Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/XUGY9TbOMBX49Z8u90RGUe-ExLs.roa
File: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (raw, json)
Hash identifier: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=
Subject key identifier: 5D:41:98:F5:36:CE:30:15:F8:F5:9F:2E:F7:44:46:51:EF:84:C4:BB
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 019DFC6F65298EDBF43B0C48EBBC5EE15C0E
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/XUGY9TbOMBX49Z8u90RGUe-ExLs.roa
Signing time: Wed 06 May 2026 08:37:32 +0000
ROA not before: Wed 06 May 2026 08:37:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:6f:65:29:8e:db:f4:3b:0c:48:eb:bc:5e:e1:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: May 6 08:37:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d4198f536ce3015f8f59f2ef7444651ef84c4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:dc:d9:a8:3a:66:70:d1:d5:b2:0a:be:0f:
2a:b8:cc:b5:7f:e3:7f:ad:ac:c9:58:1b:4e:fa:90:
3a:80:a3:ee:7d:3a:67:f9:be:35:01:3a:19:fc:76:
c7:b7:b5:8d:af:ad:f5:29:b5:9a:0c:84:b1:61:05:
97:ae:eb:8b:30:da:8c:f8:a0:82:87:c4:86:39:a2:
fc:43:46:b8:e2:db:16:54:02:2c:4e:f2:94:f4:79:
77:ba:85:dc:06:9a:6a:2c:f4:15:5d:e3:da:b6:63:
7d:0e:82:82:d2:54:bf:42:0c:67:b6:5a:7a:b9:a9:
df:ac:15:dc:b9:7f:d7:cc:77:ba:77:18:f8:06:7c:
dd:f1:68:31:5a:3d:c1:e2:99:78:0e:e5:7c:b2:be:
55:3c:32:37:76:6e:ad:44:e9:cc:49:77:c4:8b:5b:
e3:b0:bc:ae:45:02:c6:88:11:54:db:1d:f6:30:94:
bf:e2:85:59:47:54:17:66:61:25:58:a5:c3:af:d5:
e8:53:98:78:12:ac:70:20:a2:a8:b2:10:b1:a8:68:
81:6f:07:df:02:b4:f1:df:1f:1e:89:92:90:70:13:
a7:b1:1f:9a:28:e8:c2:44:ee:39:5c:c1:34:34:1e:
c3:00:f2:98:bb:8f:3c:f5:3b:d4:77:ff:ce:ef:18:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:98:F5:36:CE:30:15:F8:F5:9F:2E:F7:44:46:51:EF:84:C4:BB
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/XUGY9TbOMBX49Z8u90RGUe-ExLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:6a:fd:a5:9c:73:43:d2:a9:3b:f7:89:e2:d2:28:21:0f:2d:
cf:0e:4a:56:4a:89:cc:12:00:b2:44:2a:e4:e7:ba:44:85:22:
8d:b0:68:e9:7f:1c:43:24:dd:ad:b4:20:21:12:b8:c3:c5:85:
09:e6:01:c1:90:e9:6c:e0:c2:7f:5f:32:16:82:6a:41:b4:16:
24:c5:a7:a6:5d:f3:d2:9a:ed:b6:90:de:20:81:ed:60:a1:2d:
e0:45:a5:15:d5:53:32:a7:58:33:36:e8:cb:44:fa:ac:51:d4:
27:e2:98:d5:55:af:36:cc:41:46:69:45:4e:b3:2d:b3:b4:d6:
1c:3e:d2:17:58:ee:a4:1a:6c:13:b6:ba:8f:81:f8:e6:d6:f7:
ac:50:b4:d3:8d:f0:d3:d9:85:b9:b0:3e:86:12:bf:48:f0:b5:
5f:c1:23:de:9a:21:46:1c:db:31:c5:80:7e:d3:07:4b:d4:46:
81:fe:31:1f:d7:22:72:30:f6:e6:03:6f:3d:7f:45:ae:b4:36:
5d:55:63:58:f3:c1:d4:82:31:07:0e:fa:8f:07:87:ad:ec:bb:
1e:26:2d:55:42:81:94:82:25:75:36:74:40:95:cc:20:13:4c:
a5:b9:0f:d9:2b:0c:2c:02:fb:d7:fb:7c:53:8c:f3:04:80:15:
da:c7:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:59 2026 by rpki-client