Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/XentJpaSwuYWEUW1g-PBSkCIv1c.roa
File: XentJpaSwuYWEUW1g-PBSkCIv1c.roa (raw, json)
Hash identifier: HQVZVd/XqwKNSfr4IZxQSiN7B2lnjobnGCn4wcMesDo=
Subject key identifier: 5D:E9:ED:26:96:92:C2:E6:16:11:45:B5:83:E3:C1:4A:40:88:BF:57
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019EB70E0C825DA598E80CE4C6B1AA79A307
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/XentJpaSwuYWEUW1g-PBSkCIv1c.roa
Signing time: Thu 11 Jun 2026 14:20:11 +0000
ROA not before: Thu 11 Jun 2026 14:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 2a0d:d940:2003::/48 maxlen: 48
2a0d:d940:9014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:0e:0c:82:5d:a5:98:e8:0c:e4:c6:b1:aa:79:a3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 11 14:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5de9ed269692c2e6161145b583e3c14a4088bf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:81:07:d8:ac:04:b6:a6:0d:ad:eb:de:24:
c2:23:2c:26:d3:ec:41:a6:41:b7:c2:c0:83:63:68:
47:d7:3a:2d:31:f4:b6:67:e8:14:22:2d:cf:fa:19:
64:43:2c:93:d5:41:43:06:01:5e:a3:7f:89:65:25:
1d:80:7b:ca:26:d3:d9:04:4e:e5:3a:27:98:81:92:
eb:2a:ed:05:79:3c:55:0d:72:4f:78:05:97:1c:7c:
8c:79:97:38:9d:1d:4c:fe:a4:07:a3:b3:38:0d:36:
74:9a:77:f9:d7:04:f8:18:7b:25:b4:4c:81:8b:61:
d0:07:72:a4:60:14:0a:de:9b:0a:1b:ef:79:b5:3b:
97:3f:41:39:1c:10:fd:d3:44:8f:f7:8a:8d:b1:ad:
cf:c4:b0:1e:94:69:52:55:3e:75:98:05:3d:19:92:
39:90:88:7a:0d:60:c4:12:fe:e5:5d:70:a1:29:12:
41:1d:81:65:77:9d:db:94:5e:12:33:3e:4c:1e:a4:
c7:06:56:f7:2b:07:76:42:31:6e:d5:54:16:77:9c:
8e:77:94:65:14:ea:1b:ab:1e:81:75:81:5a:2f:7b:
e0:a0:3b:0d:4b:6d:89:c1:7f:86:58:05:d3:8a:66:
43:6c:39:30:4c:d1:5a:d1:cf:64:74:78:3a:80:1f:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:ED:26:96:92:C2:E6:16:11:45:B5:83:E3:C1:4A:40:88:BF:57
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/XentJpaSwuYWEUW1g-PBSkCIv1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2003::/48
2a0d:d940:9014::/48
Signature Algorithm: sha256WithRSAEncryption
c0:95:10:6d:49:f2:1d:90:74:ec:91:02:53:4c:e6:09:e0:cf:
a6:5e:aa:ab:e1:0e:ca:34:da:69:d9:87:16:8e:69:9a:5d:41:
ab:32:4b:e5:ef:a1:cb:49:b4:ac:e0:86:e4:33:e8:45:dc:47:
33:a8:ea:07:d4:08:e8:b3:ef:50:11:56:98:f8:ac:8a:88:08:
0e:7a:07:9d:f2:26:96:6b:6c:e0:f0:d0:c7:21:11:1f:18:f2:
01:04:38:dc:a1:62:08:2c:f0:c7:e1:a4:99:81:32:76:58:4c:
d4:af:22:f2:9c:3b:ec:ae:57:b9:93:1c:45:a3:52:0b:a7:ee:
0d:cf:d7:78:89:59:8d:a0:1c:3b:53:4e:30:c3:a4:45:6f:1b:
9d:c3:37:71:ee:03:f6:f5:db:ed:70:b8:7d:d6:46:d2:3f:68:
4e:e9:65:1d:eb:ff:4a:6c:2a:5a:20:66:b3:af:1c:90:8a:2c:
42:72:a1:4b:1d:35:1f:4d:e0:09:a9:59:11:67:99:9c:3d:76:
db:56:fd:a3:e3:bf:56:32:c7:72:7a:a2:21:4c:1f:84:b8:04:
11:b1:a2:7f:e2:18:37:e5:ef:a5:7b:19:49:89:e7:44:6c:90:
84:02:09:01:60:43:ef:47:ae:a1:32:28:06:10:3e:0b:98:50:
9a:e6:44:a0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ63DgyCXaWY6AzkxrGqeaMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNjExMTQyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGU5ZWQyNjk2OTJjMmU2MTYxMTQ1YjU4M2UzYzE0YTQwODhiZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2WBB9isBLamDa3r3iTCIywm0+xB
pkG3wsCDY2hH1zotMfS2Z+gUIi3P+hlkQyyT1UFDBgFeo3+JZSUdgHvKJtPZBE7l
OieYgZLrKu0FeTxVDXJPeAWXHHyMeZc4nR1M/qQHo7M4DTZ0mnf51wT4GHsltEyB
i2HQB3KkYBQK3psKG+95tTuXP0E5HBD900SP94qNsa3PxLAelGlSVT51mAU9GZI5
kIh6DWDEEv7lXXChKRJBHYFld53blF4SMz5MHqTHBlb3Kwd2QjFu1VQWd5yOd5Rl
FOobqx6BdYFaL3vgoDsNS22JwX+GWAXTimZDbDkwTNFa0c9kdHg6gB+MTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF3p7SaWksLmFhFFtYPjwUpAiL9XMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvWGVudEpwYVN3dVlXRVVXMWctUEJTa0NJdjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQCAD
AwcAKg3ZQJAUMA0GCSqGSIb3DQEBCwUAA4IBAQDAlRBtSfIdkHTskQJTTOYJ4M+m
Xqqr4Q7KNNpp2YcWjmmaXUGrMkvl76HLSbSs4IbkM+hF3EczqOoH1Ajos+9QEVaY
+KyKiAgOeged8iaWa2zg8NDHIREfGPIBBDjcoWIILPDH4aSZgTJ2WEzUryLynDvs
rle5kxxFo1ILp+4Nz9d4iVmNoBw7U04ww6RFbxudwzdx7gP29dvtcLh91kbSP2hO
6WUd6/9KbCpaIGazrxyQiixCcqFLHTUfTeAJqVkRZ5mcPXbbVv2j479WMsdyeqIh
TB+EuAQRsaJ/4hg35e+lexlJiedEbJCEAgkBYEPvR66hMigGED4LmFCa5kSg
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:50 2026 by rpki-client