Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/xeKZmPgvPMOy0KwEWStwZbewpmQ.roa
File: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (raw, json)
Hash identifier: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=
Subject key identifier: C5:E2:99:98:F8:2F:3C:C3:B2:D0:AC:04:59:2B:70:65:B7:B0:A6:64
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F236906BB0086ACCC54E0136F933409D4
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/xeKZmPgvPMOy0KwEWStwZbewpmQ.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 193.222.50.0/24 maxlen: 24
193.222.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:bb:00:86:ac:cc:54:e0:13:6f:93:34:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5e29998f82f3cc3b2d0ac04592b7065b7b0a664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:17:8f:80:4e:1d:ed:d1:83:f1:56:ea:ff:
8f:0e:a6:e2:94:9f:c1:35:9b:f9:9f:36:df:16:20:
26:a1:f5:08:27:db:a4:3a:bc:26:58:9e:0e:c8:76:
a7:59:3f:a8:ab:c7:96:d2:c2:68:71:79:3f:8c:7f:
04:ac:a3:b1:e8:bd:b2:f0:73:ef:8b:15:e5:aa:69:
fa:59:2a:91:92:37:db:6e:75:64:87:b4:d8:0d:77:
ad:c9:00:c9:15:64:5d:bd:f3:bd:34:3c:97:ec:c8:
46:ef:3b:05:91:4f:b2:3e:f4:13:e8:eb:40:ef:cb:
04:01:56:3e:d7:db:1e:18:f5:77:51:f3:c0:be:9e:
bf:e6:d8:15:94:d5:94:8f:58:0c:86:60:fc:5a:f5:
70:ea:c9:f9:b4:73:13:11:39:66:d6:22:db:48:78:
98:9b:2d:df:59:d0:76:ba:37:66:0a:67:9a:2d:de:
45:a5:00:be:fb:26:68:93:b1:63:b8:02:5f:9a:0a:
39:bc:8b:d0:4e:0a:fb:dd:ab:44:7a:e7:72:7d:a6:
6d:02:6c:d1:75:50:af:9f:22:04:b6:ad:88:ba:7f:
ec:8a:3b:9e:64:e4:94:5b:09:9f:7d:4f:40:df:e1:
57:0d:fb:f1:f3:c9:61:9e:83:3f:29:02:99:1b:ac:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:99:98:F8:2F:3C:C3:B2:D0:AC:04:59:2B:70:65:B7:B0:A6:64
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/xeKZmPgvPMOy0KwEWStwZbewpmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.50.0/24
193.222.60.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:54:84:2e:cd:f7:02:70:01:a2:f4:c8:66:4b:45:0b:4b:ef:
c4:0f:2f:e5:42:db:47:32:7c:da:50:e5:1b:e0:5e:65:ef:31:
41:4c:c4:9a:75:89:67:88:5f:3d:b2:58:b0:3c:10:86:5a:46:
57:85:99:7b:29:27:75:49:e2:85:81:03:21:c9:32:e6:c3:52:
df:8f:a6:2c:13:2f:e0:2b:ba:85:98:8a:37:5b:c8:55:16:d8:
f7:0a:c8:10:ca:e4:66:93:05:34:53:88:05:f9:d8:8f:37:0b:
93:c4:ec:3a:45:8a:2c:7a:df:d8:62:76:cc:9c:f4:ce:58:53:
59:a3:79:03:cc:26:08:ae:dc:be:c4:fd:78:73:1c:2e:0a:01:
a1:4e:5a:47:88:49:d2:40:63:01:25:09:7e:45:f8:2b:59:2d:
a2:6d:08:5b:e3:5f:6e:1b:fa:17:90:1e:43:b3:10:0b:cc:12:
f0:cd:04:65:b9:8b:cf:96:07:c9:b6:28:4c:f9:d8:43:72:3c:
41:c5:2a:8b:69:f9:62:5a:5c:91:72:17:dc:44:49:9e:22:90:
c8:40:03:2d:0c:4a:1e:dc:1c:69:78:5d:8d:1c:ca:88:ad:e4:
11:02:83:9e:6b:c0:41:be:1e:33:f5:33:48:a0:31:e0:ad:b0:
7d:63:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:21:35 2026 by rpki-client