Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/XaE3oF5Uq2ZH2vaKVbCYFs0Kbks.roa
File: XaE3oF5Uq2ZH2vaKVbCYFs0Kbks.roa (raw, json)
Hash identifier: M960n+pp83g7kmhWyiZgDofrdj6V3LEDTiUjTB4coqg=
Subject key identifier: 5D:A1:37:A0:5E:54:AB:66:47:DA:F6:8A:55:B0:98:16:CD:0A:6E:4B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01987AEA8E77C8027C3B17CEBF41B74196EB
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/XaE3oF5Uq2ZH2vaKVbCYFs0Kbks.roa
Signing time: Tue 05 Aug 2025 15:47:28 +0000
ROA not before: Tue 05 Aug 2025 15:47:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208172
IP address blocks: 81.27.86.0/24 maxlen: 24
159.26.96.0/24 maxlen: 24
159.26.97.0/24 maxlen: 24
159.26.98.0/24 maxlen: 24
159.26.99.0/24 maxlen: 24
159.26.100.0/24 maxlen: 24
159.26.101.0/24 maxlen: 24
159.26.102.0/24 maxlen: 24
159.26.103.0/24 maxlen: 24
159.26.104.0/24 maxlen: 24
159.26.105.0/24 maxlen: 24
159.26.106.0/24 maxlen: 24
159.26.107.0/24 maxlen: 24
159.26.108.0/24 maxlen: 24
159.26.109.0/24 maxlen: 24
159.26.110.0/24 maxlen: 24
159.26.111.0/24 maxlen: 24
159.26.112.0/24 maxlen: 24
159.26.113.0/24 maxlen: 24
159.26.114.0/24 maxlen: 24
159.26.115.0/24 maxlen: 24
159.26.116.0/24 maxlen: 24
159.26.117.0/24 maxlen: 24
159.26.118.0/24 maxlen: 24
159.26.119.0/24 maxlen: 24
159.26.120.0/24 maxlen: 24
159.26.121.0/24 maxlen: 24
159.26.122.0/24 maxlen: 24
159.26.123.0/24 maxlen: 24
159.26.124.0/24 maxlen: 24
159.26.125.0/24 maxlen: 24
159.26.126.0/24 maxlen: 24
159.26.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:ea:8e:77:c8:02:7c:3b:17:ce:bf:41:b7:41:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Aug 5 15:47:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5da137a05e54ab6647daf68a55b09816cd0a6e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cf:56:03:ef:cc:d8:55:5f:37:b7:12:e9:3b:
30:83:e8:d9:3f:6f:5e:82:2b:3d:f2:65:af:65:9a:
18:17:42:37:d4:94:5d:df:e9:23:91:6c:f8:4b:74:
e8:53:ef:f1:f1:0f:94:bd:90:77:06:fa:cd:a1:f4:
69:88:30:0a:64:38:7d:d7:20:25:9e:1e:26:8f:f7:
f8:3d:0f:00:ec:bd:68:70:c6:a3:1a:8c:03:52:5f:
ef:a0:51:64:49:c0:63:66:8b:20:63:b5:08:44:be:
6f:a2:9a:8d:3b:f6:e4:46:b9:44:96:e3:08:69:3a:
e9:6c:e8:a0:86:58:22:ca:c3:3d:7d:25:83:a3:8b:
5f:1a:55:c8:71:64:af:25:64:83:ac:95:61:0d:38:
ab:b6:51:3e:aa:a5:26:cd:39:76:98:a4:8b:48:b9:
b9:5b:4b:95:c2:8f:b5:f9:a0:e9:51:f9:1a:5b:9f:
e2:b5:5d:af:da:31:10:22:44:52:3f:c1:d3:11:40:
15:b1:cd:9f:c3:d1:16:5e:09:c7:06:9e:76:66:91:
89:ad:d7:55:09:ac:9b:2a:ef:5e:d1:da:60:7c:c0:
93:ca:b2:41:31:62:85:fc:83:63:5e:91:91:eb:1f:
a9:07:dc:db:7e:5b:ce:ef:8d:f1:0e:24:2a:b8:e2:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A1:37:A0:5E:54:AB:66:47:DA:F6:8A:55:B0:98:16:CD:0A:6E:4B
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/XaE3oF5Uq2ZH2vaKVbCYFs0Kbks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.86.0/24
159.26.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:e1:4d:ce:26:31:29:c9:98:0d:3a:95:a9:dd:9f:31:0a:79:
31:c3:2f:58:40:c1:9d:8e:88:fc:72:97:39:a9:e8:3f:29:f3:
24:9b:bf:96:0a:80:2f:ca:b4:dd:7d:9b:3a:2f:9a:58:5e:63:
4e:6a:10:25:32:12:72:05:e4:dc:8f:fd:7b:15:66:61:ee:47:
74:5d:df:9c:09:4e:db:31:c2:df:90:70:f9:48:79:10:cf:ba:
66:b6:23:14:99:96:d8:53:96:4d:ec:a7:4b:a0:33:a2:04:31:
02:f8:0e:51:64:3e:b5:8b:38:54:3d:3a:0c:60:9c:dd:fa:6b:
18:9e:d8:34:8e:f4:9e:51:f1:59:5d:8f:d0:47:99:7a:5b:86:
c2:2b:62:3d:b7:e7:ac:05:a6:eb:61:75:48:c0:0c:42:99:9f:
be:bd:21:42:8c:48:c3:e7:8d:ef:09:cf:14:12:b2:5d:e6:38:
64:c2:b3:9d:9f:9d:ca:b4:7b:92:00:10:a2:93:10:a2:47:cb:
e7:b7:cc:b2:9e:a9:7f:3c:be:2a:1f:25:f1:db:df:58:65:79:
22:78:c2:1b:4a:43:51:c1:47:6b:f2:f6:cd:cb:2e:e2:28:a8:
f2:8e:04:2f:54:52:61:eb:16:80:87:b1:9a:11:da:49:05:5f:
9f:02:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:36 2025 by rpki-client