Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/XQN2PVO2BIAMkSThT7E-pns5qnM.roa
File: XQN2PVO2BIAMkSThT7E-pns5qnM.roa (raw, json)
Hash identifier: Y7XQgYH+9nwgMwtIh2gFs5Ndo5hynElaRlQj0CaAZEk=
Subject key identifier: 5D:03:76:3D:53:B6:04:80:0C:91:24:E1:4F:B1:3E:A6:7B:39:AA:73
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A0BD5F30484E699EA7FBFAF46C59DFA9E9
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/XQN2PVO2BIAMkSThT7E-pns5qnM.roa
Signing time: Sun 20 Sep 2026 05:52:07 +0000
ROA not before: Sun 20 Sep 2026 05:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62048
IP address blocks: 94.182.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:5f:30:48:4e:69:9e:a7:fb:fa:f4:6c:59:df:a9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 20 05:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d03763d53b604800c9124e14fb13ea67b39aa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:73:3f:4e:bd:9e:c9:fd:61:fd:29:a3:46:
51:46:87:9c:03:50:2d:23:5f:c7:e0:4d:21:d8:21:
fe:01:18:74:9e:16:c8:cb:90:64:76:0f:0d:62:37:
e9:a1:b9:ea:19:14:52:3a:03:e5:25:97:b9:aa:eb:
2d:bb:a4:53:ca:83:91:6b:9d:2e:7c:fd:6a:52:c7:
fa:d5:19:1a:a3:40:be:cf:6f:c0:51:d9:28:91:72:
7a:30:ab:d4:1d:1b:9e:c6:7f:cf:08:c0:65:7c:4c:
79:e9:bf:21:e3:a8:73:cb:98:c5:b4:ac:26:1f:51:
de:aa:7c:f8:b4:d3:4a:7b:13:5c:77:bc:80:dc:ab:
bf:e6:c4:26:46:c9:ac:65:7b:06:67:a9:48:96:7a:
ec:c1:eb:6d:6d:66:64:ed:c6:0e:a1:ce:bf:e5:40:
52:cd:05:5d:55:f7:a9:85:c3:b5:a6:23:76:a5:72:
ab:d1:c0:5a:5a:ad:48:3a:70:e0:89:3c:72:9b:f7:
36:07:b2:d3:8b:1e:e7:bc:b0:00:de:e9:23:8f:ae:
2c:8b:f9:12:38:35:4e:58:3e:5c:c0:7c:65:e0:c6:
f6:9a:01:7e:67:33:f4:85:aa:e2:31:4b:6c:19:8d:
2c:a7:bf:d0:ca:a8:be:1d:ba:fb:99:ef:9e:69:ec:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:76:3D:53:B6:04:80:0C:91:24:E1:4F:B1:3E:A6:7B:39:AA:73
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/XQN2PVO2BIAMkSThT7E-pns5qnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.163.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e5:97:47:68:d8:a8:b3:68:fd:ca:46:4c:73:e7:8e:14:4c:
e4:39:30:29:5a:11:14:2a:91:1a:08:27:48:2e:a8:70:a5:c5:
ff:31:65:cd:16:0b:15:1c:c3:ea:4c:4e:e9:72:d4:87:e7:13:
3b:a4:87:2b:e5:18:7b:a8:08:b1:21:8c:5b:81:b8:49:23:7d:
75:40:0c:d7:ee:7d:88:a3:6d:e6:20:39:2e:50:20:19:dd:55:
13:04:4e:9c:4a:21:5a:0d:4f:13:77:52:a8:ab:23:44:2f:ad:
c4:1d:f0:32:b0:b2:23:3e:62:14:e1:b6:0e:3b:6a:ad:f0:a5:
6e:3f:bc:fd:f6:f2:73:4d:d7:f4:d0:4b:a8:82:a1:00:73:5a:
cc:4f:f4:9f:fc:d2:95:de:07:1d:13:04:76:b5:28:9b:cf:ed:
be:e1:85:07:5c:96:fe:71:bb:ec:ff:49:4e:d5:66:e6:46:64:
77:64:ed:1e:7e:e7:92:36:13:c7:cc:c4:d5:47:3b:1a:f5:26:
d9:00:d3:78:b4:1e:ce:d7:a4:92:d2:d8:2f:c5:33:2b:20:35:
0e:c4:fb:8e:53:55:52:2b:96:c4:5b:3c:69:81:cb:a7:4c:6c:
f2:7a:1d:e0:ae:31:2f:06:aa:a1:97:82:f8:cc:a0:52:c4:63:
5b:49:ad:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:52:47 2026 by rpki-client