Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/XbveJAeqDDs106lGs99HsrZ_Fqg.roa
File: XbveJAeqDDs106lGs99HsrZ_Fqg.roa (raw, json)
Hash identifier: A18dZoqdUcbIqo30HuYitMDack0pNdwoScuJ/CigWsw=
Subject key identifier: 5D:BB:DE:24:07:AA:0C:3B:35:D3:A9:46:B3:DF:47:B2:B6:7F:16:A8
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F23693A821D38AE0DF91E59D791069EB5
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/XbveJAeqDDs106lGs99HsrZ_Fqg.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60231
IP address blocks: 93.189.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3a:82:1d:38:ae:0d:f9:1e:59:d7:91:06:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dbbde2407aa0c3b35d3a946b3df47b2b67f16a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:ec:96:d7:42:90:a2:fd:ac:63:ca:a9:bf:
b2:6b:53:8a:6c:c1:bb:8a:18:b0:04:81:5e:b2:68:
fe:53:a3:0d:3b:84:a4:19:c0:7d:0b:40:09:f6:71:
a8:c0:c8:ee:68:24:3e:aa:59:7f:35:27:7b:50:46:
1a:7c:85:58:8d:ff:e5:72:be:ae:4d:af:c1:7e:aa:
3d:d8:f4:b0:95:20:47:3b:15:21:45:68:28:7f:fa:
96:70:fa:f3:9e:9d:ab:e4:b9:ec:3d:07:95:c6:67:
59:ac:df:ec:51:da:e6:bb:1e:95:59:03:10:3e:d9:
72:e7:3d:c9:25:65:c7:03:79:6c:8c:82:e5:98:f5:
c3:dd:bd:71:eb:ab:fd:f6:ec:8a:43:a3:92:1e:52:
e4:04:5f:80:55:69:34:03:a7:63:34:f6:7e:fc:bb:
94:56:9e:8e:d1:81:fa:f2:4c:f5:9b:bd:0d:3d:4f:
c3:05:cf:cf:fd:35:17:0d:ae:e5:4b:ea:39:40:60:
37:97:d4:72:30:b8:cc:27:3f:ed:35:8f:6c:16:91:
f7:a4:43:1c:38:56:d8:8b:9e:49:0d:0f:30:28:6c:
64:f2:7c:51:4f:d7:e3:43:c7:f4:9c:71:cd:c6:30:
76:7c:6a:ef:82:e4:70:d9:4f:22:62:08:35:6f:4d:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:DE:24:07:AA:0C:3B:35:D3:A9:46:B3:DF:47:B2:B6:7F:16:A8
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/XbveJAeqDDs106lGs99HsrZ_Fqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.148.0/24
Signature Algorithm: sha256WithRSAEncryption
26:78:19:ce:1f:ed:d3:d9:ab:ad:0b:f0:bb:49:32:91:c6:eb:
29:ac:6f:45:6f:fb:28:f1:c2:c1:83:a9:d9:88:a6:a0:ae:cb:
ef:91:de:2c:2f:7a:ce:27:00:9f:f8:86:37:a5:0b:26:5c:e5:
f3:1c:a0:25:b1:bd:96:25:79:c3:10:22:32:48:1c:0a:34:a1:
19:d2:65:9b:ca:56:2a:da:9a:a6:22:5b:65:1b:b8:21:eb:b7:
04:72:76:0f:bb:f8:3e:fe:9b:c2:2f:45:de:fb:5b:b8:52:2b:
05:fe:58:7e:f0:c2:70:c4:22:97:b1:11:e5:cf:4d:f0:85:33:
4b:f3:00:ab:69:72:fa:d2:6b:79:b5:1e:13:15:7a:4f:d7:be:
76:f2:d2:0a:52:bd:5d:62:a3:d1:f7:6a:2c:64:e9:a2:dc:3d:
88:c6:c2:01:66:f7:e6:6b:e2:5d:14:bf:81:41:f4:a4:4b:22:
7c:40:9e:30:9c:78:90:80:36:87:10:20:51:96:67:34:95:ae:
3a:8c:83:85:28:39:45:47:c1:fc:6a:68:6e:d1:ab:fa:0b:37:
f1:22:81:c8:b2:39:a9:2b:a4:c2:e7:18:86:bc:d4:16:c9:77:
b0:0c:2f:9d:b6:7a:16:64:54:b2:a3:f0:3d:67:7c:63:2d:5b:
b9:e6:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:30 2026 by rpki-client