Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa
File: XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa (raw, json)
Hash identifier: vt5PHv7coIM1JmNeX6jiBcQ3MwSimt+j/3Pge4DDNa4=
Subject key identifier: 5D:16:BE:A7:A5:6B:89:F2:72:E6:E8:0D:14:39:10:78:9D:AF:EE:98
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A4CEC14F8418EC0603FF9540B0A2
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202772
IP address blocks: 89.108.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a4:ce:c1:4f:84:18:ec:06:03:ff:95:40:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d16bea7a56b89f272e6e80d143910789dafee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:87:ee:32:78:6c:7c:95:6f:12:9c:60:c2:
26:2f:e1:e5:2f:a1:2a:22:84:36:16:3a:03:c1:f1:
57:ac:f9:2e:0c:60:de:15:78:27:b4:55:5c:35:98:
87:36:56:a6:97:b0:32:77:6d:f3:55:f2:a8:a8:5d:
3d:75:cf:8a:6a:fa:69:a7:f2:c8:60:2c:a0:48:38:
fe:46:43:4e:00:ca:c5:d7:27:38:d9:56:55:51:d5:
ac:6d:77:b0:c0:de:00:3b:84:71:36:b0:94:f8:c3:
db:64:7c:c1:b9:c4:8d:0e:c1:a2:51:e8:53:b9:86:
c6:3f:52:75:56:b2:39:86:a4:15:9a:79:4a:f5:58:
7d:c0:e7:8c:24:ce:6a:57:94:b8:ce:80:e6:66:b6:
22:54:f8:c8:73:73:62:80:7f:15:fd:87:af:44:87:
4b:2d:1f:2f:48:3c:b2:95:b4:55:69:33:5d:e4:b3:
42:c6:bf:19:1c:b3:4a:85:26:d1:14:71:e2:ef:e1:
30:17:ac:89:cc:b6:ac:cf:f0:cb:78:bc:9f:29:50:
1f:b9:99:5c:c6:e0:96:9b:38:5f:01:35:06:45:c3:
a1:a3:5f:d2:d8:8e:b4:08:64:5d:59:1e:b6:8e:17:
06:61:29:81:2a:8c:3b:88:2f:5d:2e:ed:42:8e:9e:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:BE:A7:A5:6B:89:F2:72:E6:E8:0D:14:39:10:78:9D:AF:EE:98
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/XRa-p6VrifJy5ugNFDkQeJ2v7pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.132.0/24
Signature Algorithm: sha256WithRSAEncryption
86:16:d1:e6:02:e9:d1:49:36:6b:2d:5c:f2:07:fa:c1:a3:a5:
d4:52:5a:7b:93:d8:89:9d:32:6b:19:1a:82:e5:f5:4f:aa:55:
08:86:2d:4f:29:f5:69:e4:40:c2:f5:d9:37:54:53:da:73:76:
f0:57:33:7a:a1:ad:59:dd:71:88:0b:18:2b:bb:d3:12:f1:2e:
1b:b5:7d:cb:a8:66:34:18:38:08:7f:11:7b:ad:6f:85:16:28:
66:5d:7c:7f:b4:ea:17:30:0f:9a:36:e1:cb:10:e3:f0:f1:eb:
9f:17:24:b9:c8:c6:a8:9c:67:1c:33:09:32:de:75:c2:3c:e5:
07:6b:ae:bc:49:86:8a:da:73:14:95:93:5f:ad:0f:30:37:ad:
e4:0a:a2:ad:f3:7e:75:3c:46:28:c3:85:74:47:7c:80:99:c3:
bb:5b:d5:3e:4f:52:78:cb:ad:72:7f:3f:d0:21:f9:80:f2:68:
02:b0:99:fa:2d:f9:d6:b7:4d:0a:00:44:b7:46:92:9e:11:88:
cb:f5:cc:2a:3a:3c:68:58:e8:da:88:1b:f1:5a:5f:32:0c:ca:
92:6e:e6:c4:dc:16:8c:d7:bd:6e:f2:74:5b:22:e4:ae:7f:93:
16:09:1f:c4:07:c5:02:9d:6c:61:4e:85:ae:8a:14:0a:25:a7:
32:70:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:57:40 2026 by rpki-client