Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/XjHiB7b9z_T46VQcb721C3JpJTk.roa
File: XjHiB7b9z_T46VQcb721C3JpJTk.roa (raw, json)
Hash identifier: 2SpmBh5QqFPTVBTrNZKDK22YuyIJQ5SsVgb9fBuM8pg=
Subject key identifier: 5E:31:E2:07:B6:FD:CF:F4:F8:E9:54:1C:6F:BD:B5:0B:72:69:25:39
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 01A0919E04BF93E8ACB18E8B9BCF7009BAD6
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/XjHiB7b9z_T46VQcb721C3JpJTk.roa
Signing time: Fri 11 Sep 2026 17:57:27 +0000
ROA not before: Fri 11 Sep 2026 17:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57608
IP address blocks: 194.177.4.0/22 maxlen: 22
195.225.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:9e:04:bf:93:e8:ac:b1:8e:8b:9b:cf:70:09:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Sep 11 17:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e31e207b6fdcff4f8e9541c6fbdb50b72692539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:5c:6c:42:78:be:03:ac:0c:c7:b7:66:0b:
5e:30:9e:e8:81:b7:d1:d5:68:77:6b:4b:97:ed:f4:
a8:ad:85:99:a2:99:28:c1:b8:e1:a9:46:ae:9f:0f:
ec:8f:8e:ff:0c:b1:ee:1e:ca:0c:78:42:64:2e:f0:
f8:e2:3c:52:31:cc:6b:86:50:fc:6c:a0:2f:27:db:
61:17:bf:90:8a:30:02:32:8e:c5:d8:16:0c:a3:a5:
ed:f4:e6:95:be:b0:6c:f8:b2:f4:e6:10:20:28:3f:
cc:1e:2f:27:77:f7:b7:55:4a:34:61:b3:1c:56:65:
90:94:09:0f:ae:f2:48:f8:f6:e0:08:91:86:56:e0:
08:73:45:45:46:cf:66:53:16:18:a3:42:a7:6a:e9:
b2:71:16:0f:e7:9a:17:19:bd:a2:35:46:f0:a2:be:
42:82:d7:f8:2e:8a:ba:2d:43:66:15:77:a9:2d:8f:
36:19:a3:65:b7:1d:07:8c:28:5c:b3:63:e7:22:2a:
43:9c:d9:9b:5b:b5:82:e0:bf:ee:10:a6:64:b6:41:
2b:75:ef:da:42:15:f8:5f:8e:85:60:fa:fd:93:86:
44:72:45:1c:e4:34:7f:70:4f:fd:12:ca:36:77:7e:
58:39:7c:5d:ae:5c:a1:2a:85:6e:c2:a7:66:ae:99:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:E2:07:B6:FD:CF:F4:F8:E9:54:1C:6F:BD:B5:0B:72:69:25:39
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/XjHiB7b9z_T46VQcb721C3JpJTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.4.0/22
195.225.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:81:78:5f:6d:a6:fc:ef:79:2e:0d:14:b6:aa:54:86:cc:08:
79:8b:55:f9:09:b9:96:64:f0:dc:7c:af:3f:e6:fe:a2:27:e1:
a5:2a:02:0d:5c:36:d6:23:49:4e:e6:b6:c8:0e:2b:9d:75:c8:
13:4b:33:66:bb:73:40:e4:f4:bb:37:b1:1e:83:3f:79:a6:a0:
2e:f1:c0:22:f5:7e:b0:e8:91:30:14:15:67:42:43:cd:4b:63:
bd:d6:2c:4d:b5:bc:93:c8:2f:f6:4d:e5:5c:b9:07:55:1d:25:
63:d3:39:e2:78:75:8e:04:64:b2:41:ef:cb:56:06:b2:9b:2c:
07:04:fd:0b:ef:2e:ec:13:38:2c:bd:2b:8d:a6:4e:33:37:7c:
8e:f0:cf:f4:d9:2d:47:bc:19:49:f3:2d:db:b8:75:dc:45:6d:
97:56:98:ef:e2:ef:f6:63:3c:6d:a3:15:e7:71:bf:7b:e4:b9:
2d:74:01:ed:92:f4:c1:c4:7f:31:54:1b:61:8d:59:9b:31:00:
10:9f:2c:53:8a:3e:4c:1e:ab:39:4b:84:e8:26:78:06:0c:f5:
57:f7:6d:60:6c:46:63:4b:4d:2f:53:b3:8f:95:90:bc:99:59:
98:0e:b0:99:53:8f:0a:bc:5b:7d:5e:de:a6:e5:8f:37:43:f7:
7b:19:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:50 2026 by rpki-client