Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/XqMHBcQ29GYlAXAHxl_tZSyNUyw.roa
File: XqMHBcQ29GYlAXAHxl_tZSyNUyw.roa (raw, json)
Hash identifier: guYbephFWzsh8FHC2Qa9VPR7KtfEEUDQXbV2Oqjwf9U=
Subject key identifier: 5E:A3:07:05:C4:36:F4:66:25:01:70:07:C6:5F:ED:65:2C:8D:53:2C
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019F6FD6EB52C706A5400B7D83DE42D7C186
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/XqMHBcQ29GYlAXAHxl_tZSyNUyw.roa
Signing time: Fri 17 Jul 2026 11:29:43 +0000
ROA not before: Fri 17 Jul 2026 11:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41872
IP address blocks: 37.209.176.0/20 maxlen: 20
81.92.96.0/20 maxlen: 20
91.190.0.0/19 maxlen: 19
94.100.144.0/20 maxlen: 20
212.35.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:d6:eb:52:c7:06:a5:40:0b:7d:83:de:42:d7:c1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Jul 17 11:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea30705c436f46625017007c65fed652c8d532c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:6d:bd:79:b1:cd:f7:cf:ed:7b:26:dd:1b:
9f:a8:cf:2a:2e:e6:53:e3:a4:25:35:df:6c:81:df:
f3:0d:b1:13:5e:86:a5:0d:1d:07:ae:44:07:42:9e:
46:a8:8f:09:b4:8d:56:c9:ca:a2:09:1f:e8:d8:32:
c9:23:4c:d7:c7:67:e7:f6:e4:5a:c2:18:63:79:0a:
9d:fc:ec:77:e4:a0:85:7f:c6:2a:24:32:95:b0:4d:
b2:bc:69:3d:79:80:47:fd:89:86:f5:c7:4b:07:fa:
99:2a:61:7d:45:18:95:d2:9c:85:57:66:38:42:25:
ac:bf:9d:9e:4a:ef:73:1f:14:56:27:87:cf:fb:e1:
03:72:dd:9b:aa:b2:1d:44:8a:f0:07:f5:32:4d:6a:
2f:d6:f5:14:2b:d5:8f:65:5f:15:6b:60:a2:3f:46:
c7:49:e5:45:eb:7b:8d:39:f1:c1:db:ad:fe:21:91:
a7:e1:c3:10:39:e7:c6:08:d0:b7:4b:24:54:2a:39:
bd:de:93:76:b1:ef:c2:4f:7f:53:9e:cb:bd:e4:29:
a0:d7:47:70:e1:3d:95:f6:63:32:a1:8b:3c:04:2d:
78:f9:ad:dd:e4:e4:9e:a0:4f:7a:51:6a:c8:b9:f3:
eb:52:a2:d6:bc:78:09:26:50:4f:b3:eb:50:1d:e1:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:07:05:C4:36:F4:66:25:01:70:07:C6:5F:ED:65:2C:8D:53:2C
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/XqMHBcQ29GYlAXAHxl_tZSyNUyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.176.0/20
81.92.96.0/20
91.190.0.0/19
94.100.144.0/20
212.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
77:a1:e1:b9:05:5d:46:c3:89:75:ae:b3:6a:a0:ed:5a:94:82:
60:88:5c:e9:a7:2a:6b:e5:1d:e8:26:d0:71:a1:5a:26:16:00:
b4:79:23:ce:7e:d6:b7:b2:26:ff:2a:75:fb:b5:8b:16:00:bd:
31:65:7d:e3:17:cd:50:81:6f:97:6b:a6:20:58:82:fa:dd:8e:
b4:27:bf:45:77:1a:d0:b1:37:88:98:58:e7:32:d3:ba:cb:d5:
67:fc:4d:03:36:f5:17:f0:a6:19:01:82:16:aa:9f:12:b4:3a:
e9:64:a4:08:6b:cc:b7:e0:56:9b:b3:0a:94:fb:37:3c:38:fe:
82:7b:e0:73:f3:4e:81:5a:50:65:c6:9d:8d:5e:04:0d:4a:c9:
32:04:35:20:a9:19:27:ef:c4:ca:ae:08:85:45:1e:ea:41:4e:
fa:8d:2c:25:80:49:55:a4:5a:ab:30:1b:d9:a4:93:c9:e9:11:
3e:d4:76:ee:51:01:44:a6:9a:a6:79:df:b9:2c:3e:c7:56:87:
99:50:22:95:a0:8c:35:1a:28:71:1c:d9:e5:a9:1a:c9:29:c5:
ac:c3:4b:d7:97:77:1a:16:01:f1:fa:a1:ab:67:d6:53:4a:01:
9e:05:2a:3d:36:28:04:89:cb:42:65:0a:0d:71:50:db:94:5a:
00:f1:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:21 2026 by rpki-client