Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XlBnEKNFcKZNC_VSLdsb_DoowZA.roa
File: XlBnEKNFcKZNC_VSLdsb_DoowZA.roa (raw, json)
Hash identifier: 4GGHBRTfYALr7RSdqmOTZDljSTphKdIlhZx99zEseXg=
Subject key identifier: 5E:50:67:10:A3:45:70:A6:4D:0B:F5:52:2D:DB:1B:FC:3A:28:C1:90
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A11CA793C0A3CCFCA88E81F301E8E13448
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XlBnEKNFcKZNC_VSLdsb_DoowZA.roa
Signing time: Thu 08 Oct 2026 17:55:06 +0000
ROA not before: Thu 08 Oct 2026 17:55:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61400
IP address blocks: 179.254.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:a7:93:c0:a3:cc:fc:a8:8e:81:f3:01:e8:e1:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 8 17:55:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e506710a34570a64d0bf5522ddb1bfc3a28c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:81:00:42:1f:ce:0d:f2:ee:ad:d1:d5:c7:
24:22:67:b2:21:e6:d9:24:ca:18:6b:18:7c:c3:32:
7a:6a:dc:8c:61:10:4c:a9:95:10:45:6f:e6:ab:8f:
27:14:a5:a5:d7:5a:12:50:d0:08:7e:f4:ae:3c:4a:
ce:9f:8f:bb:4c:5d:22:13:ea:4a:50:4a:97:bf:20:
e6:e7:e2:c9:2a:81:08:b8:fb:55:fe:a6:04:92:60:
b7:78:2b:bb:e8:d8:c5:83:23:fa:a1:22:2d:7d:76:
ea:fd:1c:d0:d0:89:e0:da:21:4e:39:8f:9f:7b:26:
cc:ad:11:cf:f7:db:67:83:9f:5b:c4:7b:81:07:00:
ad:69:3a:d5:92:4b:a7:41:e5:c6:07:f2:f9:24:da:
6c:b5:96:5e:a3:71:1e:b2:81:6e:1f:bc:27:e9:fe:
1b:fe:d0:dc:02:b1:58:2a:c7:65:2c:66:a6:3d:6b:
e9:00:b8:1f:1f:ee:fa:58:d3:4f:2e:60:85:57:5d:
e8:6b:aa:ab:6e:76:8b:96:bc:8b:36:a7:b5:db:ca:
11:b0:82:ac:f0:e6:fc:0e:99:be:d4:a4:bf:88:cb:
2e:99:a0:76:6d:72:48:3b:e1:6f:86:8f:ee:7b:41:
2c:60:17:4e:a0:e7:6d:6c:b4:a5:13:95:a3:8a:64:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:67:10:A3:45:70:A6:4D:0B:F5:52:2D:DB:1B:FC:3A:28:C1:90
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XlBnEKNFcKZNC_VSLdsb_DoowZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f9:0c:e0:13:91:4d:10:60:bb:00:4e:c3:a7:a0:2a:d5:66:
a9:c3:25:7c:b7:0d:7a:29:8a:0b:21:33:c3:68:0e:ff:d7:b5:
7a:c8:a2:e9:a1:02:89:c2:f8:83:d9:42:21:f8:db:66:2a:12:
c2:6d:f4:cd:94:d2:37:4c:82:ea:7d:e1:05:be:4c:47:41:28:
c1:f7:cf:95:68:f6:18:b0:f2:69:89:41:da:05:96:f4:fc:cd:
b7:c6:94:db:a2:59:5f:1f:09:c6:8c:8a:45:0d:f4:a8:43:d8:
09:db:cc:41:a9:ba:3d:42:ed:7f:ff:e5:e5:09:94:71:d9:10:
6b:97:0e:fd:23:ad:63:99:18:2a:e5:ee:dd:f8:16:a2:b9:4b:
63:8a:09:49:20:4b:3c:dc:af:7f:ca:1e:1e:93:26:ad:bb:8d:
bc:19:2b:87:d4:de:57:17:ec:33:1c:5f:87:dd:1c:69:ad:7b:
69:da:8f:1c:8a:2b:d1:63:92:2d:a9:22:e8:03:88:e9:12:7a:
59:a2:25:be:00:92:9c:9e:a2:9b:e1:e6:17:8f:5b:82:56:49:
40:8d:3b:5b:f6:5e:26:87:3b:0e:09:6d:ed:52:50:b6:92:26:
b3:44:21:ba:bf:3a:ce:d0:4d:e6:ab:2b:b8:15:87:50:f7:5b:
a8:60:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:29 2026 by rpki-client