Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/XJeijONfdCexlEZTiQ2-0wtFkjU.roa
File: XJeijONfdCexlEZTiQ2-0wtFkjU.roa (raw, json)
Hash identifier: QjzatZEcE3yyHHM21yG7Bv904Jd1j3rI9DssFnvI/Ls=
Subject key identifier: 5C:97:A2:8C:E3:5F:74:27:B1:94:46:53:89:0D:BE:D3:0B:45:92:35
Certificate issuer: /CN=0f712ba14c42b22896157153578a6ddcded3dc35
Certificate serial: 019F236877B986622AA746A9606A278AE4C9
Authority key identifier: 0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/XJeijONfdCexlEZTiQ2-0wtFkjU.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197522
IP address blocks: 91.221.218.0/24 maxlen: 24
91.221.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:b9:86:62:2a:a7:46:a9:60:6a:27:8a:e4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f712ba14c42b22896157153578a6ddcded3dc35
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c97a28ce35f7427b1944653890dbed30b459235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:9c:38:12:0a:11:b2:9e:4a:c6:0e:6d:2d:
84:ce:0f:0d:b4:34:70:27:6d:c8:90:95:b7:94:a9:
b4:24:bd:b8:e9:55:cd:ab:47:13:75:1f:53:23:6f:
2a:66:c4:37:2c:1a:7f:c0:b3:7f:b6:cc:4a:fa:d2:
b7:46:81:a7:6d:15:c2:8a:0c:14:8c:df:81:bb:5c:
70:7a:6f:18:99:a7:40:19:46:a2:0a:ad:3c:97:19:
b3:6b:c8:09:5d:b2:1e:9e:ae:dc:8e:10:4c:b6:47:
84:a8:83:db:72:5f:d0:74:a4:12:47:a4:54:de:7f:
f3:2c:40:86:8c:f2:02:53:00:1a:c7:b8:c9:ff:51:
1a:3c:88:b0:aa:be:f9:53:d8:64:4a:fc:0d:96:28:
05:89:f0:76:fd:54:3b:72:31:d8:bc:83:93:c8:bf:
dc:6e:e2:12:3d:b7:3e:12:38:23:43:27:ce:15:6f:
7a:ff:ad:5e:33:b3:46:cb:aa:c5:f8:91:60:c1:6b:
45:15:fa:6c:5a:57:b7:73:cb:99:42:33:1c:28:07:
43:5e:1f:0a:da:d9:5e:33:31:21:81:f7:3a:ae:95:
de:68:bd:c6:c5:8d:34:e5:4c:01:6b:60:dc:ac:34:
2e:0b:00:2c:f6:2f:e5:23:6d:19:53:3b:c5:c7:64:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:A2:8C:E3:5F:74:27:B1:94:46:53:89:0D:BE:D3:0B:45:92:35
X509v3 Authority Key Identifier:
keyid:0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/XJeijONfdCexlEZTiQ2-0wtFkjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.218.0/23
Signature Algorithm: sha256WithRSAEncryption
10:8d:9d:c0:b3:03:aa:22:f0:b8:6d:a8:4c:53:40:89:59:23:
c8:88:d8:55:30:25:4f:ef:07:ea:6e:38:6b:77:ee:02:83:d2:
32:7d:5c:5e:bf:3a:7a:d0:f0:cb:7f:1b:87:7d:99:2b:88:25:
28:d4:81:80:af:5c:d5:69:e8:94:29:54:85:8e:92:bf:84:a7:
04:a4:5b:48:0c:40:a9:ea:9d:e7:4b:fd:ad:da:32:28:20:49:
34:1d:89:60:94:db:a5:1c:4b:86:6e:f8:2a:39:d5:a9:dc:c7:
6c:3d:8f:eb:ac:b1:d5:73:8f:3d:ea:fb:77:3c:8e:70:e4:ef:
cc:7d:4b:b3:26:ad:de:e9:21:5c:fe:59:f7:ce:2f:95:e4:03:
53:9f:94:cf:f6:2d:cf:b7:f4:6c:4d:db:fc:42:42:27:1e:cc:
c9:89:78:28:f8:5b:7c:8c:0e:7c:d3:c7:36:bb:7c:12:d5:20:
11:6c:cb:f3:67:c8:66:01:af:12:d6:65:4c:f5:cc:ce:5f:3f:
45:da:af:6b:00:3d:26:42:3b:99:e6:d0:00:5b:ea:24:dd:8c:
54:47:f4:06:94:b2:17:a9:77:ce:62:ff:23:ad:24:b0:ba:15:
85:04:24:f3:d8:65:68:ec:02:96:94:82:1b:1f:a3:ad:be:a6:
55:74:09:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHe5hmIqp0apYGoniuTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzEyYmExNGM0MmIyMjg5NjE1NzE1MzU3OGE2ZGRjZGVk
M2RjMzUwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzk3YTI4Y2UzNWY3NDI3YjE5NDQ2NTM4OTBkYmVkMzBiNDU5MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DycOBIKEbKeSsYObS2Ezg8NtDRw
J23IkJW3lKm0JL246VXNq0cTdR9TI28qZsQ3LBp/wLN/tsxK+tK3RoGnbRXCigwU
jN+Bu1xwem8YmadAGUaiCq08lxmza8gJXbIenq7cjhBMtkeEqIPbcl/QdKQSR6RU
3n/zLECGjPICUwAax7jJ/1EaPIiwqr75U9hkSvwNligFifB2/VQ7cjHYvIOTyL/c
buISPbc+EjgjQyfOFW96/61eM7NGy6rF+JFgwWtFFfpsWle3c8uZQjMcKAdDXh8K
2tleMzEhgfc6rpXeaL3GxY005UwBa2DcrDQuCwAs9i/lI20ZUzvFx2RWhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyXoozjX3QnsZRGU4kNvtMLRZI1MB8GA1UdIwQY
MBaAFA9xK6FMQrIolhVxU1eKbdze09w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNFcm9VeENzaWlXRlhGVFY0cHQzTjdUM0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt
YTQyOTZhZDk4NjM1LzEvWEplaWpPTmZkQ2V4bEVaVGlRMi0wd3RGa2pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1
LzEvRDNFcm9VeENzaWlXRlhGVFY0cHQzTjdUM0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW93aMA0G
CSqGSIb3DQEBCwUAA4IBAQAQjZ3AswOqIvC4bahMU0CJWSPIiNhVMCVP7wfqbjhr
d+4Cg9IyfVxevzp60PDLfxuHfZkriCUo1IGAr1zVaeiUKVSFjpK/hKcEpFtIDECp
6p3nS/2t2jIoIEk0HYlglNulHEuGbvgqOdWp3MdsPY/rrLHVc4896vt3PI5w5O/M
fUuzJq3e6SFc/ln3zi+V5ANTn5TP9i3Pt/RsTdv8QkInHszJiXgo+Ft8jA5808c2
u3wS1SARbMvzZ8hmAa8S1mVM9czOXz9F2q9rAD0mQjuZ5tAAW+ok3YxUR/QGlLIX
qXfOYv8jrSSwuhWFBCTz2GVo7AKWlIIbH6OtvqZVdAkP
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:37:07 2026 by rpki-client