Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/Xp2PmSoyw6vuED7OfEi_QaL00dc.roa
File: Xp2PmSoyw6vuED7OfEi_QaL00dc.roa (raw, json)
Hash identifier: ELBh/LCD8srsbWF+z8quU7XGWuHLmHPUfcz10VuYxEM=
Subject key identifier: 5E:9D:8F:99:2A:32:C3:AB:EE:10:3E:CE:7C:48:BF:41:A2:F4:D1:D7
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019A203173AEADC48EE156AB332FF13B2057
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/Xp2PmSoyw6vuED7OfEi_QaL00dc.roa
Signing time: Sun 26 Oct 2025 11:05:03 +0000
ROA not before: Sun 26 Oct 2025 11:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213473
IP address blocks: 77.92.160.0/21 maxlen: 21
77.92.160.0/24 maxlen: 24
77.92.161.0/24 maxlen: 24
77.92.162.0/24 maxlen: 24
77.92.163.0/24 maxlen: 24
77.92.164.0/24 maxlen: 24
77.92.165.0/24 maxlen: 24
77.92.166.0/24 maxlen: 24
77.92.167.0/24 maxlen: 24
185.225.56.0/22 maxlen: 22
185.225.56.0/24 maxlen: 24
185.225.57.0/24 maxlen: 24
185.225.58.0/24 maxlen: 24
185.225.59.0/24 maxlen: 24
2a14:e500::/29 maxlen: 29
2a14:e500::/30 maxlen: 30
2a14:e504::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:31:73:ae:ad:c4:8e:e1:56:ab:33:2f:f1:3b:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Oct 26 11:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9d8f992a32c3abee103ece7c48bf41a2f4d1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:c3:ad:67:70:4c:e1:59:d1:fe:b6:82:c5:
39:b3:24:5b:43:12:88:96:29:09:4a:26:32:ab:39:
26:98:f3:56:27:6b:29:33:fe:16:22:c8:bb:f1:ab:
db:89:98:a1:99:bb:f4:97:4c:4e:0a:a8:6e:78:da:
08:5c:95:b1:6f:29:70:59:12:70:1e:98:ec:57:08:
64:d2:11:8d:95:7b:66:b2:3a:40:fd:d0:4e:d1:59:
03:ed:eb:c9:cc:f5:32:ff:81:51:d2:df:7c:50:f9:
d4:f4:35:ec:f5:d0:3c:69:57:a7:3c:56:74:5f:b6:
87:9c:3e:df:34:8c:ee:10:3d:09:69:fe:96:47:30:
8e:fe:84:e1:0e:fe:e1:bf:f2:e9:08:66:29:5d:8d:
4a:25:cd:21:28:0d:58:41:3b:67:60:d2:cb:ee:99:
96:60:4e:04:7b:d6:ec:28:e7:df:18:f5:f7:dd:97:
ed:bd:e1:5d:9c:44:b3:98:47:37:ad:9b:18:26:4f:
d4:73:78:73:e7:34:fe:54:50:d0:b9:f2:87:1f:89:
61:23:8d:6d:f1:c5:a9:56:ee:71:bd:5a:6a:73:e8:
01:b3:67:0e:b0:c5:38:e8:59:25:de:b4:22:8b:bd:
9e:fc:4f:1c:8f:ae:01:c3:80:2d:84:ee:51:54:f7:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:8F:99:2A:32:C3:AB:EE:10:3E:CE:7C:48:BF:41:A2:F4:D1:D7
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/Xp2PmSoyw6vuED7OfEi_QaL00dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.160.0/21
185.225.56.0/22
IPv6:
2a14:e500::/29
Signature Algorithm: sha256WithRSAEncryption
b8:3f:f5:7d:00:89:cc:fb:0d:39:42:46:3e:8c:bb:6e:eb:db:
27:86:57:28:0d:03:bb:6f:17:87:52:c9:4c:45:33:28:cf:7e:
03:83:30:f5:9f:50:d5:d0:4b:2b:23:c4:54:fa:88:8d:db:18:
70:e4:e3:0e:70:22:6a:9c:7e:d8:69:5c:df:39:a2:d8:61:f5:
b2:c3:3d:1c:17:8b:54:56:a6:6b:1a:d5:3c:c1:8b:b8:e5:42:
06:53:79:11:db:af:c5:2e:ef:d9:14:e7:69:20:99:1d:67:d0:
26:5d:e5:b6:97:2b:b0:63:e2:70:79:d6:c5:61:43:15:eb:43:
f4:c6:6e:79:e4:f1:1d:95:c4:16:73:15:e7:d4:28:e1:3e:66:
61:20:22:7f:2e:17:19:a3:30:67:1f:67:41:56:a9:93:fc:bb:
21:92:4a:ca:70:f7:c3:42:77:e1:2d:ac:ad:10:de:14:c8:70:
79:4a:9b:e4:55:9d:b5:0b:cf:07:07:db:52:ac:dc:4f:64:78:
94:d8:56:f1:d0:22:7c:02:4f:01:03:07:40:0e:7f:6b:0f:52:
9a:cc:e7:f1:93:c9:51:37:3e:f4:9b:89:5c:4c:51:ab:2f:d4:
d4:7b:85:a9:dd:e8:ee:6e:99:12:24:82:57:e0:25:b1:24:e2:
91:3f:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:53 2025 by rpki-client