Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/XWNNEFomn9bKgvzZUcc40UaOsbg.roa
File: XWNNEFomn9bKgvzZUcc40UaOsbg.roa (raw, json)
Hash identifier: /H5U7m5xCacMvYYK2MppLjlzRXDKTMF2JjarWQi18pE=
Subject key identifier: 5D:63:4D:10:5A:26:9F:D6:CA:82:FC:D9:51:C7:38:D1:46:8E:B1:B8
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019FBE6DD069FE4D21EB4F566AFB7DEDA850
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/XWNNEFomn9bKgvzZUcc40UaOsbg.roa
Signing time: Sat 01 Aug 2026 17:44:55 +0000
ROA not before: Sat 01 Aug 2026 17:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51395
IP address blocks: 79.132.141.0/24 maxlen: 24
89.127.196.0/24 maxlen: 24
194.154.29.0/24 maxlen: 24
199.68.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:6d:d0:69:fe:4d:21:eb:4f:56:6a:fb:7d:ed:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Aug 1 17:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d634d105a269fd6ca82fcd951c738d1468eb1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:52:a1:55:70:e6:6b:93:a0:3a:df:bb:99:
44:78:81:ed:37:61:3e:c6:1c:3e:ba:53:20:62:66:
a0:c3:d7:30:e3:53:14:b2:12:ae:f5:49:37:48:87:
18:92:4f:b7:ca:dd:dd:c0:c0:d3:8d:5e:4d:73:7b:
25:bf:16:b3:d9:35:3f:99:e4:4f:92:f4:cc:f3:5d:
34:38:11:44:6f:63:70:91:27:d8:04:0b:7e:d5:20:
c1:d0:89:9d:99:70:6a:3c:95:d0:a6:e0:a3:ec:d9:
ae:3d:f8:e9:88:39:4c:8f:73:99:73:18:af:79:ad:
42:56:6a:de:79:f8:0e:6b:2c:ce:33:a2:20:ee:b3:
f2:55:70:de:c6:ae:bf:cb:71:b4:7b:b2:01:2c:b1:
93:98:02:b4:73:f4:d0:93:ac:47:10:c0:d3:d5:7d:
bf:a9:92:04:a7:30:6e:d9:38:2f:ab:a9:66:73:c5:
e5:5d:b4:e5:c3:92:57:cb:45:d8:30:a1:70:92:e4:
fe:86:e2:47:de:38:7a:74:d3:0c:1e:26:b2:6e:65:
a8:c0:cf:15:19:f7:0d:d4:47:66:5e:b3:39:dc:37:
8d:cf:a1:e6:5e:84:61:89:01:15:ee:03:22:77:c9:
1d:52:74:8c:3d:f8:fa:8d:c1:bc:62:98:fd:ae:91:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:4D:10:5A:26:9F:D6:CA:82:FC:D9:51:C7:38:D1:46:8E:B1:B8
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/XWNNEFomn9bKgvzZUcc40UaOsbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.141.0/24
89.127.196.0/24
194.154.29.0/24
199.68.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:36:7d:0a:97:92:9d:53:77:bf:3e:dc:ab:25:ca:fb:2c:89:
1b:70:cf:dc:ae:56:4a:5e:f8:13:1a:c7:70:de:f7:c7:c9:5a:
55:bc:46:cf:6a:9a:a5:63:52:06:18:d0:a7:f1:af:8a:bf:9b:
42:f1:f4:af:1a:67:e1:df:e7:60:9e:3f:4b:51:6a:f6:c9:22:
7e:3a:88:48:54:76:f7:86:3a:70:28:19:7c:71:a0:a0:c1:f3:
a2:84:ea:0e:82:e9:be:68:df:bb:74:f8:4b:5f:0f:ef:e4:6f:
8f:53:96:55:c7:e8:fc:6d:5c:8d:fe:21:23:41:1a:bd:1b:29:
9a:c3:3d:d9:e7:c5:d7:c7:74:d2:b3:09:0f:9b:e1:1b:99:73:
97:16:e9:f7:48:f0:48:1e:6a:93:50:13:6b:a1:9f:ad:58:0a:
fc:d1:90:50:39:8d:d8:1d:c1:23:dc:79:a4:3e:7f:7c:e0:11:
72:be:1b:e4:cd:52:06:07:0e:b3:a9:ca:6a:22:41:18:e8:54:
b2:69:6f:3b:65:a8:48:57:99:6b:7d:4f:56:33:57:23:87:b0:
2f:33:0a:97:de:ff:3d:d5:c7:0d:c8:23:56:fe:d5:80:09:ae:
66:3a:e0:59:ca:c2:ce:f2:24:ee:31:66:ea:e6:a3:11:cd:e5:
56:3f:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:52 2026 by rpki-client