Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/XxbITpOJuSZiY6H9TV5ap_4aUaY.roa
File: XxbITpOJuSZiY6H9TV5ap_4aUaY.roa (raw, json)
Hash identifier: GGGD2/9LfCjCuy4UA1Jhb/88EGXnxXM/rGiFG8eHBow=
Subject key identifier: 5F:16:C8:4E:93:89:B9:26:62:63:A1:FD:4D:5E:5A:A7:FE:1A:51:A6
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019DBA0F21B0D568D89247DDA51DD8BF573F
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/XxbITpOJuSZiY6H9TV5ap_4aUaY.roa
Signing time: Thu 23 Apr 2026 11:17:26 +0000
ROA not before: Thu 23 Apr 2026 11:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199476
IP address blocks: 194.39.244.0/24 maxlen: 24
2a13:9d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:0f:21:b0:d5:68:d8:92:47:dd:a5:1d:d8:bf:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Apr 23 11:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f16c84e9389b9266263a1fd4d5e5aa7fe1a51a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:84:8e:ee:f7:6c:85:5f:55:b3:e0:24:b7:
37:2d:c0:82:ed:e7:f2:21:22:fb:b1:af:c7:7a:3a:
cc:bd:1f:72:54:2e:82:7f:44:38:f8:b8:65:f8:8e:
31:88:a3:b2:c4:76:66:63:bc:f4:60:f7:d6:a8:49:
5e:50:ce:ab:e9:b1:0c:55:37:8c:15:19:20:0d:ba:
e7:28:ec:7a:d9:b0:85:2c:c1:5c:96:86:fd:44:bb:
c2:26:61:ef:6b:3f:00:87:e3:13:6e:96:f8:0d:5b:
20:ee:d6:33:28:6d:d1:46:11:2f:67:16:dd:71:9e:
b3:00:d8:9e:9f:df:b3:d3:24:09:dc:51:8d:98:04:
d0:24:4f:b1:1d:1e:f6:d3:27:91:2d:51:9a:77:09:
cf:e6:d0:5b:c6:d1:85:96:47:54:84:a1:62:15:4e:
70:d6:d4:43:9b:a3:16:ce:d3:e8:51:b8:7c:b4:30:
7d:16:a5:5b:3f:33:7e:7e:7d:a0:3c:f7:c4:74:1c:
96:40:04:d1:8c:42:a3:71:c9:86:8d:9c:47:26:59:
26:7b:a3:ee:17:52:c4:d7:d2:17:4f:6c:7f:d9:03:
93:b8:76:52:4d:7a:1d:a3:86:b8:b1:07:31:39:f5:
6c:a1:4e:81:cf:cd:65:09:9f:76:2d:48:ab:f3:4a:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:C8:4E:93:89:B9:26:62:63:A1:FD:4D:5E:5A:A7:FE:1A:51:A6
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/XxbITpOJuSZiY6H9TV5ap_4aUaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.244.0/24
IPv6:
2a13:9d80::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f0:88:e2:83:2d:74:ab:00:8e:18:19:51:37:0f:7b:04:38:
6b:83:0e:e7:e5:28:e4:13:68:8e:09:04:e9:18:58:ff:9b:a4:
df:91:84:12:da:9f:4d:40:e0:55:94:ae:09:c5:34:32:16:ae:
7e:e9:8f:43:97:b0:43:bb:9b:cf:88:80:70:6d:a1:7f:6d:bf:
ff:81:bb:3f:9e:4c:1f:1b:fe:b7:03:72:a2:bd:3e:99:0d:48:
bf:2b:6e:9e:7b:21:75:f0:3a:e3:b3:d6:ff:99:23:05:09:83:
3b:8f:9e:1d:27:d8:44:be:c4:88:e3:e3:59:67:e7:f6:24:79:
87:78:e8:a1:0a:9a:54:2c:49:41:24:0d:c8:70:c8:f6:ec:ec:
a2:54:2c:cc:8c:7b:48:22:92:25:0e:ec:23:41:ef:6a:d2:e8:
dd:03:4b:fd:be:d4:06:3c:21:40:8c:65:6f:97:fb:b1:5b:63:
8e:ab:f7:64:1f:02:72:8a:dc:5b:3b:d9:d0:a9:63:11:28:12:
0b:55:c3:5c:7d:0c:ea:c0:e0:06:c5:1d:10:38:29:dd:9c:3d:
50:32:0b:34:79:fb:fb:9f:9a:51:87:f5:fc:3a:12:fb:27:a9:
93:59:28:6b:48:44:ef:3c:98:3b:70:b7:8c:82:dc:c2:d7:e1:
93:14:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:04:03 2026 by rpki-client