Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XEsQg41McX5HnP6VLnTlwxiJv2M.roa
File: XEsQg41McX5HnP6VLnTlwxiJv2M.roa (raw, json)
Hash identifier: zjJWifVcFFqJ9YGHH0CQi93SqtqXX72TELXz8xDUNqA=
Subject key identifier: 5C:4B:10:83:8D:4C:71:7E:47:9C:FE:95:2E:74:E5:C3:18:89:BF:63
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A16484CCFC45AF8D93C274E4C9C72C8202
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XEsQg41McX5HnP6VLnTlwxiJv2M.roa
Signing time: Thu 22 Oct 2026 16:49:47 +0000
ROA not before: Thu 22 Oct 2026 16:49:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51659
IP address blocks: 91.206.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:84:cc:fc:45:af:8d:93:c2:74:e4:c9:c7:2c:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 22 16:49:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4b10838d4c717e479cfe952e74e5c31889bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:de:68:03:0a:42:00:23:22:67:5a:2b:1e:
f9:71:33:d3:b0:73:68:c8:30:0c:26:55:88:70:96:
25:34:7d:3d:d1:e3:eb:98:55:9c:78:96:44:2a:46:
f6:df:45:20:29:bd:8f:54:87:fc:f4:9d:32:94:6b:
51:e6:ad:f0:20:d7:70:6e:37:72:a9:84:82:e6:d1:
7a:1b:06:d9:fa:d0:ac:75:d0:74:63:bf:dd:f4:1b:
8d:5d:24:86:f0:8e:0c:6e:b8:c7:f1:df:d7:b8:eb:
0c:cf:2b:05:b2:4a:99:6e:56:2e:9d:c1:29:82:bf:
12:ea:36:94:38:ac:f4:be:26:e5:3f:f5:03:e2:13:
c2:f4:46:88:6e:7f:0c:ef:6f:54:19:12:9a:ec:ed:
ab:7e:62:81:20:37:06:7e:9c:99:89:56:ef:84:27:
fb:42:03:ea:40:b7:ef:b7:b9:31:5a:cd:87:4c:b1:
ed:a5:1a:77:8c:41:ee:0d:e2:18:5f:23:2a:62:25:
bc:06:47:7b:64:49:a1:f4:b7:e5:96:00:06:9b:bb:
c5:c1:40:db:40:68:f3:b4:53:0a:14:e4:74:62:d3:
37:91:dd:a3:d3:54:e2:58:ac:fd:3d:c7:98:10:04:
45:e6:23:a7:c0:61:22:a2:82:16:20:39:cc:3a:2e:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:10:83:8D:4C:71:7E:47:9C:FE:95:2E:74:E5:C3:18:89:BF:63
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XEsQg41McX5HnP6VLnTlwxiJv2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.92.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:05:ea:bd:ff:32:2c:72:f7:5f:ad:7a:5c:33:f3:ce:7f:e2:
74:1d:be:9a:b9:df:5b:2f:b6:43:50:c6:a3:9c:be:d7:e2:c1:
20:ef:ad:00:0e:08:a4:8e:a5:60:b0:98:89:3f:33:00:ab:6c:
2b:73:c4:d0:8f:49:97:b6:1b:d5:d6:fc:69:cf:a6:a2:48:61:
e6:4a:dd:80:e4:5a:8b:0f:7a:b5:df:5b:7d:61:28:c3:cc:c2:
f9:6b:2e:02:b0:e7:77:9b:17:21:68:b0:8a:cd:f7:6a:17:cc:
4b:66:ae:cc:7f:09:39:3b:c8:cb:69:af:9d:97:3c:a5:bf:d8:
af:43:01:93:13:bb:5e:6b:a5:60:58:00:a1:4b:40:d2:8b:c1:
35:ce:6a:fd:39:25:80:f3:47:21:ec:17:22:7d:e5:6a:2d:73:
48:5a:38:34:12:84:63:a3:2b:8b:53:7f:c6:65:d3:9b:e6:d3:
51:2d:ae:3b:13:c9:5e:5a:32:1c:26:d3:7c:c9:14:65:e8:27:
75:6a:de:56:1b:65:12:ee:b9:94:35:b6:f4:1c:26:43:d4:17:
65:22:fa:28:e1:9f:ea:ab:4d:a0:4c:9d:7c:6d:2a:cf:65:70:
23:cb:c9:ab:bc:66:0f:ef:7e:d5:6d:ee:02:fa:30:70:69:27:
ac:a3:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:33:03 2026 by rpki-client