Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa
File: XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa (raw, json)
Hash identifier: HdEWtXPo3qjkpM4rtcD6m0eh6joeQyAPSggK9PU/vxo=
Subject key identifier: 5E:D6:21:03:8D:02:21:76:75:DC:E0:C8:CD:4E:49:7F:B2:CB:E0:B5
Certificate issuer: /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Certificate serial: 0199707C12FEB16605EAD152DDAC61B31731
Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa
Signing time: Mon 22 Sep 2025 08:13:23 +0000
ROA not before: Mon 22 Sep 2025 08:13:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59956
IP address blocks: 195.39.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:7c:12:fe:b1:66:05:ea:d1:52:dd:ac:61:b3:17:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Validity
Not Before: Sep 22 08:13:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ed621038d02217675dce0c8cd4e497fb2cbe0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:da:c1:50:d8:43:92:b7:f2:98:e6:51:14:
14:7e:39:b3:ad:15:a2:cb:3a:01:a1:05:52:b6:48:
a8:04:a0:ec:59:7c:0e:ee:6e:ce:81:ef:b5:76:b3:
e8:0e:3e:61:e2:30:1a:ee:8f:04:17:5d:5a:f8:04:
28:0c:00:b1:23:7e:82:5d:0a:2d:a1:f9:64:36:c9:
6d:2c:dd:89:f5:12:f3:12:1f:1c:b4:ba:89:de:f3:
88:ef:55:22:c1:b3:02:30:d4:05:1b:2d:da:d5:c1:
e3:e6:17:20:73:0b:6d:f1:35:73:3b:77:01:7f:ad:
8c:d1:95:52:bf:bc:68:08:30:7b:76:f2:7c:86:d6:
58:88:13:b4:04:36:a7:60:b7:e8:50:5f:d5:0e:d9:
99:20:d1:ed:da:9f:25:cf:9a:ba:4f:58:7c:d7:95:
13:e7:d1:ff:66:b5:3c:1f:b4:ff:e3:e2:d9:49:85:
2d:46:f4:c9:be:6b:40:6b:6e:52:b7:da:04:59:4b:
56:29:d0:36:10:1a:30:4e:2d:3e:77:f6:3d:bd:1a:
00:37:ba:57:4d:f3:cb:14:f8:3b:ea:9a:a9:71:ab:
63:83:14:ea:38:7a:25:05:9f:2b:c2:32:e9:ab:7f:
2a:d7:b0:de:33:2e:77:aa:59:c8:3a:ed:49:7f:40:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:21:03:8D:02:21:76:75:DC:E0:C8:CD:4E:49:7F:B2:CB:E0:B5
X509v3 Authority Key Identifier:
keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:04:0d:c6:b8:f1:4b:b9:d5:c6:3b:0b:2b:27:55:26:f3:41:
fe:4f:0c:20:44:fd:94:c9:30:e4:45:ff:e0:4e:8a:79:00:19:
5d:cb:c2:0f:bb:58:14:8a:ac:ca:94:3f:51:b7:d7:7e:cc:f4:
00:7d:5a:51:39:3a:b9:36:1e:a6:3e:7d:8e:1d:e3:24:46:99:
78:84:68:c2:13:47:bc:e9:68:cf:31:ec:c9:d2:70:2c:e0:ec:
51:8f:c9:aa:27:58:04:4c:d8:a6:29:de:34:03:5b:92:52:a5:
6b:b2:0b:38:b4:58:a7:0a:5d:3a:88:a4:f0:d7:24:1b:be:7d:
de:13:31:73:a7:58:38:e6:0a:7d:2c:38:b5:12:f7:2a:67:fd:
02:85:34:70:40:d4:51:d8:6b:4d:73:ff:7a:52:e3:54:6d:a9:
37:86:e9:72:d6:91:51:96:94:11:bb:66:e9:a7:03:a0:f4:05:
03:90:1b:26:3e:15:e4:3f:33:91:7d:e0:22:6b:06:e6:e5:37:
ed:a6:82:3f:0d:3d:f2:dc:a0:bd:7e:48:bc:ba:94:20:14:ad:
b1:f8:11:4b:3a:dc:88:d9:d2:8b:46:60:92:8a:49:b4:3f:5d:
3f:87:38:56:31:2e:1a:bd:7f:93:da:1d:ba:95:69:b9:8c:0c:
7e:57:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:59 2025 by rpki-client