Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/xs3iSBh200_EoCetOIrLYygCcuQ.roa
File: xs3iSBh200_EoCetOIrLYygCcuQ.roa (raw, json)
Hash identifier: NQKjQyiCL3pt+LnR0jXNZKqsq984PZkORPtaWm+NSuE=
Subject key identifier: C6:CD:E2:48:18:76:D3:4F:C4:A0:27:AD:38:8A:CB:63:28:02:72:E4
Certificate issuer: /CN=76f72018b428ad289c9f8597e37bca614aa109a0
Certificate serial: 019F2369006345C9266BC42F5B94EE2806DE
Authority key identifier: 76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/xs3iSBh200_EoCetOIrLYygCcuQ.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39067
IP address blocks: 94.232.224.0/21 maxlen: 21
94.232.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:63:45:c9:26:6b:c4:2f:5b:94:ee:28:06:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f72018b428ad289c9f8597e37bca614aa109a0
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6cde2481876d34fc4a027ad388acb63280272e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:59:b0:81:21:4c:1e:89:54:6a:5c:d1:72:
29:8a:1e:f1:fa:25:d8:aa:9c:48:81:f4:f4:57:08:
31:c2:da:ea:78:50:75:38:55:88:d9:2e:e0:b6:28:
f6:d8:05:35:a6:28:fa:ac:30:12:66:c9:37:e3:90:
72:bc:b5:f5:6f:52:c8:72:5e:25:6c:77:5b:d8:3c:
ce:7d:70:cd:ec:99:01:85:8f:cb:63:8b:34:c6:31:
2b:9e:12:9d:ab:03:d6:cb:96:37:d3:fa:1d:bd:af:
05:b8:25:d6:30:be:27:92:4d:a6:0e:e0:66:89:79:
bc:54:df:f5:c7:3a:e0:30:4e:15:d2:8b:0f:f1:f8:
c3:ac:58:69:fa:e9:2e:92:c1:6e:7f:44:ae:30:df:
aa:e0:c2:d8:5b:e4:14:65:65:10:09:b9:47:64:e5:
ca:76:f0:0b:aa:46:1a:68:45:4f:0c:79:44:58:1d:
19:ca:26:4e:e2:58:8c:5e:e0:35:2c:a7:56:ae:60:
92:c0:02:e7:69:f8:5f:3f:db:e3:d5:1a:f4:0d:47:
0a:da:4d:f9:6d:1a:39:2d:8b:91:e7:0c:1c:5d:a6:
70:4f:00:29:83:36:5e:48:8d:08:f0:44:89:38:1d:
5e:9b:d2:f6:a9:59:56:09:45:c5:77:52:51:e5:08:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:E2:48:18:76:D3:4F:C4:A0:27:AD:38:8A:CB:63:28:02:72:E4
X509v3 Authority Key Identifier:
keyid:76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/xs3iSBh200_EoCetOIrLYygCcuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:77:b5:9d:87:f5:16:93:7f:0d:a2:a1:bb:be:b4:40:e3:1a:
62:19:7f:d8:13:45:5c:89:38:85:9a:27:3a:c0:81:da:62:8a:
90:7d:f7:34:9e:67:85:d3:3b:d7:c8:88:7e:93:b9:ef:6a:57:
d3:a7:95:d5:81:69:0e:b7:69:d1:ac:c7:c2:db:d3:8f:48:2d:
63:28:4c:fc:96:b7:09:2e:ea:89:38:62:8c:67:6a:89:9d:cd:
eb:c5:69:4c:6d:93:e4:48:f0:01:e2:dd:02:41:7c:b4:3f:e1:
a4:34:84:8b:86:8c:be:d5:7a:71:ed:af:4b:cc:be:05:b9:c8:
92:71:89:47:1c:87:21:bc:ae:1f:df:d5:18:90:f3:c2:32:a4:
82:d4:df:27:b6:fb:d9:b4:b9:b9:05:b0:71:c4:54:e6:44:ec:
38:5b:46:b8:3b:69:a4:af:4a:66:1d:99:d5:28:01:5c:30:0b:
a7:b7:b4:ae:f4:d0:79:1f:80:b8:88:56:b6:20:ae:fc:4e:01:
0e:6c:16:fd:28:96:5a:09:a3:ac:41:43:72:2b:7d:71:10:58:
f7:9d:5f:a0:0c:99:6c:ac:ab:ad:1c:13:55:c5:1e:c4:8c:46:
e1:3c:97:02:e5:2d:00:85:80:55:57:e7:64:66:67:b0:1b:d9:
16:12:ee:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQBjRckma8QvW5TuKAbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZjcyMDE4YjQyOGFkMjg5YzlmODU5N2UzN2JjYTYxNGFh
MTA5YTAwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmNkZTI0ODE4NzZkMzRmYzRhMDI3YWQzODhhY2I2MzI4MDI3MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPpZsIEhTB6JVGpc0XIpih7x+iXY
qpxIgfT0VwgxwtrqeFB1OFWI2S7gtij22AU1pij6rDASZsk345ByvLX1b1LIcl4l
bHdb2DzOfXDN7JkBhY/LY4s0xjErnhKdqwPWy5Y30/odva8FuCXWML4nkk2mDuBm
iXm8VN/1xzrgME4V0osP8fjDrFhp+ukuksFuf0SuMN+q4MLYW+QUZWUQCblHZOXK
dvALqkYaaEVPDHlEWB0ZyiZO4liMXuA1LKdWrmCSwALnafhfP9vj1Rr0DUcK2k35
bRo5LYuR5wwcXaZwTwApgzZeSI0I8ESJOB1em9L2qVlWCUXFd1JR5QjrDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbN4kgYdtNPxKAnrTiKy2MoAnLkMB8GA1UdIwQY
MBaAFHb3IBi0KK0onJ+Fl+N7ymFKoQmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHZjZ0dMUW9yU2ljbjRXWDQzdktZVXFoQ2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDkt
MDY2ZGRmMzJiZmNjLzEveHMzaVNCaDIwMF9Fb0NldE9JckxZeWdDY3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDktMDY2ZGRmMzJiZmNj
LzEvZHZjZ0dMUW9yU2ljbjRXWDQzdktZVXFoQ2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXujgMA0G
CSqGSIb3DQEBCwUAA4IBAQBfd7Wdh/UWk38NoqG7vrRA4xpiGX/YE0VciTiFmic6
wIHaYoqQffc0nmeF0zvXyIh+k7nvalfTp5XVgWkOt2nRrMfC29OPSC1jKEz8lrcJ
LuqJOGKMZ2qJnc3rxWlMbZPkSPAB4t0CQXy0P+GkNISLhoy+1Xpx7a9LzL4FuciS
cYlHHIchvK4f39UYkPPCMqSC1N8ntvvZtLm5BbBxxFTmROw4W0a4O2mkr0pmHZnV
KAFcMAunt7Su9NB5H4C4iFa2IK78TgEObBb9KJZaCaOsQUNyK31xEFj3nV+gDJls
rKutHBNVxR7EjEbhPJcC5S0AhYBVV+dkZmewG9kWEu5E
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:14 2026 by rpki-client