Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/XeLe21TCUgGgtYtOHlBkAyxb588.roa
File: XeLe21TCUgGgtYtOHlBkAyxb588.roa (raw, json)
Hash identifier: xiA/Defg/C+SjF26EFCXyw3Y0ZfZkMB+IPbJcwNxla4=
Subject key identifier: 5D:E2:DE:DB:54:C2:52:01:A0:B5:8B:4E:1E:50:64:03:2C:5B:E7:CF
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 01A11C9AC13C72B0B48BD737FFB1E62FCB67
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/XeLe21TCUgGgtYtOHlBkAyxb588.roa
Signing time: Thu 08 Oct 2026 17:41:06 +0000
ROA not before: Thu 08 Oct 2026 17:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56718
IP address blocks: 82.163.164.0/23 maxlen: 23
82.163.166.0/23 maxlen: 23
185.83.12.0/23 maxlen: 23
185.83.14.0/23 maxlen: 23
2a05:9780::/32 maxlen: 32
2a05:9780::/40 maxlen: 40
2a05:9780:200::/40 maxlen: 40
2a05:9786::/32 maxlen: 32
2a05:9787::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:9a:c1:3c:72:b0:b4:8b:d7:37:ff:b1:e6:2f:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Oct 8 17:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5de2dedb54c25201a0b58b4e1e5064032c5be7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:4f:2e:03:57:bc:27:f8:98:52:90:e5:48:
44:3c:6b:b1:c2:c3:a5:26:bc:a8:22:4c:77:fb:39:
49:b5:fd:22:d7:fe:76:0d:20:f1:d8:62:c9:fc:40:
37:df:d8:8f:9a:97:b3:26:73:6d:c6:20:e3:f5:c9:
dc:7a:a8:6c:af:2f:c8:50:68:79:18:a0:5e:be:5d:
0d:2b:20:f2:5e:6a:58:b5:43:69:1a:b1:2b:3a:4e:
dd:3b:50:ef:68:06:5d:78:d1:0d:b1:61:6a:f9:0e:
6e:2e:51:04:27:7d:06:bc:62:c0:20:48:10:dd:14:
42:c9:4d:62:7c:62:b9:bc:ce:33:c9:fb:c5:0a:78:
a1:29:61:02:49:94:89:ff:06:da:45:03:92:ed:49:
6b:0c:49:8c:63:19:ce:9e:ac:ba:eb:f6:d1:1c:6d:
8e:f0:25:fb:32:d8:98:6f:9e:59:c9:0e:f8:cd:12:
c4:3d:c6:62:aa:cc:18:c0:0a:19:8f:18:9e:f6:4a:
8c:77:e3:14:f2:1b:7c:94:eb:c1:d6:eb:27:e2:bc:
eb:c8:f6:11:23:df:74:75:6a:44:7d:57:a2:2a:09:
5e:83:b9:1d:bc:40:84:bf:2d:49:fb:e1:70:42:a4:
33:c0:bb:c6:eb:30:55:84:42:75:b7:1c:37:c2:1a:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E2:DE:DB:54:C2:52:01:A0:B5:8B:4E:1E:50:64:03:2C:5B:E7:CF
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/XeLe21TCUgGgtYtOHlBkAyxb588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.164.0/22
185.83.12.0/22
IPv6:
2a05:9780::/32
2a05:9786::/31
Signature Algorithm: sha256WithRSAEncryption
3b:77:b8:2e:03:cf:96:f0:b7:31:f9:14:54:e9:92:e7:6f:ff:
6a:38:65:6c:88:2e:9d:d0:a1:a8:0d:a3:35:5f:c3:96:65:db:
7b:0b:8b:12:8f:88:a1:8f:9b:85:35:2f:84:69:de:80:59:8c:
36:85:eb:a5:ec:02:ee:f9:66:be:37:d5:e8:1e:5b:2e:5c:1a:
3d:e3:64:c6:17:3a:d2:02:6e:61:dd:42:16:ac:66:ad:91:71:
06:17:5f:1f:53:28:9d:c9:1f:0a:c1:06:ff:2d:f3:31:d7:33:
27:5a:eb:23:50:50:24:19:3c:a3:5a:59:d2:fe:95:e6:5f:e4:
e4:29:ff:df:16:da:e6:1d:21:d5:83:6c:82:7e:3f:82:60:90:
48:59:29:ff:12:08:9b:56:77:27:f0:79:ad:a0:7a:e7:f3:fc:
76:4d:1b:97:a1:9c:be:b6:1f:b2:f5:d4:f1:1f:c3:4a:04:26:
77:00:e6:8e:91:52:b7:3f:9a:83:f5:48:30:0f:38:9d:0d:fd:
f0:de:8b:bf:9d:a7:27:4e:f9:de:8b:d5:09:aa:d6:bc:e7:94:
6a:a9:12:93:df:98:33:fd:74:69:2f:f5:ed:f6:5f:da:00:1b:
f5:a1:22:a8:65:18:fe:76:3a:29:57:d6:81:53:4c:ab:54:2f:
ef:75:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:04:47 2026 by rpki-client