Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpWxIk-v22UuQpNWzIoL91XQClA.roa
File: XpWxIk-v22UuQpNWzIoL91XQClA.roa (raw, json)
Hash identifier: 0KuPg2sedrWxjiL6VD7kxMSNh3+ZDJJQYHEHk6PmDeg=
Subject key identifier: 5E:95:B1:22:4F:AF:DB:65:2E:42:93:56:CC:8A:0B:F7:55:D0:0A:50
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01999B3CE3ACFAAE8800A393189EC66DB766
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpWxIk-v22UuQpNWzIoL91XQClA.roa
Signing time: Tue 30 Sep 2025 15:28:02 +0000
ROA not before: Tue 30 Sep 2025 15:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203052
IP address blocks: 192.121.204.0/22 maxlen: 22
192.176.224.0/22 maxlen: 22
193.180.76.0/22 maxlen: 22
194.132.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:3c:e3:ac:fa:ae:88:00:a3:93:18:9e:c6:6d:b7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 30 15:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e95b1224fafdb652e429356cc8a0bf755d00a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:52:bc:e5:0c:fb:d4:bf:36:ea:9a:bb:d9:
35:3b:18:b8:e7:75:97:0f:32:ea:34:1c:75:36:18:
b5:d3:ee:c9:a2:2a:16:1b:e9:db:b2:87:e3:31:03:
e4:c7:8a:61:d8:d7:17:89:5f:56:c9:e2:32:f7:c9:
c9:44:20:8f:d5:2d:e9:82:1f:c5:d6:9c:c8:0b:9a:
f4:44:aa:68:16:c0:0e:cd:e1:13:8a:c0:1c:71:c3:
f0:4d:e6:07:f4:53:cc:4d:d2:83:c7:57:17:4d:15:
85:9d:bc:5a:af:c5:29:5a:30:34:56:1a:8d:e0:77:
76:b8:43:bd:68:5f:a7:c6:b6:d6:c3:55:0a:48:75:
78:57:0b:cc:e7:98:c6:66:33:95:41:f7:61:74:a1:
91:e9:8b:f4:32:ae:ef:c0:f6:a1:7b:e8:e5:c5:85:
d7:b0:cb:c5:a0:52:2c:27:a8:65:77:c5:aa:67:6d:
8e:4c:34:17:d5:46:4e:d2:2b:97:b5:5c:25:43:94:
67:0d:0e:d4:1f:b2:df:20:94:5d:f0:51:4f:21:c6:
fc:0a:01:65:37:94:67:77:33:4a:f2:16:32:a6:d1:
eb:d6:b1:46:45:21:1b:de:97:34:32:c0:0a:fb:7e:
80:6a:e2:d3:d0:33:c7:82:16:21:cf:57:ef:38:42:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:B1:22:4F:AF:DB:65:2E:42:93:56:CC:8A:0B:F7:55:D0:0A:50
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpWxIk-v22UuQpNWzIoL91XQClA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.204.0/22
192.176.224.0/22
193.180.76.0/22
194.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:02:ae:82:81:2b:e9:3b:c8:5d:7f:27:de:2b:94:9c:d7:02:
21:1b:a3:17:55:75:25:fc:50:f1:a5:86:83:fe:25:9c:af:e0:
b1:3d:35:17:04:d0:28:42:0f:93:64:20:66:e7:34:e4:39:0c:
0b:ce:24:b8:7c:1e:9b:af:03:06:42:18:62:f9:ce:ad:2b:a1:
56:60:cd:3c:88:59:a2:32:15:c4:03:1a:48:29:e7:4f:84:ac:
a8:f3:01:66:21:f6:20:30:5f:ef:ed:eb:4f:ae:ad:71:28:02:
1b:16:55:94:4f:2e:37:ed:2e:cf:5e:ec:01:05:9d:03:83:4c:
e7:fd:7f:5f:01:c8:d3:d0:72:9c:c0:93:b8:b7:ff:93:db:31:
07:e2:2e:ee:5b:cb:f2:06:99:84:9e:6f:49:74:f3:2a:ec:84:
14:ba:0f:2a:cc:bf:65:99:02:f3:3b:e1:cc:fc:8d:b8:f1:ed:
8b:53:07:b0:14:db:ec:32:97:3a:ed:e9:8d:88:91:78:f8:fa:
54:43:5e:bc:de:15:0a:c3:49:86:7f:d0:d4:c4:6f:61:22:f0:
2c:35:44:c5:a9:b8:f9:5e:42:3b:6d:db:95:da:c5:62:27:07:
44:45:4f:92:1d:8c:1e:b7:6a:fc:bb:5e:d5:0f:99:78:22:d0:
05:82:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:11 2025 by rpki-client