Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/XjSBxKD5JhLJjzVv7GP_gfiNF3c.roa
File: XjSBxKD5JhLJjzVv7GP_gfiNF3c.roa (raw, json)
Hash identifier: dCvj9xgo9XL2Nd4S/EBh4OHfljrwiX9OeFIoStfHJH8=
Subject key identifier: 5E:34:81:C4:A0:F9:26:12:C9:8F:35:6F:EC:63:FF:81:F8:8D:17:77
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01A172E7AB2640700546DAC4855759E85B4F
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/XjSBxKD5JhLJjzVv7GP_gfiNF3c.roa
Signing time: Sun 25 Oct 2026 11:52:27 +0000
ROA not before: Sun 25 Oct 2026 11:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39386
IP address blocks: 37.224.192.0/24 maxlen: 24
84.235.0.0/17 maxlen: 17
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
84.235.56.0/23 maxlen: 23
84.235.95.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.120.0/22 maxlen: 22
84.235.122.0/23 maxlen: 23
178.86.50.0/24 maxlen: 24
193.19.244.0/24 maxlen: 24
212.118.154.0/24 maxlen: 24
2001:16a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:e7:ab:26:40:70:05:46:da:c4:85:57:59:e8:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Oct 25 11:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e3481c4a0f92612c98f356fec63ff81f88d1777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:03:b4:d6:9b:6f:5b:cf:00:36:04:86:46:
7c:1b:2a:37:67:89:9d:6e:54:7d:2e:0f:61:9f:c0:
e8:c4:36:56:b3:66:b9:35:e8:e9:30:3a:44:42:54:
9f:e2:37:eb:52:c7:07:44:f4:c3:50:76:c4:47:17:
28:f0:6f:20:73:da:2d:84:c9:cd:53:30:ff:7a:8c:
fa:ac:03:74:6f:ee:75:35:f7:4d:83:d8:e7:e9:a8:
e2:cc:66:2d:2e:66:44:b1:4b:d8:87:60:ce:68:07:
2e:93:61:76:8d:87:29:a0:e6:88:0d:1c:6b:4e:b5:
b1:5d:17:8c:be:5d:63:46:50:70:fd:03:89:d3:60:
13:d4:ab:0d:4d:20:d8:5e:35:c1:0a:a9:9f:f6:7b:
fb:3f:82:4d:5d:dd:62:15:85:3a:dd:16:ba:2c:02:
76:97:9f:c8:cd:48:d6:a6:c6:1c:b4:1a:63:be:e4:
43:a9:91:17:2a:78:a9:28:b4:62:ab:40:94:ea:84:
35:44:23:87:ab:21:63:df:62:33:e4:87:ee:8e:b1:
54:1e:5c:98:07:e3:89:2b:3b:89:e3:10:13:ed:c4:
4d:e8:50:4c:46:72:3b:c0:e9:46:a9:4c:cb:82:e5:
a0:10:a3:ce:e8:f6:92:a0:61:5e:75:00:fd:8a:37:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:34:81:C4:A0:F9:26:12:C9:8F:35:6F:EC:63:FF:81:F8:8D:17:77
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/XjSBxKD5JhLJjzVv7GP_gfiNF3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/17
178.86.50.0/24
193.19.244.0/24
212.118.154.0/24
IPv6:
2001:16a0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:15:44:32:5a:23:de:84:a2:a8:26:80:f0:37:44:ee:ca:17:
6f:50:3c:68:7b:b7:40:60:6e:91:a9:f9:6f:25:a8:14:51:d3:
c3:83:ac:ea:b6:a6:c6:55:ef:76:80:08:05:ad:37:52:d7:12:
06:98:c4:08:df:4c:98:f7:11:6f:61:45:7b:a7:70:f5:fe:20:
4a:2e:cc:ab:0e:d1:13:b3:78:8e:fd:00:c6:87:1f:70:2e:4c:
de:ed:d4:ad:3b:11:09:1b:e9:d4:89:b2:d0:d0:f2:20:bf:7e:
3d:2d:10:83:dc:bb:6c:00:ca:9d:ec:c5:f0:38:c8:27:4b:37:
25:ae:af:a0:05:f6:2c:40:fb:f0:34:ee:c0:8b:56:33:37:9f:
25:9d:71:de:e4:e4:22:ea:40:de:6a:bf:10:28:a1:ee:0b:de:
15:f4:05:db:c6:af:66:6c:02:2f:a0:c1:b2:8a:23:d6:94:62:
03:71:b6:80:8b:02:90:86:09:d7:f7:79:7d:24:f6:47:0a:85:
88:3f:54:68:f7:cf:05:db:7c:82:68:85:45:cd:20:11:c1:ee:
80:3d:37:6b:cb:52:99:91:0b:97:17:7e:7f:3a:58:5c:4c:6b:
64:c1:f8:f1:4c:3c:09:72:e6:80:9c:85:61:39:25:16:ae:2a:
a2:21:27:7f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAaFy56smQHAFRtrEhVdZ6FtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk
ZjNlMWUwHhcNMjYxMDI1MTE1MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTM0ODFjNGEwZjkyNjEyYzk4ZjM1NmZlYzYzZmY4MWY4OGQxNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8DtNabb1vPADYEhkZ8Gyo3Z4md
blR9Lg9hn8DoxDZWs2a5NejpMDpEQlSf4jfrUscHRPTDUHbERxco8G8gc9othMnN
UzD/eoz6rAN0b+51NfdNg9jn6ajizGYtLmZEsUvYh2DOaAcuk2F2jYcpoOaIDRxr
TrWxXReMvl1jRlBw/QOJ02AT1KsNTSDYXjXBCqmf9nv7P4JNXd1iFYU63Ra6LAJ2
l5/IzUjWpsYctBpjvuRDqZEXKnipKLRiq0CU6oQ1RCOHqyFj32Iz5IfujrFUHlyY
B+OJKzuJ4xAT7cRN6FBMRnI7wOlGqUzLguWgEKPO6PaSoGFedQD9ijeAmQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFF40gcSg+SYSyY81b+xj/4H4jRd3MB8GA1UdIwQY
MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt
YjU5MDk1N2Q5NDE1LzEvWGpTQnhLRDVKaExKanpWdjdHUF9nZmlORjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1
LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAJeDAAwQH
VOsAAwQAslYyAwQAwRP0AwQA1HaaMA0EAgACMAcDBQMgARagMA0GCSqGSIb3DQEB
CwUAA4IBAQBeFUQyWiPehKKoJoDwN0TuyhdvUDxoe7dAYG6RqflvJagUUdPDg6zq
tqbGVe92gAgFrTdS1xIGmMQI30yY9xFvYUV7p3D1/iBKLsyrDtETs3iO/QDGhx9w
Lkze7dStOxEJG+nUibLQ0PIgv349LRCD3LtsAMqd7MXwOMgnSzclrq+gBfYsQPvw
NO7Ai1YzN58lnXHe5OQi6kDear8QKKHuC94V9AXbxq9mbAIvoMGyiiPWlGIDcbaA
iwKQhgnX93l9JPZHCoWIP1Ro988F23yCaIVFzSARwe6APTdry1KZkQuXF35/Olhc
TGtkwfjxTDwJcuaAnIVhOSUWriqiISd/
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:51 2026 by rpki-client