Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/xdX0VrTVG7c4ScLml_1qkCmtiiE.roa
File: xdX0VrTVG7c4ScLml_1qkCmtiiE.roa (raw, json)
Hash identifier: M7mCvRr7szZ+UQTBMebMCqcIwEnnqv3tYiKhcgcsC6w=
Subject key identifier: C5:D5:F4:56:B4:D5:1B:B7:38:49:C2:E6:97:FD:6A:90:29:AD:8A:21
Certificate issuer: /CN=debd0ce04c1020a693e6da7dd7964978b4bf75c1
Certificate serial: 019FB85301E459167A2C66B3DE1CE87CD7D2
Authority key identifier: DE:BD:0C:E0:4C:10:20:A6:93:E6:DA:7D:D7:96:49:78:B4:BF:75:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/xdX0VrTVG7c4ScLml_1qkCmtiiE.roa
Signing time: Fri 31 Jul 2026 13:17:55 +0000
ROA not before: Fri 31 Jul 2026 13:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39764
IP address blocks: 193.93.208.0/22 maxlen: 22
193.93.208.0/24 maxlen: 24
193.93.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:53:01:e4:59:16:7a:2c:66:b3:de:1c:e8:7c:d7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debd0ce04c1020a693e6da7dd7964978b4bf75c1
Validity
Not Before: Jul 31 13:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5d5f456b4d51bb73849c2e697fd6a9029ad8a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:f3:a7:4e:1e:60:cf:22:59:1a:1d:18:da:
65:5e:48:22:88:4e:a0:d7:87:56:b8:e5:04:a0:7c:
74:1a:f5:6a:2f:eb:8f:c4:26:0d:a5:7c:01:31:89:
0b:20:e4:94:2a:3e:ce:5f:74:17:3a:f6:38:31:4c:
77:7a:3f:3d:56:c9:02:61:50:a4:21:61:cc:7a:44:
95:9f:60:a8:cc:07:48:37:b0:95:47:ed:cb:08:11:
23:73:b5:f3:40:2a:18:32:4c:bd:4a:35:29:7d:68:
94:1f:06:56:ce:36:fc:8c:39:37:0b:ea:22:0d:05:
67:31:eb:e0:4d:14:66:e0:58:2e:ea:77:28:07:ce:
c4:d4:86:26:83:40:c2:31:10:2c:ed:c9:d3:62:ef:
f1:00:ba:0b:10:eb:4b:60:91:82:87:91:ed:0f:d0:
d0:7f:c5:8b:28:8a:60:e5:6f:8f:75:f5:5e:ad:56:
5e:c5:cf:cd:93:6a:9e:9c:1f:99:07:23:74:d7:c1:
b8:c2:e7:91:06:10:d5:50:10:38:99:44:f9:bb:ed:
aa:1b:e0:c1:bf:fb:a8:c9:24:6e:df:7a:a1:1f:d3:
86:ad:fc:46:fb:3e:40:b9:19:07:5d:0d:55:76:3d:
6d:d8:8b:65:ce:87:b2:64:ab:b4:e5:17:23:ef:32:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D5:F4:56:B4:D5:1B:B7:38:49:C2:E6:97:FD:6A:90:29:AD:8A:21
X509v3 Authority Key Identifier:
keyid:DE:BD:0C:E0:4C:10:20:A6:93:E6:DA:7D:D7:96:49:78:B4:BF:75:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/xdX0VrTVG7c4ScLml_1qkCmtiiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:06:1d:7f:82:97:95:63:d8:12:e1:1b:6d:6b:54:d4:df:52:
21:81:ec:f4:27:45:5b:ca:cb:38:6c:bc:77:84:4d:da:14:6e:
c7:2a:0c:64:9f:bb:a7:17:2c:26:ec:0e:fa:1f:6c:58:88:4a:
47:7d:d9:8f:22:13:cd:8b:dd:98:1f:bd:ca:92:d7:7d:86:82:
d1:f5:9d:30:56:4e:3e:2f:42:71:d7:20:72:bd:d0:61:14:e2:
dd:80:ad:1f:4f:f8:37:84:af:cc:9d:27:18:0a:9e:02:d7:98:
e5:9c:09:28:1b:d6:5e:ab:69:9a:8f:74:65:4c:e6:34:79:df:
68:97:81:64:d5:8e:84:ca:8f:ff:f5:e4:e7:44:8d:8e:c6:5c:
bd:ba:b0:e8:52:c9:a3:56:87:2c:60:3c:1f:e8:37:89:d9:84:
9f:47:5c:ac:3a:e1:bc:2d:e0:46:5b:03:0e:16:ea:38:4e:81:
b0:05:38:04:52:23:40:c3:84:24:39:8a:32:55:e6:8b:8a:53:
e4:e0:03:0a:3c:6e:c9:c3:cd:39:f3:c7:c2:d6:fe:e5:b8:2c:
b7:e3:fb:3f:18:ac:50:ad:d0:14:1c:8f:7c:0d:39:06:4c:c6:
e6:c0:3e:07:20:e5:24:a3:c5:4c:9f:00:12:d6:80:59:7f:61:
ab:d0:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:48:16 2026 by rpki-client