Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/XNqsrUgtVK7DilBR1DXs0cRSPR4.roa
File: XNqsrUgtVK7DilBR1DXs0cRSPR4.roa (raw, json)
Hash identifier: 1CTAtzSUGnHEcBy7ELU8N1a+wh7hvDBmBp7Z0JSVlso=
Subject key identifier: 5C:DA:AC:AD:48:2D:54:AE:C3:8A:50:51:D4:35:EC:D1:C4:52:3D:1E
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0CF472C33559417E62BE9FD39DC2E43D7
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/XNqsrUgtVK7DilBR1DXs0cRSPR4.roa
Signing time: Wed 23 Sep 2026 17:19:03 +0000
ROA not before: Wed 23 Sep 2026 17:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204957
IP address blocks: 5.34.176.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
46.28.67.0/24 maxlen: 24
46.28.70.0/24 maxlen: 24
62.233.57.0/24 maxlen: 24
82.117.255.0/24 maxlen: 24
82.118.20.0/22 maxlen: 22
85.90.196.0/24 maxlen: 24
85.90.199.0/24 maxlen: 24
193.238.153.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
195.211.96.0/23 maxlen: 23
195.211.98.0/23 maxlen: 23
217.12.206.0/23 maxlen: 23
2a05:9400::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a12:6fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:47:2c:33:55:94:17:e6:2b:e9:fd:39:dc:2e:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 23 17:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cdaacad482d54aec38a5051d435ecd1c4523d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:78:0a:94:77:7d:6c:29:cc:0e:ad:58:85:
d0:5c:dc:af:8c:63:15:25:3d:f6:4f:4c:e7:22:15:
09:21:cb:60:12:81:5f:df:a4:19:68:c7:fe:59:3a:
86:98:ed:85:0f:ae:ae:1a:87:e4:b5:6f:63:5a:39:
82:c6:17:19:cc:12:77:6c:96:46:c5:57:e8:71:a4:
d4:f4:8c:2c:b1:38:a5:05:16:f7:83:e7:af:16:6c:
d9:f9:f8:54:5c:7b:ac:97:49:57:2a:9d:85:26:c7:
dc:92:47:ea:ea:14:a2:d6:52:09:4e:93:26:6b:cd:
90:c3:d7:d7:4d:a7:9c:16:c6:19:2b:61:f1:c6:a0:
d4:22:a4:19:59:55:dc:31:82:83:b6:d6:78:00:20:
19:e5:6a:31:61:eb:c1:75:dd:2e:c3:b4:f1:5c:ea:
77:60:43:64:8a:41:5c:cd:9f:d8:66:32:6f:c4:4e:
7c:d9:a7:f6:63:71:39:2c:c1:6b:66:5d:09:d7:90:
19:55:d3:17:bb:30:af:de:c1:c3:0b:e6:32:2e:46:
f1:17:ec:a0:98:f4:fb:83:cb:ec:16:93:9d:e7:44:
d8:79:15:18:96:63:1a:38:29:7c:81:70:55:20:74:
18:b5:1a:8c:9e:f1:0d:62:d8:15:27:cd:ee:ab:fb:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:AC:AD:48:2D:54:AE:C3:8A:50:51:D4:35:EC:D1:C4:52:3D:1E
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/XNqsrUgtVK7DilBR1DXs0cRSPR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.176.0/23
45.90.56.0/22
46.28.67.0/24
46.28.70.0/24
62.233.57.0/24
82.117.255.0/24
82.118.20.0/22
85.90.196.0/24
85.90.199.0/24
193.238.153.0/24
195.123.232.0/22
195.123.240.0/21
195.211.96.0/22
217.12.206.0/23
IPv6:
2a05:9400::-2a05:9404:ffff:ffff:ffff:ffff:ffff:ffff
2a05:9406::/32
2a12:6fc0::-2a12:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:f7:f0:3d:05:ef:b2:b0:ec:80:18:95:d2:19:e0:3c:2a:50:
b3:a0:64:ee:f3:7d:57:f3:de:eb:94:27:3b:a4:f2:9d:2d:11:
6a:4e:f3:8d:12:7e:4b:16:71:68:0d:74:39:da:ea:e8:01:40:
4d:0f:bf:d9:2a:ab:65:2e:25:af:5e:95:43:82:86:ac:4a:bb:
2b:69:81:2d:5e:87:43:c3:36:7d:64:df:88:dc:17:06:8a:55:
ce:f5:04:e2:4a:1f:e0:a1:12:4f:af:09:3f:4a:71:fd:03:bd:
dc:52:88:1e:e3:04:52:68:21:26:f3:be:63:7d:57:cf:55:4e:
9c:4c:ec:dc:c5:35:c9:95:98:fa:43:a0:ed:e8:ef:a2:39:9d:
5f:c4:36:a8:0b:10:e5:11:38:7d:2c:c5:52:03:17:10:51:b0:
81:54:fe:3c:dc:ee:d3:c9:8c:80:9a:60:45:66:22:e9:df:96:
d0:13:01:21:a6:2e:b3:6b:e3:66:1d:9c:8f:17:12:6a:f8:0c:
5f:fd:35:b6:ff:c6:3f:91:9b:07:ee:48:1d:71:ec:2d:27:da:
87:bb:ba:b9:b5:ce:a3:dc:b0:83:08:b5:5d:ee:7f:8a:35:0e:
1e:78:07:5b:cf:f5:e8:2e:99:74:09:41:ee:61:f2:63:78:b7:
f6:b7:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:44 2026 by rpki-client