Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/xdTvkArkvMPtOPYVfJFRKOiOrYI.roa
File: xdTvkArkvMPtOPYVfJFRKOiOrYI.roa (raw, json)
Hash identifier: DMD2+t1XVRg17ZkAFHHjiqUFCxjHGtePe3W1Tj+/DB4=
Subject key identifier: C5:D4:EF:90:0A:E4:BC:C3:ED:38:F6:15:7C:91:51:28:E8:8E:AD:82
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019E4ED2788EDB25C8C379E67E67768970EE
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/xdTvkArkvMPtOPYVfJFRKOiOrYI.roa
Signing time: Fri 22 May 2026 08:34:36 +0000
ROA not before: Fri 22 May 2026 08:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31673
IP address blocks: 83.136.17.0/24 maxlen: 24
83.136.18.0/24 maxlen: 24
83.136.19.0/24 maxlen: 24
193.30.6.0/23 maxlen: 24
2a03:7000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:d2:78:8e:db:25:c8:c3:79:e6:7e:67:76:89:70:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: May 22 08:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5d4ef900ae4bcc3ed38f6157c915128e88ead82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:7c:e5:8f:e7:68:c1:4b:02:97:1b:b1:ff:
50:56:87:ed:98:f7:1c:9a:75:a7:be:06:d7:04:ea:
66:ac:45:81:fc:3f:08:a4:96:53:ae:02:31:e7:f2:
84:7d:0a:e5:f6:85:fa:03:d3:aa:64:04:77:0e:21:
d2:f4:a7:ec:c3:01:8f:9a:8c:cd:0e:84:0b:03:5b:
87:f0:bf:4f:d4:65:c6:f5:59:15:00:cd:ef:34:80:
79:e7:b4:e5:6f:fc:bc:68:c9:7c:18:46:0f:4b:a0:
1a:06:0b:b6:a6:ca:cc:65:23:5a:a6:3d:01:6a:50:
7a:53:3f:3e:79:8f:bf:b1:e0:24:7f:81:47:70:69:
37:da:c3:1a:07:06:80:fb:5d:c4:98:8d:94:ed:e1:
2d:d4:97:4b:69:2b:11:5e:fb:4c:27:40:09:2a:9e:
f2:e4:29:6e:92:70:9c:df:1d:d2:b0:b3:2c:f0:83:
cd:85:bf:45:a9:3f:8b:3a:1c:4c:2a:e1:4e:a9:ac:
24:69:37:fa:3a:d3:43:7b:81:ea:a7:35:97:2a:2e:
5c:eb:1d:24:01:42:ae:a8:04:cb:1f:d1:99:d8:69:
53:8f:93:49:fc:ff:e6:22:10:fe:38:a3:08:30:c5:
bd:6d:64:00:4b:54:ec:de:e0:33:cc:77:fd:27:8a:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:EF:90:0A:E4:BC:C3:ED:38:F6:15:7C:91:51:28:E8:8E:AD:82
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/xdTvkArkvMPtOPYVfJFRKOiOrYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.17.0-83.136.19.255
193.30.6.0/23
IPv6:
2a03:7000::/32
Signature Algorithm: sha256WithRSAEncryption
12:29:b9:59:5f:37:dc:39:6e:bf:f5:b1:62:c1:43:8d:ae:70:
88:80:fd:6a:f9:d1:b5:49:1e:aa:53:b0:4e:98:eb:5f:08:47:
f2:9f:82:b2:86:e2:1f:d1:a9:0d:8d:2f:2c:d4:fb:d0:a2:35:
c8:9d:d0:cf:c0:64:00:33:f7:61:b5:6b:57:79:6f:5e:80:ce:
b8:a6:dd:c2:e0:81:f1:d1:1e:eb:4f:3e:92:27:32:63:70:c6:
31:f0:a9:ad:8e:c4:bc:ee:e4:fb:d0:7d:2c:ac:b8:a6:3a:ea:
e3:07:a3:14:06:5c:1d:52:9d:ad:fb:85:c7:56:91:87:34:f8:
92:d4:2a:f6:b2:1b:b7:80:56:29:eb:86:44:c6:4a:7d:db:42:
93:74:43:89:64:3b:fc:ac:a4:3e:d3:76:ce:a5:38:6b:48:87:
dd:24:35:3e:4a:3f:84:8e:ab:06:91:b9:de:b0:6e:27:df:bb:
75:b8:64:da:d9:25:c5:eb:bb:6a:c7:b6:82:96:c7:89:bf:c0:
87:91:9d:f1:dd:58:75:7c:4f:91:11:f4:c1:3c:a2:19:63:79:
f0:70:35:88:b9:8b:48:44:d8:f7:6e:fd:90:fc:24:ff:98:37:
69:33:a2:dd:50:5d:45:61:a8:30:5e:7d:90:51:73:80:4e:40:
65:74:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:40 2026 by rpki-client