Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/XqXq0lu4hhkfUjIupnzFYlf_0AY.roa
File: XqXq0lu4hhkfUjIupnzFYlf_0AY.roa (raw, json)
Hash identifier: wDEIYcOU1jFM2otuCniD9mD3XBpASPyj3p4B1WJeSKE=
Subject key identifier: 5E:A5:EA:D2:5B:B8:86:19:1F:52:32:2E:A6:7C:C5:62:57:FF:D0:06
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 019B7C124B1FA448FD08C85C12A9B9985329
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/XqXq0lu4hhkfUjIupnzFYlf_0AY.roa
Signing time: Fri 02 Jan 2026 00:18:52 +0000
ROA not before: Fri 02 Jan 2026 00:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41283
IP address blocks: 195.74.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:4b:1f:a4:48:fd:08:c8:5c:12:a9:b9:98:53:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Jan 2 00:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea5ead25bb886191f52322ea67cc56257ffd006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:71:0c:99:56:12:98:6f:4e:04:1f:ce:56:
a9:56:4c:ff:cf:94:15:65:10:12:25:cc:ce:d2:53:
6a:11:45:ba:22:6e:55:cc:19:cd:5c:64:68:a1:50:
e1:91:8f:0f:de:79:26:c3:60:dc:f7:6b:f3:68:bf:
bd:59:d3:47:d2:a4:93:c5:08:9f:bf:79:9e:18:f7:
80:c1:ed:f5:b0:ad:39:0f:ad:88:c4:3a:03:7a:bb:
c0:82:6f:8e:e5:3a:04:80:d9:57:55:78:b8:f2:5f:
34:c2:6d:49:72:21:7c:37:1c:b7:7a:80:61:66:65:
1c:de:46:b5:68:40:d1:e9:93:ba:88:08:17:ec:99:
19:bd:59:6c:0b:f6:e5:4f:05:16:66:9c:ae:4a:d8:
f7:a4:2c:d3:9b:e2:c9:f6:cb:39:de:aa:e1:16:f1:
f0:e2:b0:5c:64:0e:b1:27:32:10:df:d2:4e:99:b5:
a5:2b:b5:bd:ab:f2:cd:1b:86:ce:b8:34:d0:42:0a:
c6:e9:9f:f5:cc:b3:a1:04:74:85:64:31:c9:65:07:
42:06:b4:84:77:0a:56:3e:76:10:76:8e:a2:45:df:
15:2c:dd:ee:0c:85:73:37:7a:8a:19:75:b8:ac:12:
3c:14:84:95:f9:d4:f4:34:c1:0e:c3:7a:38:d3:52:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:EA:D2:5B:B8:86:19:1F:52:32:2E:A6:7C:C5:62:57:FF:D0:06
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/XqXq0lu4hhkfUjIupnzFYlf_0AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.74.67.0/24
Signature Algorithm: sha256WithRSAEncryption
02:47:9c:24:af:21:d0:d7:75:57:cb:ce:c5:d2:b8:43:e6:f2:
10:08:ef:07:2d:e0:b7:6b:0b:a0:57:4d:75:d5:1c:77:d2:80:
c2:5d:62:22:e7:d5:67:04:07:67:d8:6b:23:d9:35:db:24:47:
79:24:cc:ba:2b:0d:29:8b:b9:64:4c:07:2c:74:b0:ac:72:5a:
e7:83:cf:ac:56:f0:b0:8e:33:5b:16:57:ab:0d:72:65:6a:b6:
be:19:63:23:ce:5b:74:88:dc:73:44:2a:51:1f:53:d4:75:76:
55:59:1c:60:f2:ec:71:7b:f0:11:b8:a0:03:bb:e6:f8:b3:c1:
86:53:66:bc:d2:3f:34:a8:50:f2:eb:3b:eb:ee:e5:8e:20:0d:
70:b8:d9:97:21:a9:6a:0a:bd:b2:66:b8:66:43:0b:02:91:ad:
3b:50:79:d1:29:d9:be:c7:94:23:c3:49:41:e3:7e:ca:b4:33:
89:a5:51:1d:b7:bd:e5:25:88:66:2f:a9:98:ac:5d:d9:14:09:
5f:80:84:0a:b7:e0:ee:b1:40:29:28:d7:dd:e0:7a:b0:2d:63:
82:30:b6:dc:4a:4e:23:b0:ca:d7:d7:43:ce:1d:66:8a:e7:3e:
7c:c1:dc:d4:14:68:e5:17:25:65:37:d2:2d:37:a4:e3:20:b9:
03:0f:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:45 2026 by rpki-client