Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/xsEnDawvPXYI2VnFl4zPihnkWfI.roa
File: xsEnDawvPXYI2VnFl4zPihnkWfI.roa (raw, json)
Hash identifier: qLtfJleuaWr1jmrBhok828aDs2YNmVu1KdpozzYVLGY=
Subject key identifier: C6:C1:27:0D:AC:2F:3D:76:08:D9:59:C5:97:8C:CF:8A:19:E4:59:F2
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 019DCE78F6389AA5CD98E75438A74D359652
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/xsEnDawvPXYI2VnFl4zPihnkWfI.roa
Signing time: Mon 27 Apr 2026 10:25:26 +0000
ROA not before: Mon 27 Apr 2026 10:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207081
IP address blocks: 185.247.0.0/24 maxlen: 24
185.247.1.0/24 maxlen: 24
185.247.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:78:f6:38:9a:a5:cd:98:e7:54:38:a7:4d:35:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Apr 27 10:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c1270dac2f3d7608d959c5978ccf8a19e459f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:50:ce:cc:f5:a2:65:78:98:e3:d2:c2:a3:
d2:09:e5:70:67:43:e8:c9:5c:9b:ec:62:f2:72:d9:
23:78:eb:86:36:43:e1:b7:7d:bc:49:96:2f:53:12:
5f:1b:5d:fc:ea:3a:14:c1:b3:6f:ef:27:33:74:e0:
1b:45:e2:26:1b:cd:b8:55:c4:db:83:6e:c5:f0:be:
37:43:ff:88:3c:dd:ff:3c:30:4f:f1:42:4d:5b:f2:
8e:e6:fe:20:d5:f2:e3:00:2c:c6:27:2b:e6:80:03:
1e:b0:51:3f:91:94:17:a2:e0:40:21:5b:9c:1e:10:
b7:d9:35:6b:37:bf:8e:c9:58:67:9f:42:84:52:bb:
bb:b9:e2:f9:7a:fe:0c:59:2b:81:2a:ba:f3:c3:4d:
99:7a:15:91:73:51:c8:a4:09:16:b4:f6:7c:fd:9d:
c8:49:22:f9:1a:d7:61:58:24:88:66:8e:bb:f5:8b:
0c:75:cc:27:dd:a7:89:94:7b:cc:f0:64:be:b8:27:
11:c9:44:8c:68:a8:34:d6:d4:a8:c4:99:fc:9a:c6:
e0:b8:d9:c1:f7:29:29:29:0e:86:66:27:d5:47:78:
f2:2c:8e:e1:4c:9a:9b:5b:a3:64:77:01:aa:ee:ed:
40:45:0a:8f:76:72:61:dc:e5:40:d5:38:e8:c7:81:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:27:0D:AC:2F:3D:76:08:D9:59:C5:97:8C:CF:8A:19:E4:59:F2
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/xsEnDawvPXYI2VnFl4zPihnkWfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.0.0-185.247.2.255
Signature Algorithm: sha256WithRSAEncryption
37:4a:14:32:74:3e:d3:42:fd:6e:94:01:36:4b:7a:e8:0d:81:
ec:0b:73:a6:e8:48:95:b1:66:8a:c2:38:22:3c:39:26:cd:d9:
03:4e:c4:ef:7f:41:8b:76:14:d3:f4:e2:53:f9:63:14:b6:bd:
6d:5a:1f:b9:a2:cf:22:03:a5:0b:59:27:9f:b3:9e:00:76:c0:
6c:de:28:1e:c5:cd:59:60:14:41:77:93:10:b9:db:a6:9d:3f:
4e:a5:f6:fa:e8:3e:6d:8f:8c:a4:1b:17:e7:a6:e5:7e:41:59:
80:03:48:8d:99:7b:9c:52:5e:ad:cf:d5:7c:bf:72:6e:2a:73:
ac:30:86:19:38:fc:5f:55:3d:99:4b:42:0d:14:76:2c:77:90:
dd:8c:4a:76:b5:a2:12:71:ce:68:a6:67:9d:33:7e:53:6d:94:
b9:e8:0d:17:29:22:50:4a:2b:a8:e0:59:8f:f1:a3:ab:94:6b:
e2:7e:f0:58:8a:cb:67:14:60:eb:8e:c9:47:48:35:9e:b0:53:
f2:e2:41:0f:a5:52:90:52:be:ce:aa:12:cb:a3:40:8d:ce:b6:
be:7d:83:48:fd:7a:a5:ef:42:a4:a3:79:bc:1c:8c:90:ab:57:
95:63:aa:f0:bf:ed:45:14:a0:50:5e:ea:b0:55:af:4e:91:0e:
16:63:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:11:04 2026 by rpki-client