Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/xbvEJZeUt0xfTCQkzUMYNid2WuU.roa
File: xbvEJZeUt0xfTCQkzUMYNid2WuU.roa (raw, json)
Hash identifier: N+c9uTWESBLyJAw1GRbCX5BbluIVDmwBAavnIr/6+Wc=
Subject key identifier: C5:BB:C4:25:97:94:B7:4C:5F:4C:24:24:CD:43:18:36:27:76:5A:E5
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 019B7F8370941D1D65E20BD7A41A73989B29
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/xbvEJZeUt0xfTCQkzUMYNid2WuU.roa
Signing time: Fri 02 Jan 2026 16:21:19 +0000
ROA not before: Fri 02 Jan 2026 16:21:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29397
IP address blocks: 91.224.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:70:94:1d:1d:65:e2:0b:d7:a4:1a:73:98:9b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Jan 2 16:21:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5bbc4259794b74c5f4c2424cd43183627765ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:b1:bd:8f:78:c0:42:bd:87:86:48:da:29:
fb:47:0f:bb:9c:1b:69:b1:ac:94:82:01:b8:f7:80:
a9:08:fc:54:7a:81:24:2f:84:73:5a:94:70:1d:83:
9e:ae:dc:6b:8e:cf:d0:88:6d:e4:97:02:e3:ed:38:
9a:e1:e4:7c:30:bc:4d:6b:30:0e:7d:f2:33:11:e1:
2c:19:8d:8d:91:b2:56:e1:98:7e:16:00:e1:3a:c0:
73:f2:43:85:7a:01:77:32:41:af:c4:4c:00:d0:cd:
a0:a3:31:78:5f:ca:6f:49:93:8d:ed:10:12:7c:02:
44:c8:50:21:cc:b7:d3:ce:53:80:5d:d6:07:3d:23:
24:b6:2d:e9:ad:07:c3:bd:a6:42:17:ed:00:cb:72:
2c:1c:40:99:15:0d:76:0d:28:29:42:48:30:5d:0f:
9b:cb:6a:5c:dd:09:12:53:f8:d1:f7:34:09:36:a9:
be:7b:8a:cb:a8:02:c2:05:cb:d9:ff:8f:39:c2:ec:
78:29:4a:4b:67:b1:5a:c1:22:ce:f3:fc:27:8c:a6:
2b:7c:b6:ef:f8:52:ff:58:17:b6:21:79:3c:04:cd:
36:26:f2:68:cf:f3:f5:a6:50:02:06:1a:f7:86:a6:
d2:7b:75:3a:9e:2e:de:ca:5e:27:d6:b4:50:bb:79:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:C4:25:97:94:B7:4C:5F:4C:24:24:CD:43:18:36:27:76:5A:E5
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/xbvEJZeUt0xfTCQkzUMYNid2WuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.240.0/23
Signature Algorithm: sha256WithRSAEncryption
86:b9:69:c3:b4:3b:71:5f:ef:af:9f:49:4d:cd:e4:55:1b:0e:
38:17:cb:96:d0:84:89:92:65:8b:1a:f7:5d:83:86:c6:58:57:
f6:a5:4c:e1:90:d2:b0:21:2f:2a:53:9a:71:c5:3d:a3:0d:c2:
11:12:ad:9b:68:84:db:84:81:f8:0c:da:00:8a:08:ae:ec:c0:
ba:18:c5:01:4a:66:f1:75:6a:cc:e1:d0:32:c1:62:34:e5:9f:
c6:9b:65:24:a7:5c:a1:7e:90:dc:ff:d4:b0:d6:33:da:69:a8:
bb:56:6a:39:56:fa:a0:66:cb:37:ab:e0:e5:04:70:73:59:e6:
2c:ef:bb:cf:78:18:27:0a:6c:15:08:0f:5f:07:0c:5b:54:a8:
6b:8a:22:5f:29:79:e2:ee:f1:43:36:a9:7e:42:9e:e3:77:d4:
13:51:86:db:ff:9f:b9:1f:a6:f3:28:92:4a:a7:70:1e:32:02:
5b:61:03:dd:a3:0d:82:2c:bc:21:3c:a0:3d:bb:23:53:f2:80:
ba:e6:92:64:76:f4:86:59:39:67:2c:95:ee:90:49:a9:5b:f9:
52:e7:0d:33:ff:5e:a3:d9:68:c6:62:b0:34:06:1d:a6:40:36:
7b:2a:56:94:67:89:1b:9d:95:73:15:40:8b:3a:80:83:4f:89:
7d:f4:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:05 2026 by rpki-client