Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XcjHhm2s-_DgGxnkhymCXA_8LAY.roa
File: XcjHhm2s-_DgGxnkhymCXA_8LAY.roa (raw, json)
Hash identifier: ZEGKV9msxuJLRuBkfjvKDmwdXRIH0zAqvFuaj1tx1ew=
Subject key identifier: 5D:C8:C7:86:6D:AC:FB:F0:E0:1B:19:E4:87:29:82:5C:0F:FC:2C:06
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019E723577E881C9E8F2ABAE32AA14FA8706
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XcjHhm2s-_DgGxnkhymCXA_8LAY.roa
Signing time: Fri 29 May 2026 05:29:27 +0000
ROA not before: Fri 29 May 2026 05:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:35:77:e8:81:c9:e8:f2:ab:ae:32:aa:14:fa:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 29 05:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dc8c7866dacfbf0e01b19e48729825c0ffc2c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:05:e6:48:75:9e:51:19:e0:59:3b:86:7f:
5b:f3:28:2c:29:54:01:cc:cd:c1:20:8b:46:7b:96:
a0:d9:26:aa:3d:78:3a:45:b2:25:c7:9b:e3:40:e2:
1d:51:f2:cf:3e:2e:47:4b:20:58:86:1a:4e:3f:40:
64:8d:f4:1c:d6:49:aa:02:9f:90:5d:f7:fb:bc:96:
01:3d:3b:01:64:92:63:cf:b0:21:9d:29:b8:56:e6:
fc:ee:a4:23:76:b1:ae:8b:45:43:e7:08:e5:92:eb:
e0:3c:6b:c0:7c:c2:f0:c8:5d:18:39:74:be:4b:71:
d6:5e:03:83:33:3d:6b:f4:2d:94:77:76:c6:fc:cf:
f7:ef:98:e2:ee:14:2c:25:9b:63:96:4c:1a:16:87:
90:85:b3:70:18:34:18:f0:2a:4e:f7:ae:a8:22:3e:
4a:ed:51:3e:0b:a7:db:5f:b6:7c:6b:bf:a9:05:fa:
b1:cb:b0:c5:59:21:46:b5:05:4c:02:4f:ed:c2:9b:
b6:bf:34:8b:2f:d6:93:c7:d1:32:0a:17:41:b6:87:
cc:1a:6b:d6:a2:85:00:75:6d:dc:e1:d1:4e:e9:76:
42:ec:df:10:59:54:82:b1:2d:37:71:05:65:37:dc:
89:b6:f8:73:22:c7:45:6f:af:c4:e5:8b:eb:c4:86:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:C7:86:6D:AC:FB:F0:E0:1B:19:E4:87:29:82:5C:0F:FC:2C:06
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XcjHhm2s-_DgGxnkhymCXA_8LAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ed:7c:10:53:17:6b:f9:9c:ad:27:e1:12:25:80:01:fa:cb:
a8:8b:65:2b:14:c5:15:72:23:df:22:12:da:23:49:33:a4:81:
07:be:b2:9b:15:a4:6a:56:95:36:1d:78:b7:7e:d6:db:67:a3:
1d:ad:54:77:7e:83:d6:37:f3:35:ca:01:2c:d8:7d:5e:35:dd:
fa:94:cd:8e:43:44:ec:83:6b:14:ff:af:a9:f3:13:35:49:2b:
d2:a8:db:52:ac:54:9b:36:a2:ee:18:b3:7e:1d:3f:54:53:6d:
ec:e2:f7:6f:d1:35:6d:4d:b7:65:5e:7e:21:40:bc:49:39:85:
aa:f6:d0:28:9c:da:0b:81:0e:fe:35:c8:5b:aa:82:fc:ec:f7:
47:99:1d:5b:09:7f:c0:9e:0e:35:c9:15:0d:13:e7:0b:c9:3c:
22:f3:42:dc:ff:3e:22:a6:30:3b:b0:b4:8d:27:54:40:2d:6b:
23:cc:3c:a0:2a:a9:14:54:a6:d3:9c:d3:ab:51:8f:3a:29:d5:
26:3d:29:25:29:d7:ac:8e:c2:83:fa:9c:1b:a4:c1:8b:b8:52:
f2:84:c9:a1:ce:ad:48:d9:94:6d:31:d9:a4:ae:36:14:4b:f1:
bc:31:16:75:4e:83:f7:a0:72:8b:fe:80:2f:f2:aa:ec:9c:ea:
54:59:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:50 2026 by rpki-client