Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/xpb_4TQ4jr3wXdmOH4TmTSAciVY.roa
File: xpb_4TQ4jr3wXdmOH4TmTSAciVY.roa (raw, json)
Hash identifier: haxegJLOK9S5RhTlif6LHDSgEUbfLGBOa4/aXPhGpS0=
Subject key identifier: C6:96:FF:E1:34:38:8E:BD:F0:5D:D9:8E:1F:84:E6:4D:20:1C:89:56
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01A15BD879862432A3E1D1C7784255F755DE
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/xpb_4TQ4jr3wXdmOH4TmTSAciVY.roa
Signing time: Wed 21 Oct 2026 00:24:35 +0000
ROA not before: Wed 21 Oct 2026 00:24:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39386
IP address blocks: 37.224.192.0/24 maxlen: 24
84.235.0.0/17 maxlen: 17
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
84.235.56.0/23 maxlen: 23
84.235.95.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.120.0/22 maxlen: 22
84.235.122.0/23 maxlen: 23
178.86.50.0/24 maxlen: 24
193.19.244.0/24 maxlen: 24
212.118.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:d8:79:86:24:32:a3:e1:d1:c7:78:42:55:f7:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Oct 21 00:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c696ffe134388ebdf05dd98e1f84e64d201c8956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:53:83:2d:f7:10:0e:55:1d:0f:2d:4c:6c:
5a:34:58:43:05:d1:e5:20:17:a9:fd:6d:d6:36:d2:
39:f7:e6:a0:e6:6e:f8:15:26:18:29:e7:75:fc:9a:
41:7a:37:48:4b:ec:1a:00:cd:f5:89:72:25:2c:0b:
d1:bd:62:89:9c:9e:f0:e6:d3:43:a4:99:7d:fd:8d:
c0:00:ab:03:73:0f:7a:c7:db:1e:78:15:9d:cc:41:
8c:da:c3:f0:96:b5:7e:24:4a:c4:05:67:b2:1a:23:
6e:9c:c3:da:35:c9:2b:08:5b:45:5f:d1:67:bc:43:
de:85:c9:9c:77:ae:ca:6d:68:95:13:87:10:97:88:
75:54:eb:f3:59:a2:65:bd:45:aa:a1:80:98:79:97:
31:56:4c:e4:bf:07:1c:34:72:59:c5:1a:ae:c8:06:
a6:32:95:b4:f5:1c:66:75:1f:8d:aa:da:b4:15:30:
fe:45:cd:d6:1c:fc:0e:4c:3e:97:cc:ad:9a:6a:a8:
aa:d1:1c:34:f1:f4:86:ef:29:09:c1:7d:85:8e:ce:
1b:c7:9b:fb:c3:57:b4:96:a8:64:41:5e:e1:39:b4:
23:80:b1:52:82:aa:89:65:28:49:37:6b:22:3b:c3:
2c:72:ec:8d:1e:42:be:be:65:22:be:64:13:38:55:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:FF:E1:34:38:8E:BD:F0:5D:D9:8E:1F:84:E6:4D:20:1C:89:56
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/xpb_4TQ4jr3wXdmOH4TmTSAciVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/17
178.86.50.0/24
193.19.244.0/24
212.118.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:78:04:b3:c1:4e:6e:6f:2c:e8:40:07:27:d6:67:3d:c5:5d:
c1:10:0b:9e:8f:b8:90:b7:7f:c7:0c:c7:67:f1:a4:ed:fe:29:
05:6a:fe:e9:1d:db:a7:57:76:27:2a:2d:7b:b1:2b:8e:83:47:
6f:a9:42:8e:e3:f6:60:5c:39:39:30:aa:7d:ee:dd:17:20:b7:
5e:b7:26:c2:54:b9:7e:de:ef:ff:fa:0d:29:86:cb:4e:e6:0b:
8d:4b:ac:e2:d7:52:25:92:de:95:75:a5:ab:b7:ac:43:fc:f9:
9d:43:a0:c9:c7:49:03:93:47:4a:47:01:4a:54:4b:03:84:89:
af:1c:0f:ab:9e:32:12:a4:ce:49:41:9a:c4:ab:88:00:9b:e7:
c3:e8:3a:0d:c8:6b:de:0e:fc:17:a6:86:9a:6e:ec:6d:6e:55:
be:26:30:26:28:d9:59:b3:50:e6:a2:93:8a:04:8d:4b:d9:55:
be:36:3c:cd:7f:4f:f0:38:0c:4b:4b:af:64:1c:f9:0f:d6:c1:
33:87:2f:02:67:57:93:32:86:21:19:70:41:a7:5a:13:45:56:
95:26:1a:29:b2:81:2a:2f:b7:bf:fa:04:c1:a1:3b:5a:d2:9f:
d7:56:5e:6d:db:fb:eb:de:1d:18:fa:64:08:b8:66:8b:66:6c:
47:4f:24:c2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaFb2HmGJDKj4dHHeEJV91XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk
ZjNlMWUwHhcNMjYxMDIxMDAyNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjk2ZmZlMTM0Mzg4ZWJkZjA1ZGQ5OGUxZjg0ZTY0ZDIwMWM4OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm5Tgy33EA5VHQ8tTGxaNFhDBdHl
IBep/W3WNtI59+ag5m74FSYYKed1/JpBejdIS+waAM31iXIlLAvRvWKJnJ7w5tND
pJl9/Y3AAKsDcw96x9seeBWdzEGM2sPwlrV+JErEBWeyGiNunMPaNckrCFtFX9Fn
vEPehcmcd67KbWiVE4cQl4h1VOvzWaJlvUWqoYCYeZcxVkzkvwccNHJZxRquyAam
MpW09RxmdR+Nqtq0FTD+Rc3WHPwOTD6XzK2aaqiq0Rw08fSG7ykJwX2Fjs4bx5v7
w1e0lqhkQV7hObQjgLFSgqqJZShJN2siO8MscuyNHkK+vmUivmQTOFXJCwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMaW/+E0OI698F3Zjh+E5k0gHIlWMB8GA1UdIwQY
MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt
YjU5MDk1N2Q5NDE1LzEveHBiXzRUUTRqcjN3WGRtT0g0VG1UU0FjaVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1
LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAJeDAAwQH
VOsAAwQAslYyAwQAwRP0AwQA1HaaMA0GCSqGSIb3DQEBCwUAA4IBAQCceASzwU5u
byzoQAcn1mc9xV3BEAuej7iQt3/HDMdn8aTt/ikFav7pHdunV3YnKi17sSuOg0dv
qUKO4/ZgXDk5MKp97t0XILdetybCVLl+3u//+g0phstO5guNS6zi11Ilkt6VdaWr
t6xD/PmdQ6DJx0kDk0dKRwFKVEsDhImvHA+rnjISpM5JQZrEq4gAm+fD6DoNyGve
DvwXpoaabuxtblW+JjAmKNlZs1DmopOKBI1L2VW+NjzNf0/wOAxLS69kHPkP1sEz
hy8CZ1eTMoYhGXBBp1oTRVaVJhopsoEqL7e/+gTBoTta0p/XVl5t2/vr3h0Y+mQI
uGaLZmxHTyTC
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:09 2026 by rpki-client