Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/xenLsKPBBzBMqRcg-OjXqeVukQ8.roa
File: xenLsKPBBzBMqRcg-OjXqeVukQ8.roa (raw, json)
Hash identifier: b82QWnmVuqMrn+VvITgqUIemhL5L20gAU9zx2kZtgG0=
Subject key identifier: C5:E9:CB:B0:A3:C1:07:30:4C:A9:17:20:F8:E8:D7:A9:E5:6E:91:0F
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019E82AA367CC7458288E3324ED2769B7D86
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/xenLsKPBBzBMqRcg-OjXqeVukQ8.roa
Signing time: Mon 01 Jun 2026 10:10:53 +0000
ROA not before: Mon 01 Jun 2026 10:10:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147049
IP address blocks: 186.247.37.0/24 maxlen: 24
186.247.38.0/24 maxlen: 24
186.247.39.0/24 maxlen: 24
186.247.40.0/24 maxlen: 24
186.247.41.0/24 maxlen: 24
186.247.47.0/24 maxlen: 24
186.247.175.0/24 maxlen: 24
187.13.6.0/24 maxlen: 24
187.13.10.0/24 maxlen: 24
187.13.243.0/24 maxlen: 24
187.13.244.0/24 maxlen: 24
187.13.252.0/24 maxlen: 24
187.13.253.0/24 maxlen: 24
187.14.57.0/24 maxlen: 24
187.14.60.0/24 maxlen: 24
187.14.61.0/24 maxlen: 24
187.14.62.0/24 maxlen: 24
187.14.63.0/24 maxlen: 24
187.14.87.0/24 maxlen: 24
187.14.88.0/24 maxlen: 24
187.14.248.0/24 maxlen: 24
187.14.249.0/24 maxlen: 24
187.15.92.0/24 maxlen: 24
187.15.93.0/24 maxlen: 24
187.15.94.0/24 maxlen: 24
187.15.95.0/24 maxlen: 24
187.15.96.0/24 maxlen: 24
187.15.98.0/24 maxlen: 24
187.15.99.0/24 maxlen: 24
187.15.103.0/24 maxlen: 24
187.15.107.0/24 maxlen: 24
187.15.108.0/24 maxlen: 24
187.15.121.0/24 maxlen: 24
187.15.122.0/24 maxlen: 24
187.15.141.0/24 maxlen: 24
187.15.142.0/24 maxlen: 24
187.15.153.0/24 maxlen: 24
187.15.154.0/24 maxlen: 24
187.15.155.0/24 maxlen: 24
187.40.227.0/24 maxlen: 24
187.40.232.0/24 maxlen: 24
187.40.234.0/24 maxlen: 24
187.40.235.0/24 maxlen: 24
187.40.240.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:aa:36:7c:c7:45:82:88:e3:32:4e:d2:76:9b:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 1 10:10:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5e9cbb0a3c107304ca91720f8e8d7a9e56e910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:96:fc:a0:b6:71:7d:a5:70:03:b5:c6:21:
9a:6f:27:6b:4b:5f:62:ec:3a:1e:f9:8a:83:be:0b:
57:8e:c7:54:d2:ab:49:07:06:d0:19:97:1e:c7:37:
42:01:f8:c9:cb:49:fb:d9:eb:04:08:e9:9e:63:96:
74:7c:2d:eb:5e:e3:3f:0e:86:7e:87:78:42:f3:15:
d2:a3:b2:c4:bb:26:de:04:8e:21:7f:c2:76:86:56:
f0:ef:c3:1b:49:a1:10:10:1d:5a:39:8a:66:ca:61:
af:ad:3f:d7:46:3f:05:b9:9e:fb:58:cb:be:40:49:
e1:93:6e:30:df:29:db:0e:a8:9b:75:d6:a9:60:02:
b0:35:25:27:13:23:d8:08:2a:3f:e3:02:cf:1e:fb:
2a:0e:f5:39:68:7f:8b:1b:42:70:43:73:43:a9:9d:
6c:20:a1:41:72:98:75:c0:9d:44:40:54:f2:6f:9c:
74:5e:12:75:b5:34:7e:86:73:a3:63:c5:03:24:2b:
b7:25:33:2f:58:e8:3b:1b:73:57:61:29:bb:4e:1e:
22:bc:15:8a:94:dd:98:d8:89:3a:6a:99:c0:8f:24:
64:b8:3a:5e:28:26:55:49:a3:d9:d6:73:d0:7a:c9:
f7:f6:d5:52:e4:74:bc:93:1b:68:52:e3:79:cf:6a:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:CB:B0:A3:C1:07:30:4C:A9:17:20:F8:E8:D7:A9:E5:6E:91:0F
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/xenLsKPBBzBMqRcg-OjXqeVukQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.37.0-186.247.41.255
186.247.47.0/24
186.247.175.0/24
187.13.6.0/24
187.13.10.0/24
187.13.243.0-187.13.244.255
187.13.252.0/23
187.14.57.0/24
187.14.60.0/22
187.14.87.0-187.14.88.255
187.14.248.0/23
187.15.92.0-187.15.96.255
187.15.98.0/23
187.15.103.0/24
187.15.107.0-187.15.108.255
187.15.121.0-187.15.122.255
187.15.141.0-187.15.142.255
187.15.153.0-187.15.155.255
187.40.227.0/24
187.40.232.0/24
187.40.234.0/23
187.40.240.0/24
IPv6:
2a13:240::/48
2a13:240:4000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:82:9e:40:50:1f:6b:d4:83:a5:c9:9a:20:e6:9e:6d:aa:03:
85:4d:52:49:44:f0:a0:65:d0:cd:66:03:92:e4:d5:0d:09:89:
15:45:82:e0:dd:d8:60:7d:c2:8f:77:30:67:c4:51:2a:93:9e:
4b:dc:a0:81:ec:ea:53:c5:df:98:15:87:3b:07:e5:84:1b:a2:
54:81:4f:fc:38:2a:9a:43:c0:53:6a:6a:a3:de:04:4b:a6:e5:
69:25:c2:03:a9:71:a6:42:91:c5:27:d6:3d:08:37:99:42:ef:
41:86:0b:1e:e1:33:d8:ae:06:f0:d5:51:0e:bd:0c:01:a1:78:
92:53:d1:5b:8d:e4:07:6d:c9:6d:0b:3d:4f:94:e5:90:25:22:
9a:0d:13:c8:7d:be:ae:59:8f:4c:1b:ef:2d:45:2f:ef:9b:02:
ee:0f:47:30:76:e3:54:76:20:a5:1d:e7:77:d0:57:41:4a:60:
28:da:23:69:6e:43:39:55:7f:ba:08:b1:81:a3:9f:0c:7e:7a:
c7:e8:93:72:60:7a:b8:e3:9c:c2:b0:20:2b:93:97:51:be:78:
72:b5:38:d9:9a:7a:0b:7e:2e:ed:f9:a0:32:6f:7a:d4:08:6e:
f2:79:8c:13:a3:10:45:0d:ba:27:21:21:32:c6:b4:bf:59:7c:
5d:7d:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:08:25 2026 by rpki-client