Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/XVXBPxWBJpET7dFUiAt-fsYTkVU.roa
File: XVXBPxWBJpET7dFUiAt-fsYTkVU.roa (raw, json)
Hash identifier: cEb9p0FvftbrOHlUvrF0VkI0dQA9GPRciRNVlBGtobU=
Subject key identifier: 5D:55:C1:3F:15:81:26:91:13:ED:D1:54:88:0B:7E:7E:C6:13:91:55
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019F271DAB93CDE6B1B66D97FCA0DE3F521E
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/XVXBPxWBJpET7dFUiAt-fsYTkVU.roa
Signing time: Fri 03 Jul 2026 08:34:43 +0000
ROA not before: Fri 03 Jul 2026 08:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.18.52.0/22 maxlen: 24
89.18.56.0/22 maxlen: 24
89.18.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:1d:ab:93:cd:e6:b1:b6:6d:97:fc:a0:de:3f:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jul 3 08:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d55c13f1581269113edd154880b7e7ec6139155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:6a:76:e8:42:14:9a:b6:31:bf:90:93:b4:
4d:22:02:b1:75:a5:31:2d:27:a3:5f:69:a4:63:4c:
3e:cb:ef:87:c7:15:cb:3b:5a:7f:e5:5c:29:12:ea:
4a:eb:ad:de:c7:46:e3:45:f3:d1:9f:1c:95:1a:cd:
5b:4c:1b:30:95:80:d6:5f:a7:b5:21:26:41:55:a7:
c5:03:6e:21:a5:fe:80:ae:00:ca:b1:94:c2:fc:16:
44:42:18:31:f8:fe:b8:d6:3d:f3:04:22:f8:a9:65:
8a:22:2e:cc:e6:31:13:1b:0b:94:25:63:f5:92:1f:
3e:e8:2c:f6:0c:e3:5b:47:a2:b7:ad:25:01:ad:25:
41:46:d5:dc:f7:98:91:f6:d2:00:d5:c2:8f:b4:fb:
bc:81:3a:06:9a:a8:56:2e:aa:84:81:32:15:a3:b4:
c6:6e:98:9b:23:b8:1d:21:33:8a:e6:28:31:01:97:
61:bd:85:1b:96:2d:24:58:3e:fc:ab:5e:b2:e5:bf:
4d:d4:a7:df:7d:eb:8a:1d:a9:69:a7:c9:0b:47:87:
83:74:7c:79:af:03:07:a3:e3:d4:cf:2b:05:f3:14:
75:b8:01:ae:05:65:b4:cb:e5:d2:d5:4b:d1:76:28:
7e:65:7b:bd:2a:29:7f:23:7d:72:f8:75:11:81:03:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:C1:3F:15:81:26:91:13:ED:D1:54:88:0B:7E:7E:C6:13:91:55
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/XVXBPxWBJpET7dFUiAt-fsYTkVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.52.0-89.18.63.255
Signature Algorithm: sha256WithRSAEncryption
c0:65:02:ba:3f:5a:a2:66:ad:66:63:13:c7:4d:0f:90:a8:a7:
93:e5:6e:f3:a8:08:c0:2b:96:2e:da:c0:d9:a6:bb:97:8f:1e:
1b:8d:08:0a:6c:33:d8:37:87:09:7d:9e:ad:9f:de:d2:b0:03:
b1:76:5c:b0:69:78:f9:25:8a:fc:91:b7:ab:0d:20:03:1b:93:
51:79:45:34:01:a3:74:bc:06:2b:a1:93:79:1d:3a:ab:74:c9:
c9:c0:40:3b:1f:9e:d2:56:71:91:9d:e0:e2:22:55:84:26:4f:
ab:11:c7:ad:65:ef:a9:9a:72:9c:90:b3:28:97:f1:9c:10:83:
a3:9b:c7:e2:b0:3c:bc:a3:b9:38:f9:83:33:1f:36:0d:62:19:
a7:dc:bd:f4:18:af:93:8a:f2:15:9c:db:c6:72:c9:fc:9b:90:
02:18:7d:67:4a:a3:cd:08:90:e6:5a:3f:b4:14:3d:a4:f1:e9:
37:95:ac:19:86:f8:be:bc:35:42:03:b5:70:3c:a3:67:ac:00:
ea:2f:6a:a6:f1:52:71:9a:e2:9c:90:ba:d8:fa:5a:dd:c5:a7:
20:d7:3a:b2:81:98:92:14:ea:89:85:99:96:1c:74:a6:f5:75:
c6:13:d0:ea:f1:f7:f2:f9:19:c1:ef:0c:9e:bd:6b:be:76:3e:
2f:98:61:f9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8nHauTzeaxtm2X/KDeP1IeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjYwNzAzMDgzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDU1YzEzZjE1ODEyNjkxMTNlZGQxNTQ4ODBiN2U3ZWM2MTM5MTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfVqduhCFJq2Mb+Qk7RNIgKxdaUx
LSejX2mkY0w+y++HxxXLO1p/5VwpEupK663ex0bjRfPRnxyVGs1bTBswlYDWX6e1
ISZBVafFA24hpf6ArgDKsZTC/BZEQhgx+P641j3zBCL4qWWKIi7M5jETGwuUJWP1
kh8+6Cz2DONbR6K3rSUBrSVBRtXc95iR9tIA1cKPtPu8gToGmqhWLqqEgTIVo7TG
bpibI7gdITOK5igxAZdhvYUbli0kWD78q16y5b9N1KfffeuKHalpp8kLR4eDdHx5
rwMHo+PUzysF8xR1uAGuBWW0y+XS1UvRdih+ZXu9Kil/I31y+HURgQN+8wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFF1VwT8VgSaRE+3RVIgLfn7GE5FVMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvWFZYQlB4V0JKcEVUN2RGVWlBdC1mc1lUa1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJZEjQD
BAZZEgAwDQYJKoZIhvcNAQELBQADggEBAMBlAro/WqJmrWZjE8dND5Cop5PlbvOo
CMArli7awNmmu5ePHhuNCApsM9g3hwl9nq2f3tKwA7F2XLBpePklivyRt6sNIAMb
k1F5RTQBo3S8Biuhk3kdOqt0ycnAQDsfntJWcZGd4OIiVYQmT6sRx61l76macpyQ
syiX8ZwQg6Obx+KwPLyjuTj5gzMfNg1iGafcvfQYr5OK8hWc28ZyyfybkAIYfWdK
o80IkOZaP7QUPaTx6TeVrBmG+L68NUIDtXA8o2esAOovaqbxUnGa4pyQutj6Wt3F
pyDXOrKBmJIU6omFmZYcdKb1dcYT0Orx9/L5GcHvDJ69a752Pi+YYfk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:22 2026 by rpki-client