:92:71:84:ee:2c:d9:0e:5c:
30:9d:e0:cb:cd:d2:b2:c3:21:af:72:77:ca:bc:e8:
1c:cf:e7:9b:62:e2:90:5f:db:e3:3a:8f:1f:0c:5d:
dd:1f:70:be:35:d8:37:f5:ab:8c:de:ef:5f:fc:dc:
48:8e:3f:e2:96:8d:74:c5:a5:60:ae:7e:9b:d8:82:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:47:B6:E2:9C:8B:56:A0:31:8A:00:21:BC:65:80:B8:0D:A2:B4
X509v3 Authority Key Identifier:
keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/XBtHtuKci1agMYoAIbxlgLgNorQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.91.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e3:95:4a:a7:78:e3:e0:e2:79:1b:1e:a6:83:c3:85:07:ef:
c8:47:64:3a:e1:ff:df:12:35:cb:78:60:85:7d:29:0a:ba:f7:
bb:69:da:24:8d:da:25:9f:fa:38:2b:57:7c:a5:2f:20:1f:e4:
a0:3b:5a:05:c3:d2:97:8b:13:6f:f7:80:69:a0:a0:76:d8:74:
04:3b:c9:13:d1:b5:65:1c:30:65:f4:ab:89:99:86:08:98:64:
22:81:ff:f9:16:28:2a:38:dc:fe:ed:1e:dd:62:b9:17:b7:5a:
6a:2f:be:12:10:fe:1c:71:f0:a7:24:de:01:d2:10:8a:53:05:
cd:9c:21:3b:1c:f3:bb:7f:ca:5c:2f:14:a2:4a:7b:c2:fa:d5:
86:9e:28:85:fc:4a:91:30:4e:62:58:76:1b:59:55:70:13:03:
21:1a:54:43:a4:06:79:bc:a3:cd:29:f8:b1:a5:a3:ee:6c:e7:
de:f5:58:d3:61:b1:25:dc:ed:c9:03:81:68:13:0f:9c:a8:2a:
72:54:f7:a8:62:2e:42:4e:28:12:8d:d7:4c:ed:a6:4e:38:f9:
ce:0f:10:42:51:75:8b:00:ab:b3:67:8a:b7:84:a8:c0:de:d6:
4d:fc:03:32:2c:cd:ac:7b:b7:aa:58:83:3b:ef:b1:7b:ff:7c:
40:75:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:56 2026 by rpki-client