Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/XfXKJkxPG06sw6h0P3SlK66eCuw.roa
File: XfXKJkxPG06sw6h0P3SlK66eCuw.roa (raw, json)
Hash identifier: O3XiKqUB1dU7QPT/bz3OAjXUnuYby2LWoaEHC76J3tY=
Subject key identifier: 5D:F5:CA:26:4C:4F:1B:4E:AC:C3:A8:74:3F:74:A5:2B:AE:9E:0A:EC
Certificate issuer: /CN=efe0eb4b011419f84f87692e4cb46f660b003c81
Certificate serial: 019F2368F747E17EAF42D244AE4515FD4B16
Authority key identifier: EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/XfXKJkxPG06sw6h0P3SlK66eCuw.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 185.251.144.0/22 maxlen: 22
190.102.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f7:47:e1:7e:af:42:d2:44:ae:45:15:fd:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe0eb4b011419f84f87692e4cb46f660b003c81
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5df5ca264c4f1b4eacc3a8743f74a52bae9e0aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:93:b2:c0:0f:be:f7:4c:27:9d:10:8e:51:
ab:6c:27:25:95:7d:ea:ac:38:f8:34:89:5f:8a:83:
b9:97:a8:20:ef:cc:35:ae:57:56:a4:02:f7:82:8a:
12:64:6c:09:a9:93:92:a3:ba:bd:43:c7:40:78:df:
de:6b:6d:89:d7:8b:82:81:77:f0:69:70:0a:8f:11:
25:f2:d8:5c:56:11:b3:59:30:89:56:b6:cc:db:99:
c6:7d:ba:e3:1c:a6:1e:72:3d:de:ed:8d:4e:86:f6:
b4:19:5a:df:ea:35:6d:f5:56:5c:6f:21:af:72:a3:
51:1c:bf:c4:2f:80:22:48:59:00:8d:4b:52:94:1e:
1c:9e:ea:87:bd:95:fa:9a:1f:86:d2:23:60:9b:45:
9e:a0:f9:2d:0d:88:17:af:54:d8:b3:c9:fd:ad:93:
19:07:57:89:3b:8a:f7:38:83:49:37:7b:85:62:0b:
07:6a:f3:54:72:8a:8b:72:bf:11:04:b8:42:b1:5c:
33:9a:94:19:d5:30:ec:2a:6a:d0:10:a1:22:81:7f:
b9:84:f0:3f:28:46:88:1d:25:53:4f:5e:86:92:ac:
f3:53:cd:af:b2:87:1f:fb:fc:00:12:a3:4b:d6:83:
22:ea:bf:6a:69:54:a2:a5:95:00:6f:26:3a:63:88:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:CA:26:4C:4F:1B:4E:AC:C3:A8:74:3F:74:A5:2B:AE:9E:0A:EC
X509v3 Authority Key Identifier:
keyid:EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/XfXKJkxPG06sw6h0P3SlK66eCuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.144.0/22
190.102.100.0/22
Signature Algorithm: sha256WithRSAEncryption
58:36:4e:66:33:6d:44:f9:01:33:06:a7:a0:8c:9f:5b:c2:cd:
f4:b9:c1:7b:53:7e:f3:ed:13:e8:97:2e:df:73:8e:f9:77:b1:
6a:2c:52:30:0f:bc:34:c5:33:10:99:f1:4a:44:a3:fd:5e:6e:
f9:4a:f6:25:05:76:04:c7:0f:31:cb:e3:26:a1:ca:77:64:13:
8c:29:6d:27:8b:cf:67:88:c7:f3:77:fb:d8:fa:19:77:cd:54:
5a:17:bd:f9:7a:fc:68:c1:a6:98:42:42:e3:c9:78:e2:1d:97:
9d:df:a0:83:4c:93:25:03:24:58:ae:06:63:fa:e6:aa:ad:a9:
46:11:03:a0:d6:cf:65:8a:2c:73:f1:bc:17:b0:fd:0f:81:22:
0d:33:59:84:fa:eb:a3:a0:33:e1:b7:fb:f5:23:b0:0d:ec:ff:
3d:f7:6c:d8:3a:5f:51:4f:32:f2:45:e5:d9:03:fe:d7:ec:72:
0b:b7:42:94:d6:9f:be:8d:b6:52:93:77:ec:31:8f:1e:45:c4:
5e:6b:05:f6:ec:de:ee:86:c9:6a:80:c5:fc:d3:85:db:0c:af:
71:3d:31:4d:8c:f6:67:a0:82:db:83:50:b6:f6:d5:fa:b1:09:
47:bd:b9:26:d6:1c:1a:b8:4c:df:71:59:98:df:cf:10:a6:17:
2a:04:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 05:42:53 2026 by rpki-client