Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Xp4_W5QH684_v2ntxjTbXLi7co4.roa
File: Xp4_W5QH684_v2ntxjTbXLi7co4.roa (raw, json)
Hash identifier: qVI7vhEbL0w9fKHM8ldDF9m2E1ZZAflMgjTOoFsG2NU=
Subject key identifier: 5E:9E:3F:5B:94:07:EB:CE:3F:BF:69:ED:C6:34:DB:5C:B8:BB:72:8E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A04C02E2D029D1014D722E3A4CD319BC3D
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Xp4_W5QH684_v2ntxjTbXLi7co4.roa
Signing time: Sat 29 Aug 2026 05:34:12 +0000
ROA not before: Sat 29 Aug 2026 05:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 95.173.40.0/24 maxlen: 24
95.173.42.0/24 maxlen: 24
95.173.44.0/24 maxlen: 24
95.173.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:02:e2:d0:29:d1:01:4d:72:2e:3a:4c:d3:19:bc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 29 05:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e9e3f5b9407ebce3fbf69edc634db5cb8bb728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:ca:f1:61:d2:e1:c5:77:32:f9:ba:53:67:
4f:76:81:f9:a3:4c:15:8e:1b:42:3c:e0:bc:e5:a4:
02:45:5c:a5:db:d5:3c:15:db:0a:fe:75:f7:06:2f:
7b:01:ca:27:33:02:32:78:58:92:25:ff:98:fc:6a:
6b:e6:bb:65:73:50:94:79:6c:01:a1:3f:80:a7:81:
35:c3:77:03:52:25:3f:13:bd:2a:42:dc:79:26:5f:
40:10:93:15:66:ec:0b:f0:ef:f1:20:53:08:54:b2:
0c:e5:9b:35:0f:4d:12:99:8c:54:bf:f0:2a:f7:12:
c9:30:cd:16:70:06:dd:e7:46:aa:6f:e6:5a:69:56:
f9:44:2a:9c:a0:e5:8e:f2:ff:9c:98:e4:6f:ed:98:
31:e0:1a:72:1f:77:bf:6e:75:a9:db:4f:f2:37:d7:
9d:73:ec:b8:bc:e2:60:c8:e7:8a:31:94:93:df:67:
e5:fb:fe:a2:30:84:af:30:3e:f2:1d:04:07:3a:51:
3b:eb:6e:db:b9:d6:cb:b6:26:77:e2:b9:ef:71:79:
ba:3f:f1:bb:c9:93:83:24:0a:b3:b8:86:af:7f:6f:
56:6b:5a:6d:f0:cd:e5:0a:26:64:5d:e3:b3:d2:ba:
2b:b1:84:4e:a2:3a:a6:12:33:23:fa:de:97:97:e3:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:3F:5B:94:07:EB:CE:3F:BF:69:ED:C6:34:DB:5C:B8:BB:72:8E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Xp4_W5QH684_v2ntxjTbXLi7co4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.40.0/24
95.173.42.0/24
95.173.44.0/23
Signature Algorithm: sha256WithRSAEncryption
09:9d:de:91:02:56:cc:f9:54:d0:bf:60:09:48:24:df:78:ab:
19:d9:b5:21:ce:86:f5:85:56:87:8b:37:9a:72:69:1f:44:64:
77:33:cc:ee:72:2b:f0:d7:ab:74:4d:0b:92:34:3e:5c:7e:1f:
e2:db:e6:d1:ad:3a:db:e5:27:25:4d:6c:6d:84:76:f2:e9:c6:
af:ae:50:03:3f:2a:2f:6d:39:2c:76:3e:28:8c:6a:be:83:9e:
e7:0f:cb:17:26:bc:dc:d2:b7:5e:ff:86:8c:f5:f5:f7:88:f8:
c2:12:b8:e3:0a:9b:96:4b:f8:b3:51:c2:6e:6c:96:a1:d5:af:
88:6e:78:94:95:e5:15:75:e6:6a:19:83:4d:09:13:b8:d4:e6:
21:93:ea:d9:f0:27:2b:82:dc:21:2c:9e:03:98:10:63:2c:01:
9f:a8:e4:ff:75:f8:ef:d3:40:49:ca:6b:a8:b9:1f:03:34:47:
38:cd:c0:da:5f:b5:20:c7:6c:a2:ef:16:59:ef:ba:24:61:7f:
b4:d4:84:79:4a:5f:19:30:0b:7f:68:21:5b:9f:0a:d6:5e:4e:
d3:ef:8e:3a:cd:a9:9a:48:ae:ef:06:8b:a9:80:db:6b:97:0a:
e7:00:9b:0d:f2:f4:bb:7e:0f:9a:24:24:52:93:ee:bd:b5:f5:
a4:c0:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:21:59 2026 by rpki-client