Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa
File: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (raw, json)
Hash identifier: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=
Subject key identifier: C5:00:D3:52:EA:A9:4E:AD:8D:E8:5C:7A:1A:AE:A6:11:42:D5:DF:A9
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019E1BE96DD5228999102DB23A081E31C0C9
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa
Signing time: Tue 12 May 2026 11:19:03 +0000
ROA not before: Tue 12 May 2026 11:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41584
IP address blocks: 193.164.80.0/23 maxlen: 23
193.164.80.0/24 maxlen: 24
193.164.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:e9:6d:d5:22:89:99:10:2d:b2:3a:08:1e:31:c0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: May 12 11:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c500d352eaa94ead8de85c7a1aaea61142d5dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:05:ad:08:ca:5d:32:21:a1:ed:36:6c:29:
f7:a1:0f:6e:90:35:7f:8f:c7:ed:c8:25:22:3d:52:
c3:74:fb:7e:61:63:1d:b7:db:10:ce:de:64:8b:b3:
1b:dc:cb:c5:ec:4a:2c:98:40:a8:83:41:8c:41:43:
27:0d:bd:6f:9f:da:16:d0:1b:8c:2c:09:1d:b7:93:
ca:31:fa:7c:d3:cd:db:54:17:77:61:15:73:0d:7d:
bb:60:7b:43:f3:4a:88:28:10:90:8a:7f:00:e9:9f:
66:db:a4:76:e0:f9:3d:bd:6e:3a:b2:76:3d:24:1a:
b5:9d:31:80:60:19:6c:17:e3:fa:88:f8:da:49:b1:
2f:e7:46:1b:72:6a:3e:20:d1:c4:e8:b7:7d:c2:84:
f2:de:be:69:ad:76:5c:9f:4f:90:74:38:62:4c:17:
90:de:ec:17:10:cd:f4:d3:c0:bb:fa:0d:95:78:4d:
58:ba:c6:12:1b:04:a1:6e:32:93:9b:d5:97:34:4c:
f0:21:8e:62:09:93:3e:9f:40:3c:70:de:04:0d:70:
60:30:49:d5:21:09:ed:f2:0c:ac:4b:4a:40:e0:09:
c0:bc:d4:7f:ec:83:cb:be:ae:34:0e:50:da:bf:50:
9e:88:a8:0c:46:e3:d9:46:29:02:b0:5f:bd:3f:20:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:D3:52:EA:A9:4E:AD:8D:E8:5C:7A:1A:AE:A6:11:42:D5:DF:A9
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.80.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:7f:32:44:64:55:2a:c0:43:fd:d2:29:fb:81:92:b5:7d:9b:
f0:df:a0:90:17:38:91:1e:c4:7e:ad:3f:80:7e:aa:a0:b6:1f:
5d:37:87:18:0d:6a:45:d4:c0:7c:39:88:c0:66:34:75:cd:24:
57:a0:50:78:8f:80:41:09:ce:51:b9:e0:ca:dd:d9:d1:03:c7:
40:38:c5:2b:9f:88:2b:62:e7:e2:f1:21:d6:0d:47:f5:9b:69:
0e:04:46:15:a4:0b:db:98:7e:96:19:91:b9:54:36:de:b5:1d:
39:0c:6f:02:d5:0b:49:4a:a4:2a:cc:f9:f5:42:64:c9:20:0c:
e5:ac:f5:f6:ba:8d:15:3c:e6:ec:6f:19:cc:90:0e:33:8a:8c:
55:ed:53:7a:ca:f1:b9:3d:c9:cf:d6:c3:2f:06:54:5f:69:d2:
bb:c3:fc:df:41:5b:40:b9:94:7f:6e:78:df:b4:3e:dc:d1:59:
9f:eb:3f:77:f8:b9:30:7f:35:44:0a:6d:c4:6a:7e:98:39:22:
32:b8:6d:ad:9a:a6:6a:fa:37:73:0b:f4:68:cf:95:b8:5b:f0:
92:da:91:6f:aa:64:c6:42:cd:f3:b4:dd:2a:14:6b:86:a3:95:
24:52:78:f5:39:41:68:95:2a:7a:ad:13:eb:77:cb:da:70:20:
5c:43:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:42 2026 by rpki-client