Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/XEKXrUtUSEHKeRecg-HKhQKGsRA.roa
File: XEKXrUtUSEHKeRecg-HKhQKGsRA.roa (raw, json)
Hash identifier: 9+YjXqvRCQzbgAOAmscmNkEvHBqrZxLodjNclOm5rLY=
Subject key identifier: 5C:42:97:AD:4B:54:48:41:CA:79:17:9C:83:E1:CA:85:02:86:B1:10
Certificate issuer: /CN=2b9f73687a853e322492c36912c1865141c1ecd0
Certificate serial: 019F6B60629364D248949E766EFDF0433B32
Authority key identifier: 2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/XEKXrUtUSEHKeRecg-HKhQKGsRA.roa
Signing time: Thu 16 Jul 2026 14:41:46 +0000
ROA not before: Thu 16 Jul 2026 14:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201843
IP address blocks: 193.58.96.0/23 maxlen: 23
193.58.96.0/24 maxlen: 24
193.58.97.0/24 maxlen: 24
193.58.98.0/24 maxlen: 24
193.58.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:60:62:93:64:d2:48:94:9e:76:6e:fd:f0:43:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9f73687a853e322492c36912c1865141c1ecd0
Validity
Not Before: Jul 16 14:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c4297ad4b544841ca79179c83e1ca850286b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:9c:30:66:28:4a:e5:69:7b:12:db:28:20:
4b:af:f6:db:74:7b:48:6f:09:30:9d:da:ee:d0:a6:
78:b3:03:1a:78:60:cd:95:ae:50:4a:e9:79:cc:26:
33:50:03:c2:77:8a:bf:8e:1a:45:e9:52:cd:68:17:
be:a5:3a:94:46:a9:cb:58:89:e1:ab:47:6d:41:d6:
50:3b:ab:f6:cd:a6:fc:3a:ee:03:3e:52:69:a4:94:
39:48:d8:6c:da:0b:c7:42:6b:13:72:fe:41:78:c4:
f1:8b:7d:2e:87:54:ef:7b:2f:10:a8:ec:3e:8a:56:
62:00:ab:07:29:53:72:67:04:1c:39:bc:d1:17:67:
0f:3a:7b:60:8b:05:27:a1:6f:a1:af:b0:00:67:3e:
ac:4f:cb:46:be:26:5f:3f:39:ba:39:38:f2:71:da:
a2:ee:62:0b:3d:90:7e:5c:b5:16:02:ff:aa:6b:e8:
51:9a:f0:43:6f:a4:24:96:a1:ac:d6:2d:91:9e:d5:
5e:0f:01:4a:89:ea:ff:d2:a4:f7:75:dd:d0:be:05:
41:c1:34:2c:5d:29:d7:c4:8f:77:dd:21:d2:c9:2a:
c8:a8:0d:b9:d7:3c:04:76:a8:e0:1b:c8:94:e2:63:
d2:d0:53:a2:7f:af:59:1e:6c:5a:80:b7:53:43:41:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:42:97:AD:4B:54:48:41:CA:79:17:9C:83:E1:CA:85:02:86:B1:10
X509v3 Authority Key Identifier:
keyid:2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/XEKXrUtUSEHKeRecg-HKhQKGsRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:27:86:90:80:be:5b:5c:88:5e:8a:36:be:7c:03:73:38:77:
a4:ea:01:b7:f6:22:2c:e3:e5:02:59:23:f6:56:21:ff:ba:49:
b2:c0:f6:11:20:4c:6a:22:60:90:ae:43:11:44:b9:ba:03:2c:
f1:2d:2e:3b:13:19:2d:d8:c2:cb:f2:66:53:4e:6e:10:67:0c:
90:4b:f0:42:f2:af:75:6c:49:aa:a7:f0:10:0b:68:73:d7:63:
1d:06:5c:52:f9:99:b9:a5:7a:79:39:28:d5:78:52:3a:82:3c:
25:f2:8a:55:5f:5b:5e:01:d4:5d:df:f7:25:3f:be:0f:07:07:
67:e6:5e:1b:05:fd:78:46:86:d4:eb:ae:72:af:82:b2:56:3d:
48:7a:30:25:dd:2b:67:9e:0e:c4:9f:8c:0f:33:5b:0b:67:0f:
28:9c:78:55:bb:8e:f0:b3:50:15:4d:9b:5a:82:b0:c1:91:c0:
c9:8d:e1:04:ba:9f:cc:f0:b6:3c:a9:17:1a:b6:8e:86:52:f5:
ba:9e:76:fa:9a:03:ad:e6:32:64:0c:61:76:25:63:50:2e:9a:
e5:ac:71:6f:f4:75:5e:14:93:77:78:d9:50:96:27:76:3f:14:
83:41:32:6d:4f:65:d9:a7:ec:df:57:0a:d4:18:03:8f:24:13:
29:06:07:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9rYGKTZNJIlJ52bv3wQzsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWY3MzY4N2E4NTNlMzIyNDkyYzM2OTEyYzE4NjUxNDFj
MWVjZDAwHhcNMjYwNzE2MTQ0MTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzQyOTdhZDRiNTQ0ODQxY2E3OTE3OWM4M2UxY2E4NTAyODZiMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49ucMGYoSuVpexLbKCBLr/bbdHtI
bwkwndru0KZ4swMaeGDNla5QSul5zCYzUAPCd4q/jhpF6VLNaBe+pTqURqnLWInh
q0dtQdZQO6v2zab8Ou4DPlJppJQ5SNhs2gvHQmsTcv5BeMTxi30uh1Tvey8QqOw+
ilZiAKsHKVNyZwQcObzRF2cPOntgiwUnoW+hr7AAZz6sT8tGviZfPzm6OTjycdqi
7mILPZB+XLUWAv+qa+hRmvBDb6QklqGs1i2RntVeDwFKier/0qT3dd3QvgVBwTQs
XSnXxI933SHSySrIqA251zwEdqjgG8iU4mPS0FOif69ZHmxagLdTQ0H1kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxCl61LVEhBynkXnIPhyoUChrEQMB8GA1UdIwQY
MBaAFCufc2h6hT4yJJLDaRLBhlFBwezQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzU5emFIcUZQaklra3NOcEVzR0dVVUhCN05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85OTFhZDAtZDQ3OS00MjhkLTkyOGEt
OWFiZmUwNGExOWEwLzEvWEVLWHJVdFVTRUhLZVJlY2ctSEtoUUtHc1JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85OTFhZDAtZDQ3OS00MjhkLTkyOGEtOWFiZmUwNGExOWEw
LzEvSzU5emFIcUZQaklra3NOcEVzR0dVVUhCN05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTpgMA0G
CSqGSIb3DQEBCwUAA4IBAQBtJ4aQgL5bXIheija+fANzOHek6gG39iIs4+UCWSP2
ViH/ukmywPYRIExqImCQrkMRRLm6AyzxLS47Exkt2MLL8mZTTm4QZwyQS/BC8q91
bEmqp/AQC2hz12MdBlxS+Zm5pXp5OSjVeFI6gjwl8opVX1teAdRd3/clP74PBwdn
5l4bBf14RobU665yr4KyVj1IejAl3Stnng7En4wPM1sLZw8onHhVu47ws1AVTZta
grDBkcDJjeEEup/M8LY8qRcato6GUvW6nnb6mgOt5jJkDGF2JWNQLprlrHFv9HVe
FJN3eNlQlid2PxSDQTJtT2XZp+zfVwrUGAOPJBMpBgfz
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:15 2026 by rpki-client