Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/XIhC2Wn8iu2emKCOielbdM_m_PE.roa
File: XIhC2Wn8iu2emKCOielbdM_m_PE.roa (raw, json)
Hash identifier: wAQeXJLUyq1ZTFFe4xVXQP1602jX9IiBilp8BpE2MCM=
Subject key identifier: 5C:88:42:D9:69:FC:8A:ED:9E:98:A0:8E:89:E9:5B:74:CF:E6:FC:F1
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 01A182BEB8FA41C1317624284EA69E7378EB
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/XIhC2Wn8iu2emKCOielbdM_m_PE.roa
Signing time: Wed 28 Oct 2026 13:41:39 +0000
ROA not before: Wed 28 Oct 2026 13:41:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216074
IP address blocks: 185.116.112.0/24 maxlen: 24
2a14:600::/30 maxlen: 30
2a14:604::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:be:b8:fa:41:c1:31:76:24:28:4e:a6:9e:73:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Oct 28 13:41:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c8842d969fc8aed9e98a08e89e95b74cfe6fcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:a8:8f:1a:8a:9a:be:9b:46:e6:20:5e:be:
30:1f:06:bd:70:c9:0b:21:ca:ac:43:41:d9:6a:a4:
82:3f:2f:32:65:85:e3:a2:6d:db:a2:a3:01:ad:a7:
42:d5:fc:08:2d:fa:4d:72:cc:48:37:87:99:ba:1e:
57:92:8f:48:74:d7:95:be:80:03:3a:d3:21:49:8a:
47:39:93:35:72:fd:bb:ea:7a:dc:ec:62:e6:b7:77:
ad:35:ad:fe:3d:9d:91:04:9d:fa:ea:e7:32:aa:c7:
33:4e:dc:8b:d7:50:5b:94:7d:12:23:de:f1:53:20:
22:e3:f4:c9:44:db:5a:36:5e:7c:ea:b6:f8:72:42:
a7:7b:cb:8d:f4:1b:c2:18:23:9b:84:0e:7d:e9:4e:
cd:2d:be:4e:48:88:ee:f9:49:fd:7d:00:6c:96:93:
7a:ed:5c:74:e8:df:a4:6c:99:84:ce:15:d3:15:02:
57:ff:67:a8:f4:c1:4c:c2:d0:d5:f5:88:6e:d8:5b:
4a:98:01:ae:e4:93:55:45:4e:a1:36:3a:63:c2:c7:
67:a0:ad:88:a4:94:70:74:49:d6:96:97:b6:e3:0c:
8b:df:b2:6a:6c:ca:43:7c:07:60:48:26:7b:31:8c:
02:5b:93:7b:2a:68:89:47:ee:71:42:0b:da:2b:8d:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:42:D9:69:FC:8A:ED:9E:98:A0:8E:89:E9:5B:74:CF:E6:FC:F1
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/XIhC2Wn8iu2emKCOielbdM_m_PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.112.0/24
IPv6:
2a14:600::/29
Signature Algorithm: sha256WithRSAEncryption
33:8a:b4:5b:d2:57:db:69:45:27:c5:8f:ec:6f:ef:fe:f7:5c:
3c:d0:08:a1:43:1e:38:94:f9:47:c5:00:31:e9:b8:cf:fa:c6:
a8:36:86:06:c2:b1:7d:4e:33:b0:8f:34:8b:94:26:07:0a:19:
d1:57:bf:1c:cc:d4:15:51:58:33:b1:13:16:72:fa:ce:fd:18:
7c:3c:b3:89:f0:d6:90:f5:f4:43:da:a3:fa:ff:1e:65:b6:94:
4f:12:9d:f5:57:b1:c9:ea:dd:f8:d4:69:1a:7f:ec:b9:92:13:
0c:b4:12:87:79:a8:04:a3:f9:31:31:ef:17:e7:40:de:0a:e0:
62:ab:e9:bc:38:58:7b:f2:58:e9:ae:a7:95:ba:75:87:a0:8f:
98:d3:32:31:6b:31:55:37:99:e0:4b:86:1d:17:72:52:7f:60:
68:0c:da:86:b7:12:7d:1c:1c:17:64:79:fa:3c:bd:a4:7a:30:
48:cb:3a:4c:e9:ed:d0:4c:9f:70:d2:f1:c4:a6:62:c7:8d:1a:
32:d1:c2:93:2d:f1:03:68:be:f9:ae:e9:d7:cd:3f:5c:7c:af:
b5:32:9d:5d:fe:57:c7:ff:ba:7a:e9:57:97:76:77:21:d5:ce:
08:7a:95:98:45:87:2a:15:96:38:44:17:54:a0:a7:51:f7:db:
81:49:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:39 2026 by rpki-client