Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/XPAo9csIakgnxL1vkDoDw7OBqQY.roa
File: XPAo9csIakgnxL1vkDoDw7OBqQY.roa (raw, json)
Hash identifier: /BzxC1mTgVHXG35cXVsO81Ky1QleogI+28Bk2r4rk5Y=
Subject key identifier: 5C:F0:28:F5:CB:08:6A:48:27:C4:BD:6F:90:3A:03:C3:B3:81:A9:06
Certificate issuer: /CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Certificate serial: 019F23684C11BC8EE20BB15824B6D86587D0
Authority key identifier: 14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/XPAo9csIakgnxL1vkDoDw7OBqQY.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29286
IP address blocks: 91.102.104.0/21 maxlen: 21
91.102.106.0/24 maxlen: 24
91.102.107.0/24 maxlen: 24
185.20.148.0/22 maxlen: 22
185.20.148.0/24 maxlen: 24
185.20.149.0/24 maxlen: 24
185.20.150.0/24 maxlen: 24
185.20.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4c:11:bc:8e:e2:0b:b1:58:24:b6:d8:65:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cf028f5cb086a4827c4bd6f903a03c3b381a906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:b5:26:f4:99:23:8b:8a:a1:2f:80:5b:11:
d3:29:fd:55:af:9a:a8:bf:c2:39:5d:cf:53:08:f9:
25:4e:ad:d8:d8:12:c8:ef:78:37:9b:9b:23:ff:db:
69:1f:36:21:0b:c6:2a:24:fa:11:6d:cc:48:f8:3c:
90:8a:a2:e7:63:ff:91:43:a9:59:7b:32:93:d6:bf:
bb:cd:d4:e4:c4:bb:a3:dd:0a:4c:fb:6b:0a:eb:f1:
c7:68:d9:75:af:8e:13:f1:93:0d:9c:db:70:d8:e0:
99:e3:07:b2:fc:c4:86:bc:45:4e:d7:78:64:3a:d1:
aa:53:26:74:63:e3:74:db:fd:ff:c0:8c:08:82:39:
83:9d:a4:f6:b3:e6:0c:0a:09:cb:f2:3c:6e:b5:5f:
0c:6d:ef:71:ef:93:da:cb:be:74:12:01:3e:af:4f:
5c:43:6f:e0:61:cb:68:c5:65:82:6c:9b:e4:24:cb:
6a:78:8a:8c:57:d1:16:ec:da:cf:7c:64:13:3c:c3:
85:e5:24:7c:7c:e3:72:6c:75:5d:1b:eb:33:1f:5a:
e3:6f:6e:b4:03:82:4f:0d:02:57:12:3c:3e:d8:7f:
87:08:4b:7d:5e:0c:68:43:ae:f4:4d:61:8e:3d:8b:
b5:f0:3c:83:6d:ef:c7:b1:e0:62:75:7f:9a:44:9f:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:28:F5:CB:08:6A:48:27:C4:BD:6F:90:3A:03:C3:B3:81:A9:06
X509v3 Authority Key Identifier:
keyid:14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/XPAo9csIakgnxL1vkDoDw7OBqQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.104.0/21
185.20.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d4:fc:31:07:0b:b0:13:21:a2:6d:6e:83:82:ee:44:f5:c5:
ce:91:8a:d5:96:49:6f:f0:91:8b:d4:59:9d:89:ac:aa:c5:6a:
cf:0f:39:98:34:77:43:7d:28:5d:28:a6:5c:6b:f6:70:e8:ce:
9a:36:0d:46:5e:57:b4:0d:23:16:89:31:75:e2:4c:c9:88:c9:
b1:b9:e1:99:07:6a:f9:58:6b:e8:62:7a:54:29:74:80:bb:ce:
0c:c4:81:ab:06:89:c1:89:cb:84:fe:43:37:33:07:5e:6e:d1:
27:c0:73:dc:b0:d1:e0:69:b2:db:1a:5b:0d:9f:f1:aa:ca:80:
3c:2c:2e:cc:76:0e:f4:2c:9a:3c:94:5f:05:a7:e3:8d:a7:09:
03:68:2e:98:1b:e0:d5:43:4c:4a:b4:8d:97:74:a1:ed:3d:71:
21:99:21:30:ff:2e:a7:2d:72:81:12:13:48:62:18:fb:80:34:
7a:e9:ff:7d:7d:32:53:9d:6c:b9:4f:5f:00:30:47:ed:ba:8f:
7c:53:62:a1:67:10:ca:b9:1d:7e:bb:c7:73:0e:dd:77:b6:ab:
24:da:22:63:da:37:c9:ef:ba:17:e7:f2:e7:31:06:1f:78:8c:
93:93:3d:25:e2:76:b1:26:2b:0c:ad:02:69:81:c7:fa:60:b9:
f3:13:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:33 2026 by rpki-client