Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/XBji1wvFGdJSRKGHAuv-z87ZKv0.roa
File: XBji1wvFGdJSRKGHAuv-z87ZKv0.roa (raw, json)
Hash identifier: +vvqUnTon4CrLAZnScSQr1zxyNsLsp1x+AMPRSFSlEA=
Subject key identifier: 5C:18:E2:D7:0B:C5:19:D2:52:44:A1:87:02:EB:FE:CF:CE:D9:2A:FD
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019F6562D64A9BDB9EC5A7A7430390B01C9D
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/XBji1wvFGdJSRKGHAuv-z87ZKv0.roa
Signing time: Wed 15 Jul 2026 10:46:43 +0000
ROA not before: Wed 15 Jul 2026 10:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 134.255.205.0/24 maxlen: 24
134.255.206.0/24 maxlen: 24
194.32.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:62:d6:4a:9b:db:9e:c5:a7:a7:43:03:90:b0:1c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Jul 15 10:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c18e2d70bc519d25244a18702ebfecfced92afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:57:12:70:a7:b3:99:b6:c9:7e:ce:3a:8a:
d8:87:93:aa:3c:51:71:81:b7:f2:38:e6:6a:b2:31:
1b:52:35:8b:2d:9a:3e:24:8d:42:3e:f2:0e:cc:50:
d3:19:42:de:b7:d6:82:c6:61:8a:3a:6c:bb:a1:4b:
2f:25:5e:b4:9a:c9:38:e9:58:05:93:6c:e0:55:30:
84:ff:9c:14:4f:e2:e3:74:eb:5a:c7:1e:44:07:dd:
67:cb:e8:a4:09:52:d6:0c:17:ae:e2:25:ae:bf:69:
70:f2:a9:27:ef:45:a4:5a:05:aa:c8:d3:51:6d:f6:
eb:c3:c9:5d:a2:52:f2:e9:b4:83:66:77:31:bd:2a:
d5:92:5c:81:44:86:59:41:e7:4c:33:ff:74:20:a4:
bb:06:bf:46:b4:49:1f:be:39:83:00:24:c4:c4:50:
66:57:08:58:83:3e:1d:78:56:73:4a:a6:28:39:35:
25:05:fe:41:22:c4:c4:b9:ed:fc:61:05:78:f1:0b:
ef:dc:c2:f2:fb:23:b3:c3:e8:4b:42:e2:fb:03:3d:
c9:09:13:10:ff:15:46:79:8a:8c:31:0c:be:c3:e9:
d6:d9:9a:2f:67:23:50:64:1a:8f:43:f7:ca:2c:95:
e9:e3:d8:bd:75:ac:e1:55:df:70:e7:74:eb:1d:c8:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:E2:D7:0B:C5:19:D2:52:44:A1:87:02:EB:FE:CF:CE:D9:2A:FD
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/XBji1wvFGdJSRKGHAuv-z87ZKv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.205.0-134.255.206.255
194.32.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:90:36:7e:03:56:ff:9a:69:da:63:70:fc:21:48:9e:95:e3:
41:a2:06:98:80:60:19:3e:89:ec:e5:70:b8:d5:e4:8d:c0:3d:
dc:01:88:7d:8b:b8:bb:fb:e4:87:d6:bd:41:6c:b6:33:71:58:
89:37:56:6d:76:94:78:78:ee:2b:d8:07:3c:c2:73:59:b5:c6:
f1:09:34:16:19:cf:27:54:17:45:6b:11:43:1d:25:79:e7:d2:
83:6c:19:53:b5:4e:04:6b:b6:0f:fc:62:6a:db:45:1e:a6:da:
bb:27:3e:48:ed:69:44:f6:9c:8d:b2:39:5f:1f:50:20:77:6d:
c0:4d:4c:ca:3c:e4:33:d4:d1:84:0f:4a:a5:e8:47:29:86:85:
d1:23:9e:ca:35:69:35:bf:a3:10:fe:35:0c:75:93:0f:ef:4f:
46:c8:31:c4:fa:a5:08:d3:09:3c:68:33:f7:ef:97:3b:8b:e1:
8b:21:a4:c6:3c:c8:53:2a:03:39:ce:db:0f:7b:3f:74:aa:10:
c2:27:13:88:29:33:72:44:67:e9:9c:5d:da:ac:8b:bb:6c:78:
ae:40:d2:d9:7b:b0:95:64:5f:d6:9d:ed:71:53:d4:fc:9d:54:
c9:a5:6a:17:29:7f:77:26:26:b2:34:19:b3:00:c9:4d:89:22:
5e:7d:2b:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:36 2026 by rpki-client