Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/xhdaDTn7Jtw39GRdHSy9qt9h2p8.roa
File: xhdaDTn7Jtw39GRdHSy9qt9h2p8.roa (raw, json)
Hash identifier: 8mWlGeXePwMMWJjjNhLSfXvR/3bdxGlVtOz7wI4ajOc=
Subject key identifier: C6:17:5A:0D:39:FB:26:DC:37:F4:64:5D:1D:2C:BD:AA:DF:61:DA:9F
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 019F126E9160454EB9A2A3CD750C9EB63050
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/xhdaDTn7Jtw39GRdHSy9qt9h2p8.roa
Signing time: Mon 29 Jun 2026 08:11:03 +0000
ROA not before: Mon 29 Jun 2026 08:11:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32787
IP address blocks: 185.151.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:6e:91:60:45:4e:b9:a2:a3:cd:75:0c:9e:b6:30:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jun 29 08:11:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6175a0d39fb26dc37f4645d1d2cbdaadf61da9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:a9:a5:ba:63:cc:57:29:ee:e6:78:1e:91:
6d:0d:11:34:a7:b3:43:54:17:2e:ec:2f:4e:fc:c7:
1d:36:70:43:1e:43:f4:84:d2:1e:b4:c9:d1:f0:5a:
36:eb:cf:5e:52:df:83:66:93:f1:cb:30:e8:4e:30:
21:e3:7b:16:be:5f:f7:89:d2:b1:13:cd:53:2e:a3:
cb:98:12:a0:5e:60:d8:d3:ab:96:eb:4e:64:8e:d5:
3a:f7:f2:b0:0b:96:fc:4e:c8:83:1d:d4:d7:b1:22:
34:da:8a:65:b2:9f:d1:f1:83:b4:8b:46:b6:74:f8:
ab:71:46:61:4d:c6:28:fa:a3:81:f6:82:1f:23:c0:
fc:0f:84:6f:f9:94:0a:c7:f1:55:af:29:e1:eb:12:
4b:cf:24:8e:7b:bc:52:45:f9:d2:43:2a:7a:b4:c3:
a2:e1:8d:86:51:bd:25:f3:ad:d2:ed:42:5a:0d:9e:
14:df:8a:49:ff:6e:89:22:9f:59:86:11:c8:6d:02:
be:26:26:b8:d9:39:62:fa:7e:de:49:69:f7:65:cf:
f3:75:1a:5d:32:c2:e7:64:3b:07:a5:cf:da:4a:02:
71:1b:c5:84:0c:74:6c:ff:b1:74:86:00:44:7d:64:
c2:26:ff:93:28:70:65:9f:5a:4f:a2:aa:76:29:d1:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:5A:0D:39:FB:26:DC:37:F4:64:5D:1D:2C:BD:AA:DF:61:DA:9F
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/xhdaDTn7Jtw39GRdHSy9qt9h2p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.164.0/22
Signature Algorithm: sha256WithRSAEncryption
94:f5:53:f6:47:59:be:6e:0f:12:dd:c2:5c:f0:93:54:9b:b8:
e9:7f:af:d9:7a:bb:65:6d:9a:8e:5a:2d:38:88:09:c8:f0:25:
21:c0:cd:fe:d7:27:ab:a7:7f:79:21:21:37:db:f7:d7:4a:d2:
85:70:e4:61:e0:4b:4b:d5:ee:fd:23:43:b5:d2:4f:e7:aa:8a:
d2:98:c2:23:22:01:fc:51:9f:03:1e:2a:50:23:9c:1c:d5:3b:
6d:69:75:d9:f2:3d:83:87:7d:c1:e1:fc:71:53:22:ac:b5:2a:
0c:37:2d:97:5f:00:95:3c:5a:97:0c:7a:65:0c:8c:5d:e0:b8:
9f:12:1a:8a:e7:ac:a4:77:22:e1:dd:61:a5:2f:64:20:f3:28:
c2:cf:24:91:72:6b:cf:50:3b:25:e8:bb:40:36:3a:79:c9:3b:
fa:24:d8:50:db:04:3c:4c:45:32:e6:bd:df:47:3e:20:15:26:
38:d9:d1:a9:15:b5:d3:0c:7b:3e:41:a4:6a:57:1d:43:c6:93:
da:cc:86:17:1e:99:f2:c5:b8:90:43:c2:bf:27:72:4d:88:2b:
8d:d2:83:a3:79:f3:d7:c6:20:2b:8d:6a:af:a8:10:8c:28:e9:
d2:4a:31:a3:63:e1:07:12:cc:0c:20:88:bb:fd:57:bb:8d:e1:
f4:f4:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:15:03 2026 by rpki-client