Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XBuNQb2XDxYgL2gj3pA887OQNhA.roa
File: XBuNQb2XDxYgL2gj3pA887OQNhA.roa (raw, json)
Hash identifier: +CdLBi7qfEWdf2L/gX7PsMa6WWD+Ngcwh/7sloCu6Pc=
Subject key identifier: 5C:1B:8D:41:BD:97:0F:16:20:2F:68:23:DE:90:3C:F3:B3:90:36:10
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019A099A108DDAD9B3010611EDD74947F0CC
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XBuNQb2XDxYgL2gj3pA887OQNhA.roa
Signing time: Wed 22 Oct 2025 01:48:03 +0000
ROA not before: Wed 22 Oct 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33659
IP address blocks: 9.142.0.0/19 maxlen: 19
138.226.0.0/20 maxlen: 20
138.226.88.0/21 maxlen: 21
138.226.192.0/20 maxlen: 20
170.100.128.0/22 maxlen: 22
170.100.152.0/21 maxlen: 21
170.100.192.0/21 maxlen: 21
170.100.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:9a:10:8d:da:d9:b3:01:06:11:ed:d7:49:47:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 22 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c1b8d41bd970f16202f6823de903cf3b3903610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:9d:8f:0c:b9:b9:6e:1c:df:fe:2e:b9:5d:
83:cf:c2:09:05:eb:8a:dd:73:41:ac:12:f9:af:db:
84:a3:06:1c:21:2c:87:69:18:7e:4a:e9:83:8b:f1:
3c:07:17:ad:87:2e:75:46:7d:9c:ad:33:70:2e:49:
bc:b6:16:f7:a6:1c:a4:6d:ff:84:a3:9c:c7:85:24:
10:46:82:f1:fe:ce:1f:7d:69:dc:56:8e:79:61:14:
b8:6e:f7:19:a9:3f:5e:71:25:25:24:0c:8a:b4:9c:
ee:25:d4:18:52:bd:99:99:1b:f3:63:6f:97:0b:4d:
15:4d:a7:f8:85:82:f3:7e:f5:14:65:4c:ee:a0:d8:
27:4a:92:04:b1:9f:ff:06:8f:18:5d:93:64:9a:e4:
49:c4:db:dd:8f:c9:5c:94:b0:ca:66:07:9c:45:f7:
27:36:43:69:90:17:98:a6:f2:d1:5f:54:68:75:61:
ad:59:af:3f:ac:13:51:4b:2a:65:4b:2b:11:5e:7d:
5b:d7:ef:9d:4d:e2:31:b4:88:c0:fd:89:a5:f6:a9:
ec:15:c9:80:d7:2a:2e:77:70:70:7b:aa:da:f8:60:
52:67:83:5a:1a:4c:fd:46:39:d8:a4:bb:4d:bd:60:
5a:00:20:ba:7b:8a:96:91:45:f2:09:7b:ec:10:6a:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:8D:41:BD:97:0F:16:20:2F:68:23:DE:90:3C:F3:B3:90:36:10
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XBuNQb2XDxYgL2gj3pA887OQNhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/19
138.226.0.0/20
138.226.88.0/21
138.226.192.0/20
170.100.128.0/22
170.100.152.0/21
170.100.192.0-170.100.203.255
Signature Algorithm: sha256WithRSAEncryption
03:bc:d2:97:29:d0:93:c4:84:1f:be:8a:8a:7c:31:0d:76:1b:
67:25:30:2d:ef:5c:39:19:d8:fa:8c:49:37:7f:45:c2:48:1f:
50:a4:bc:af:eb:e3:39:09:65:7b:5b:bb:9a:97:08:5a:fd:c5:
c8:fa:67:fd:32:24:97:f1:43:46:b5:7b:02:ef:eb:43:da:83:
15:a1:1d:9a:a7:00:c2:ab:26:a6:55:b3:35:bf:f4:0c:87:f2:
35:8f:41:d4:14:d1:cd:d3:36:8c:81:9c:b4:06:40:0b:42:f2:
a8:b4:cc:46:d5:95:87:5d:23:3d:45:76:67:2f:5c:d9:a8:fd:
b7:cb:c6:d1:d5:80:ab:3b:5e:2b:be:e1:ad:82:54:33:c3:a9:
f8:47:d6:8a:4b:35:04:1c:f8:d1:79:0c:d7:5f:6d:c0:91:c5:
2f:3b:bc:53:63:3a:84:cf:13:81:f0:b0:ff:a7:47:b5:0e:a6:
8d:37:6b:3e:3a:ef:5c:77:c1:23:77:09:8f:fa:d2:12:80:de:
d9:b8:36:60:0a:20:fc:c7:3a:94:d9:70:6e:b8:11:70:71:2f:
1c:cd:4b:f2:c7:3d:33:c9:29:8c:b7:22:75:06:81:a6:80:dd:
f0:34:05:07:f9:b8:e6:40:bb:10:87:37:fe:e1:72:8e:76:e4:
bc:4a:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:32 2025 by rpki-client