Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/xikanlTZ0v14vJNsgTM-bs_TrVo.roa
File: xikanlTZ0v14vJNsgTM-bs_TrVo.roa (raw, json)
Hash identifier: k8yL0zUwcHmo1s0l7jrHP/AK6MnJoFmCKEGJzsiquWI=
Subject key identifier: C6:29:1A:9E:54:D9:D2:FD:78:BC:93:6C:81:33:3E:6E:CF:D3:AD:5A
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019EB0A0D86E39A64F1915199EAD3812E0DA
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/xikanlTZ0v14vJNsgTM-bs_TrVo.roa
Signing time: Wed 10 Jun 2026 08:23:11 +0000
ROA not before: Wed 10 Jun 2026 08:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 89.167.130.0/24 maxlen: 24
89.167.133.0/24 maxlen: 24
89.167.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:a0:d8:6e:39:a6:4f:19:15:19:9e:ad:38:12:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jun 10 08:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6291a9e54d9d2fd78bc936c81333e6ecfd3ad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:98:cb:03:c1:07:ab:1f:b9:79:48:74:77:
eb:03:f0:43:de:9d:c6:d1:50:b3:1c:04:1f:45:f9:
06:73:ac:dd:06:2b:21:90:58:e6:b2:1f:29:b0:fc:
4e:cb:c7:53:aa:94:91:1a:61:6a:f4:8d:7b:5a:3a:
71:a9:26:cb:fe:cc:1b:8f:ba:6c:da:54:32:3e:e2:
c4:54:97:73:d4:c2:e5:7a:cc:f6:eb:ef:dd:82:1c:
46:19:b3:86:1c:50:bc:f1:a9:88:02:c4:4c:44:de:
11:cf:17:32:93:01:0c:4a:c9:06:c4:b1:8a:0a:8c:
99:f4:db:a6:41:7f:43:ae:10:df:ad:5c:8f:d0:6b:
7d:16:67:f4:be:75:2c:80:d5:02:99:62:0e:f3:e8:
16:dc:c3:23:79:1b:f9:c9:8e:88:77:7f:df:79:78:
fe:15:3b:73:c8:48:fc:77:d4:9a:1d:64:26:5b:27:
c8:4d:51:23:e9:7f:ee:0d:ed:57:fb:77:ab:d0:f1:
03:b7:9c:0a:b5:25:50:48:ce:9f:26:63:5e:80:e8:
48:4a:f5:c5:68:18:d0:5b:2c:39:7a:7e:40:31:af:
9b:88:e7:e3:6d:01:2b:fb:af:a4:47:de:55:16:c5:
27:58:79:fe:cc:36:d4:b9:72:1b:87:1e:fd:b1:6e:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:1A:9E:54:D9:D2:FD:78:BC:93:6C:81:33:3E:6E:CF:D3:AD:5A
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/xikanlTZ0v14vJNsgTM-bs_TrVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.130.0/24
89.167.133.0-89.167.134.255
Signature Algorithm: sha256WithRSAEncryption
13:30:d1:e5:e4:29:64:ad:11:fb:68:c2:2c:02:0b:08:d2:69:
80:af:5b:8f:91:1d:3e:8d:36:bf:38:d6:01:6d:7d:a7:ab:9d:
ce:8a:3b:a4:d3:4c:c9:11:a3:0a:ac:ed:ba:22:73:7e:43:15:
4d:e6:3b:91:dc:24:0c:bf:87:fd:72:92:01:02:6c:64:b3:58:
55:f7:a9:1e:9a:ec:af:d3:fd:fb:54:54:62:f5:07:9d:a7:af:
44:21:3e:94:85:b2:d0:08:29:32:d9:b6:c6:e2:a4:78:29:63:
09:7c:0b:fb:6a:2e:29:06:ac:c8:e6:26:46:fe:68:31:34:2a:
45:6d:44:38:a5:0c:74:77:13:3c:a2:ff:42:9b:e8:88:1d:43:
93:7f:40:64:33:3c:0e:1e:3a:e4:0e:8c:c5:64:f8:e6:2b:6e:
49:fc:83:dd:4b:af:b8:0a:f6:a1:bc:90:01:00:a6:7b:72:4a:
cd:fd:ec:72:d4:8b:ac:de:92:5a:1e:7a:01:86:27:5e:a4:45:
85:a3:c3:93:3c:58:09:53:a3:f8:53:0e:bc:78:f3:99:26:9d:
2e:d8:2d:8f:5a:d9:55:00:35:a7:ed:82:42:cd:e7:24:5a:fe:
64:b2:60:f8:f5:7a:46:99:81:cc:b5:c2:17:b4:48:ef:31:75:
93:b4:1a:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:18 2026 by rpki-client