
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa
File: XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa (raw, json)
Hash identifier: Pambl0M9LVjm4MGPS57/2Bz+CkKpPC/JVa4fHyyRtbY=
Subject key identifier: 5C:4B:EE:74:A2:96:80:B5:EF:F9:52:D6:C3:B1:64:73:1C:BD:7C:7D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01992D44C1374F1B75EC94BFA0C9B924CB0A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa
Signing time: Tue 09 Sep 2025 06:58:24 +0000
ROA not before: Tue 09 Sep 2025 06:58:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202973
IP address blocks: 193.233.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:44:c1:37:4f:1b:75:ec:94:bf:a0:c9:b9:24:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 9 06:58:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4bee74a29680b5eff952d6c3b164731cbd7c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:c9:77:fa:66:05:39:4f:fa:56:0d:d9:a3:
9d:5d:0c:24:2e:08:f4:8a:9b:19:8c:66:df:06:c7:
e6:62:ac:a9:c7:15:6e:01:2f:dc:17:05:e0:67:33:
71:29:3c:f2:a8:0b:c4:96:65:49:d5:70:cf:77:4c:
15:d4:5a:41:40:2c:c3:5c:82:94:02:86:4b:5a:ec:
f0:3d:37:21:0f:3c:39:e2:27:37:ff:e3:a6:72:3a:
ca:c9:2c:e4:8b:95:59:3e:db:80:d1:3d:76:86:f0:
f8:1a:d9:4d:11:46:30:89:73:59:44:08:fe:26:0a:
a8:91:b5:9f:4c:8b:28:b8:6c:38:b0:9c:e4:48:b7:
b0:bd:18:f3:0e:32:cf:40:d7:ad:1a:4e:45:2c:cc:
af:87:20:1b:27:13:59:a9:b6:dc:66:db:62:84:f3:
7e:c2:6e:ba:82:f6:4f:2b:31:9c:b4:50:cd:e9:e3:
ad:84:73:0f:d4:ec:0b:df:c7:c5:51:48:9c:68:57:
e2:15:ae:a8:a8:0d:ac:e4:07:37:9f:d5:95:5b:7c:
62:f2:11:cf:4c:0e:14:17:b0:8f:e9:f1:d6:d1:e1:
69:3f:5b:d3:41:87:a9:0a:ed:d6:5f:f4:fb:ff:b1:
18:c8:0a:16:3a:b8:e0:53:f9:d5:ae:d7:6f:4a:d7:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:EE:74:A2:96:80:B5:EF:F9:52:D6:C3:B1:64:73:1C:BD:7C:7D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XEvudKKWgLXv-VLWw7Fkcxy9fH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ea:29:3f:f4:42:fd:33:13:f8:f1:8c:4e:06:b1:b3:ec:83:
e5:d0:0f:40:ca:da:84:b4:e1:cc:e9:d4:f2:38:63:c7:34:5c:
18:be:8b:88:6f:b2:56:13:56:13:8c:8a:1f:c8:4c:95:e4:cc:
84:be:98:3c:19:a0:c7:08:e3:a3:3f:9b:47:34:c9:8b:a5:8a:
64:db:bb:37:db:3b:e2:0b:30:e8:e5:d0:13:10:4f:fb:86:db:
e6:19:34:7e:cb:95:d7:9f:2a:b7:26:a0:b1:e9:cc:7c:4d:35:
99:18:84:9f:de:64:60:ee:40:ad:3b:2a:5d:70:b1:1a:e8:41:
05:df:66:41:0d:a1:94:99:23:63:d8:cf:7d:bf:d7:94:4d:04:
b2:80:a4:3e:d3:de:3b:27:29:59:28:00:19:cd:5a:80:31:87:
3c:62:ad:c6:37:68:c7:86:9f:0b:89:6e:2a:fb:79:dd:63:b2:
93:80:b1:dd:80:c2:93:ff:96:82:0b:14:2f:62:a3:2a:20:72:
6e:bc:a8:7f:21:4f:68:2d:7b:05:c2:21:81:75:9e:40:85:dc:
24:94:7e:5b:13:cf:67:70:2b:4a:10:fd:ab:2f:d0:16:8c:04:
ca:d8:28:15:f0:ad:a6:c7:42:11:ce:0d:49:6a:1e:a2:24:49:
fc:f4:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:31 2025 by rpki-client