Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/XnXJKqTzXUegKaYr4g7Xyqqne1k.roa
File: XnXJKqTzXUegKaYr4g7Xyqqne1k.roa (raw, json)
Hash identifier: CQReL6no3oMoU4ZSnWxS6igEc/veiJgwlMJ/ZxyLRAE=
Subject key identifier: 5E:75:C9:2A:A4:F3:5D:47:A0:29:A6:2B:E2:0E:D7:CA:AA:A7:7B:59
Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Certificate serial: 01A0D2D036E74B1CABBB13A7B13EE5A43CAD
Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/XnXJKqTzXUegKaYr4g7Xyqqne1k.roa
Signing time: Thu 24 Sep 2026 09:47:35 +0000
ROA not before: Thu 24 Sep 2026 09:47:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49791
IP address blocks: 81.85.73.0/24 maxlen: 24
185.5.74.0/24 maxlen: 24
185.9.27.0/24 maxlen: 24
185.28.175.0/24 maxlen: 24
185.224.210.0/24 maxlen: 24
185.224.211.0/24 maxlen: 24
213.155.8.0/24 maxlen: 24
213.155.13.0/24 maxlen: 24
213.155.29.0/24 maxlen: 24
217.177.35.0/24 maxlen: 24
217.179.50.0/24 maxlen: 24
217.179.51.0/24 maxlen: 24
2a11:2cc0:12::/47 maxlen: 47
2a11:2cc0:14::/47 maxlen: 47
2a11:2cc0:16::/47 maxlen: 47
2a11:2cc0:18::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:d0:36:e7:4b:1c:ab:bb:13:a7:b1:3e:e5:a4:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611
Validity
Not Before: Sep 24 09:47:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e75c92aa4f35d47a029a62be20ed7caaaa77b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:ea:04:eb:f2:90:6f:00:2b:72:4f:77:a1:
41:40:78:22:55:55:6b:b9:ea:ee:a9:85:9b:55:7e:
6c:d7:96:41:f2:59:c2:c6:55:8f:58:38:79:db:87:
37:6d:98:35:84:d0:7b:18:2d:0a:1d:84:b9:a8:0a:
f2:e7:35:bd:00:cd:6f:e9:78:37:ad:9e:5c:e2:eb:
7f:a0:9a:2e:6f:b1:be:f3:8e:6d:aa:3e:c4:c1:d0:
0c:bc:71:97:d8:1b:01:f5:f5:b4:93:61:79:a1:84:
c9:26:fe:66:0e:90:7d:8f:76:a7:43:e9:d2:97:79:
d0:26:15:b7:23:9d:f9:f8:62:d4:70:85:d9:b3:99:
fc:e0:1e:77:df:b2:53:ab:c1:33:e2:b0:17:d3:de:
9b:19:4f:07:73:10:f8:6c:d6:bc:87:ed:d2:59:62:
33:0e:3f:c3:a1:5c:c0:17:e4:5a:88:a0:7a:af:19:
0b:68:94:b2:d1:ef:42:39:d4:28:9f:a0:fe:16:a8:
61:17:bb:dc:39:e0:3b:ba:81:f5:00:2b:4c:a2:e4:
a7:c2:20:ca:f5:b3:09:6d:43:82:a5:16:ef:8d:70:
2c:b6:c2:48:2e:6c:d6:49:41:75:75:22:b6:c8:be:
32:eb:92:43:09:6e:5e:b6:b8:ef:ff:e0:68:a2:82:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:C9:2A:A4:F3:5D:47:A0:29:A6:2B:E2:0E:D7:CA:AA:A7:7B:59
X509v3 Authority Key Identifier:
keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/XnXJKqTzXUegKaYr4g7Xyqqne1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.73.0/24
185.5.74.0/24
185.9.27.0/24
185.28.175.0/24
185.224.210.0/23
213.155.8.0/24
213.155.13.0/24
213.155.29.0/24
217.177.35.0/24
217.179.50.0/23
IPv6:
2a11:2cc0:12::-2a11:2cc0:19:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:ae:f2:de:a2:4d:77:e0:1c:c3:e8:2c:e6:ec:f9:e6:97:35:
14:9d:dc:c6:3f:d9:d9:09:82:bf:27:91:7d:2c:49:a6:76:c8:
4a:11:32:98:5d:ee:9c:4a:de:b1:26:23:84:7e:67:16:45:ad:
9e:15:b9:c9:36:a5:3d:55:72:56:8a:6c:ae:93:02:e9:fb:46:
28:d4:d3:02:4d:40:6e:85:94:0e:b0:a2:75:c6:5f:bc:c5:e9:
e6:9e:45:f4:ff:c6:63:38:52:98:c7:4f:ae:68:e2:22:74:3d:
9d:e7:8f:94:2e:77:93:ad:f0:f8:43:be:00:a2:a3:3e:b9:29:
5f:20:9f:32:a9:d0:1d:56:64:9f:94:16:4e:65:77:6d:84:b7:
ae:c0:07:31:6d:d0:35:ea:c0:01:39:f0:1c:26:89:f6:31:b3:
a5:cf:c5:88:28:b0:0b:48:b9:70:d8:7f:fa:8f:91:b5:1d:fd:
c6:ba:b4:94:25:9c:d8:6a:2f:4c:2a:ad:c3:34:24:76:0b:01:
3c:f4:1d:c9:ef:75:47:03:d0:e5:b8:10:39:40:f2:21:74:54:
99:5a:1e:4f:ee:75:82:11:98:23:53:f1:6d:ec:87:ee:c4:8b:
1b:92:58:4c:75:ab:be:73:ea:00:40:1c:9a:32:d2:a5:9a:bc:
84:eb:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:07:14 2026 by rpki-client