Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/XVCln6RWEfAUCJcfH_69vMbO-oU.roa
File: XVCln6RWEfAUCJcfH_69vMbO-oU.roa (raw, json)
Hash identifier: j6z3Q/3px4zPV0kpZxr9UMA6lyauNeX3QlfwGiHOfNc=
Subject key identifier: 5D:50:A5:9F:A4:56:11:F0:14:08:97:1F:1F:FE:BD:BC:C6:CE:FA:85
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019EC5D995960BD537C9D3CCE5E80AD3CBBB
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/XVCln6RWEfAUCJcfH_69vMbO-oU.roa
Signing time: Sun 14 Jun 2026 11:17:11 +0000
ROA not before: Sun 14 Jun 2026 11:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 93.89.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:d9:95:96:0b:d5:37:c9:d3:cc:e5:e8:0a:d3:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jun 14 11:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d50a59fa45611f01408971f1ffebdbcc6cefa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:f4:98:5b:82:8b:3c:ad:4a:5b:99:d0:a8:
67:0d:49:73:81:25:be:0b:f1:f1:fb:04:f2:78:93:
44:29:73:98:94:63:d4:4b:b6:34:7f:3f:1f:37:fd:
45:7d:b6:92:17:17:1c:f6:58:01:9a:3a:88:45:e3:
07:62:e1:cc:b4:f1:fc:ab:b5:10:7c:ce:04:66:c2:
98:92:33:f2:a3:6c:c5:e0:9b:23:56:62:65:0b:80:
13:82:c4:0e:fd:73:a9:7c:d9:6f:e6:0d:6b:fc:c2:
b0:67:6f:4b:20:44:e2:e1:02:16:95:e5:c8:f5:30:
04:3d:db:4b:c0:1d:8f:5f:f5:b5:e0:97:41:7e:cd:
06:dc:ae:a0:af:43:56:e5:4b:f6:d4:c3:f3:70:ce:
34:c8:1d:e0:ab:7f:bc:84:d4:de:e1:33:78:28:dc:
4a:7c:34:db:4d:f7:6c:8d:e9:db:40:49:92:5f:e3:
5e:5d:a0:31:9b:ad:c8:6b:90:b9:62:bf:6a:7b:aa:
94:91:d2:48:7c:e2:cf:eb:5c:7f:3e:6e:93:f5:2c:
bc:5f:86:66:4e:e7:08:3d:c1:8a:3f:66:dd:ce:81:
de:d7:82:3e:72:a2:4b:ba:67:b0:66:82:53:89:80:
7a:3d:b2:9d:ab:b1:3e:09:aa:1c:72:44:e8:3d:24:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:50:A5:9F:A4:56:11:F0:14:08:97:1F:1F:FE:BD:BC:C6:CE:FA:85
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/XVCln6RWEfAUCJcfH_69vMbO-oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e0:e7:90:ad:58:c1:7b:97:f3:83:61:79:13:24:b0:11:cd:
96:48:cd:c4:57:e2:16:c1:82:0e:84:61:39:65:79:84:5f:3f:
f5:8d:ab:f5:07:5d:d8:8c:09:a7:cf:00:76:47:37:e5:d1:89:
ee:c2:83:63:73:b1:68:4d:bb:0c:bd:f7:05:f1:95:a3:7e:fb:
58:7f:6e:a1:c2:b7:72:d5:bb:8b:8e:d6:6f:6e:da:d2:2d:0e:
1e:ad:6b:8c:b7:ec:25:0f:b8:69:b1:9b:e2:5d:29:42:47:7d:
84:67:ff:a7:29:93:2b:ca:93:7f:b2:08:77:eb:61:9e:f6:a4:
6c:f6:6b:16:00:94:c8:c5:c8:7f:f5:cd:46:31:9c:75:32:13:
34:8a:5b:09:6d:0c:a5:22:a0:20:80:c8:a1:54:ad:a2:a3:35:
0d:3b:c9:d3:65:b0:54:7d:1a:b0:e6:43:2a:e3:c4:a2:49:b0:
58:e4:65:44:05:87:5a:57:d9:ab:80:43:f2:1b:fd:79:82:c6:
02:66:ca:40:fe:db:af:2d:0b:f1:87:d5:53:7b:9f:e7:fd:fe:
28:1a:46:cf:43:1b:1a:34:60:35:4e:ee:2b:5a:2e:91:b8:cb:
6e:97:c4:28:1b:be:34:da:37:64:0e:26:dc:96:c0:7a:9b:e9:
54:a0:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:57:01 2026 by rpki-client