Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/xqkIGkwCiGI9_ROxA-753BCeMSo.roa
File: xqkIGkwCiGI9_ROxA-753BCeMSo.roa (raw, json)
Hash identifier: 6Wbd2frdsClpbkut2snIQAUUZt2yqFLdakRBdxOpvPI=
Subject key identifier: C6:A9:08:1A:4C:02:88:62:3D:FD:13:B1:03:EE:F9:DC:10:9E:31:2A
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019CFD6489083D9B270BEAF055EC7F2B1B71
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/xqkIGkwCiGI9_ROxA-753BCeMSo.roa
Signing time: Tue 17 Mar 2026 20:02:30 +0000
ROA not before: Tue 17 Mar 2026 20:02:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200658
IP address blocks: 87.232.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:64:89:08:3d:9b:27:0b:ea:f0:55:ec:7f:2b:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Mar 17 20:02:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6a9081a4c0288623dfd13b103eef9dc109e312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:24:c2:f9:59:a3:80:95:9f:39:6c:65:cb:
db:d7:63:12:68:e1:59:74:ea:67:3b:16:32:e1:12:
98:54:dd:8f:da:f8:07:42:33:b3:5c:3b:bc:9c:6c:
57:18:28:8e:ac:7e:7d:dc:2a:f2:97:d6:cf:a7:37:
9a:e0:6d:78:d6:f3:09:79:89:ef:b9:3a:cc:66:c0:
3a:86:11:81:f7:1b:f6:12:a7:40:7a:be:19:fc:17:
5a:99:b0:b3:25:fc:b1:92:3e:89:a8:4c:5b:f4:bf:
21:9e:a1:5f:3e:76:25:41:cb:8f:6e:cf:13:f8:dd:
c0:b0:73:45:05:84:27:92:1c:53:12:40:d9:69:c7:
99:73:cf:3f:f3:bc:52:8c:3a:45:7e:f7:a4:cd:61:
bd:08:02:6e:34:20:9d:14:07:6b:55:27:6c:c8:26:
50:6d:ac:46:46:ae:3c:50:e2:c7:77:e3:a4:1b:a2:
a3:eb:72:e7:6a:a7:35:c5:0c:0b:2f:cf:39:aa:7e:
6d:fb:df:33:6c:a5:3a:76:37:67:59:83:d1:f2:4f:
e3:5a:f7:54:46:78:bc:6d:5d:de:22:14:18:21:95:
43:90:85:72:d1:95:65:96:d2:ab:62:65:ef:89:d8:
37:50:cd:41:df:ab:c1:8e:ca:68:de:91:d8:09:7d:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:08:1A:4C:02:88:62:3D:FD:13:B1:03:EE:F9:DC:10:9E:31:2A
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/xqkIGkwCiGI9_ROxA-753BCeMSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.74.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c0:e9:27:f2:34:c0:e0:50:de:3d:6b:ab:48:19:76:80:59:
a8:4f:88:c7:3c:81:d7:4f:84:9c:78:a4:24:c1:95:70:11:5a:
b2:5d:b6:73:1b:43:c8:b9:22:18:dd:98:7d:65:04:d3:8a:1e:
36:70:9f:09:32:12:78:9b:bb:3d:e9:3d:be:06:89:f2:df:c5:
f0:f1:73:55:d4:a5:c4:33:50:a3:d4:6c:fb:57:e5:b2:72:58:
b6:98:44:e8:66:39:3d:84:e3:f4:88:9a:76:53:00:40:34:51:
08:1b:06:e3:1b:9d:57:70:65:7a:4a:67:0e:8f:57:e6:8f:28:
d4:30:5c:c5:0b:cd:73:0b:e0:b6:c9:1b:f7:72:f7:b3:eb:99:
a6:20:e4:14:9a:e0:44:41:18:f9:91:eb:ae:ae:5b:f9:97:b7:
bb:e0:73:24:af:dc:4d:13:99:ef:fd:7e:63:f9:04:ea:d4:3b:
40:02:4d:5f:56:06:5e:d1:81:ad:ca:b2:9d:53:2b:6b:45:65:
e4:d3:af:90:40:59:a2:47:5c:80:62:b4:4f:3a:ed:00:f9:b9:
b3:c5:17:d5:a2:0a:e9:fa:6f:ea:5f:cf:e7:2b:2c:89:48:7e:
20:f8:d0:6c:7d:09:7e:a4:f8:37:4e:7d:c1:56:a9:60:68:98:
8c:80:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:53:47 2026 by rpki-client