Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/xuAYQ_RbxMlOd7sg9WuwdiWoNMw.roa
File: xuAYQ_RbxMlOd7sg9WuwdiWoNMw.roa (raw, json)
Hash identifier: OOFC/fIFntRjtiwOvRnVDd3OHlkJQ4IL39/qKuDEzVs=
Subject key identifier: C6:E0:18:43:F4:5B:C4:C9:4E:77:BB:20:F5:6B:B0:76:25:A8:34:CC
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 01A113564F931EDE69AE2A7D25984CF71512
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/xuAYQ_RbxMlOd7sg9WuwdiWoNMw.roa
Signing time: Tue 06 Oct 2026 22:29:45 +0000
ROA not before: Tue 06 Oct 2026 22:29:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 185.151.64.0/22 maxlen: 22
185.151.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:56:4f:93:1e:de:69:ae:2a:7d:25:98:4c:f7:15:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 6 22:29:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6e01843f45bc4c94e77bb20f56bb07625a834cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:a0:b3:73:1a:9f:5f:8e:9e:da:96:3d:18:
e6:3d:b0:13:4b:3f:95:26:54:6c:f3:b1:d7:79:88:
8e:5d:03:33:62:c4:46:c2:ff:69:df:53:52:c4:2a:
4a:08:72:b6:ab:63:c6:c6:b8:ef:20:f2:16:85:62:
ae:c3:81:bd:22:08:c5:ea:02:93:81:fc:20:84:9c:
0d:25:fc:50:79:b5:ea:15:f4:f3:a4:b9:af:79:9f:
ca:21:40:d3:a6:fd:86:0f:6e:b0:69:c2:28:bb:67:
2f:0c:a8:72:59:ae:0c:b2:85:fa:e3:b3:3f:d9:d9:
c5:32:3b:ca:78:a3:ce:ca:f1:17:9d:eb:b6:7b:68:
03:8b:70:70:eb:7e:88:c5:36:33:55:c8:b5:f2:33:
16:86:84:04:6f:05:e0:2a:f1:4a:30:e4:77:52:51:
0b:c1:fe:95:24:17:fc:7c:4a:52:fd:04:2a:3e:dd:
b7:44:8e:2d:d1:61:73:23:d7:48:b9:06:b4:f6:6b:
eb:b8:ee:9c:01:fa:17:d6:e2:27:0f:37:a3:27:cc:
f6:fc:3e:87:83:60:9b:54:c8:90:f6:76:8a:32:83:
ca:ee:79:7f:39:f6:48:3c:52:ed:17:09:e1:cb:3d:
0b:a6:c0:19:e8:d0:a0:f1:c6:1e:7b:68:a9:43:4c:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:18:43:F4:5B:C4:C9:4E:77:BB:20:F5:6B:B0:76:25:A8:34:CC
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/xuAYQ_RbxMlOd7sg9WuwdiWoNMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:71:f7:33:dc:64:d2:7f:5e:d6:09:75:b2:f4:7f:b7:48:43:
ee:d3:d6:2c:91:0e:62:09:28:1e:a1:c3:6c:9f:d3:70:fb:9a:
99:08:18:8a:37:cb:c8:5e:6f:08:86:8e:a5:36:3d:3e:ec:c2:
63:88:c6:5e:71:5b:d5:d4:8e:3a:5d:35:8e:9a:f1:58:8a:f2:
a7:d7:cc:07:1c:6f:5d:94:83:c3:72:54:d6:1d:61:83:ae:c9:
fd:9c:02:3b:c6:6b:d0:8a:64:4f:6d:a1:a5:39:1b:af:68:90:
44:d6:b7:9b:a7:8a:91:f8:31:b8:ff:e6:78:69:ed:d7:0d:09:
01:a2:3d:99:52:cf:a3:6e:62:4e:87:97:3b:b1:db:02:61:14:
9c:08:a7:ad:10:62:4e:da:b4:41:00:24:7f:d1:f5:02:f6:86:
35:ff:b6:8e:d6:75:66:2b:59:47:94:de:3f:e9:65:f5:4b:d3:
d5:ea:4b:37:8d:94:0e:4d:f5:d4:fa:fc:54:19:fb:40:52:77:
80:ed:50:fb:fc:c4:34:39:1d:61:fb:23:c5:3a:5a:70:a5:9e:
1e:0f:48:e6:48:aa:5d:72:02:49:85:b3:a8:f3:1f:29:c0:48:
89:83:12:2e:03:c7:27:d6:8a:ce:96:f4:d9:e3:54:95:67:a1:
de:9f:b3:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaETVk+THt5prip9JZhM9xUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx
MmMwNjkwHhcNMjYxMDA2MjIyOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmUwMTg0M2Y0NWJjNGM5NGU3N2JiMjBmNTZiYjA3NjI1YTgzNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qgs3Man1+OntqWPRjmPbATSz+V
JlRs87HXeYiOXQMzYsRGwv9p31NSxCpKCHK2q2PGxrjvIPIWhWKuw4G9IgjF6gKT
gfwghJwNJfxQebXqFfTzpLmveZ/KIUDTpv2GD26wacIou2cvDKhyWa4MsoX647M/
2dnFMjvKeKPOyvEXneu2e2gDi3Bw636IxTYzVci18jMWhoQEbwXgKvFKMOR3UlEL
wf6VJBf8fEpS/QQqPt23RI4t0WFzI9dIuQa09mvruO6cAfoX1uInDzejJ8z2/D6H
g2CbVMiQ9naKMoPK7nl/OfZIPFLtFwnhyz0LpsAZ6NCg8cYee2ipQ0xeUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbgGEP0W8TJTne7IPVrsHYlqDTMMB8GA1UdIwQY
MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt
M2VhYTAzNGE4OTc4LzEveHVBWVFfUmJ4TWxPZDdzZzlXdXdkaVdvTk13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4
LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZdAMA0G
CSqGSIb3DQEBCwUAA4IBAQCOcfcz3GTSf17WCXWy9H+3SEPu09YskQ5iCSgeocNs
n9Nw+5qZCBiKN8vIXm8Iho6lNj0+7MJjiMZecVvV1I46XTWOmvFYivKn18wHHG9d
lIPDclTWHWGDrsn9nAI7xmvQimRPbaGlORuvaJBE1rebp4qR+DG4/+Z4ae3XDQkB
oj2ZUs+jbmJOh5c7sdsCYRScCKetEGJO2rRBACR/0fUC9oY1/7aO1nVmK1lHlN4/
6WX1S9PV6ks3jZQOTfXU+vxUGftAUneA7VD7/MQ0OR1h+yPFOlpwpZ4eD0jmSKpd
cgJJhbOo8x8pwEiJgxIuA8cn1orOlvTZ41SVZ6Hen7Ma
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:35 2026 by rpki-client