Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/XTSG5UT08K9G0xizIR4wufEQohM.roa
File: XTSG5UT08K9G0xizIR4wufEQohM.roa (raw, json)
Hash identifier: QniRuDSYox5oJNiMa5oiBMwp1PTutNmkfBL1+cubXQk=
Subject key identifier: 5D:34:86:E5:44:F4:F0:AF:46:D3:18:B3:21:1E:30:B9:F1:10:A2:13
Certificate issuer: /CN=11e39c58202f5a435d326356c6eb05d9943c3817
Certificate serial: 019FCD6E72E671B83F79B26A396869769F04
Authority key identifier: 11:E3:9C:58:20:2F:5A:43:5D:32:63:56:C6:EB:05:D9:94:3C:38:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/XTSG5UT08K9G0xizIR4wufEQohM.roa
Signing time: Tue 04 Aug 2026 15:39:55 +0000
ROA not before: Tue 04 Aug 2026 15:39:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203067
IP address blocks: 46.175.48.0/22 maxlen: 22
46.175.48.0/23 maxlen: 23
46.175.48.0/24 maxlen: 24
46.175.49.0/24 maxlen: 24
46.175.52.0/24 maxlen: 24
46.175.53.0/24 maxlen: 24
46.175.54.0/24 maxlen: 24
46.175.55.0/24 maxlen: 24
185.145.48.0/24 maxlen: 24
185.145.49.0/24 maxlen: 24
185.145.50.0/24 maxlen: 24
185.145.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:6e:72:e6:71:b8:3f:79:b2:6a:39:68:69:76:9f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e39c58202f5a435d326356c6eb05d9943c3817
Validity
Not Before: Aug 4 15:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d3486e544f4f0af46d318b3211e30b9f110a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:9b:4e:ff:39:8e:86:85:28:c8:6d:67:f8:
be:ea:c4:99:e4:53:89:81:32:9d:2b:d1:1b:19:03:
21:f0:93:18:6f:f9:26:92:6b:49:57:2d:28:ba:7f:
f4:f2:31:ce:82:50:4f:4e:15:0c:f3:a2:af:29:ac:
0a:54:f2:82:0a:49:0e:77:8e:e4:87:7b:13:da:b8:
9c:2a:59:6d:8c:92:3b:32:a3:c4:c9:95:12:9f:70:
99:36:e8:58:6d:de:91:0d:33:07:05:45:fc:2e:72:
01:d9:65:32:fd:bf:1f:e0:eb:b7:af:a9:cd:ac:bc:
4e:c2:33:10:cb:c7:99:69:96:75:2f:54:66:1a:6e:
cc:d7:f8:97:03:ce:6d:8e:a9:55:6a:1e:fe:5a:c7:
81:5d:c6:1e:0a:c8:77:ce:5a:9e:61:24:53:17:cc:
e6:09:28:d6:3f:30:44:1f:af:dc:9c:8e:f2:2f:99:
1e:c2:c5:e1:ee:ee:f6:7b:f0:37:7b:b2:51:72:8d:
87:09:f2:a1:93:09:d2:65:0a:5a:61:62:96:03:dc:
1c:23:35:9b:1e:b9:e3:c0:14:47:26:8c:c0:70:e9:
7d:e0:9f:bb:17:84:38:6e:63:5e:dd:e0:9b:c6:8e:
eb:a6:84:24:37:df:b2:08:5e:a3:28:d7:18:8f:3d:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:34:86:E5:44:F4:F0:AF:46:D3:18:B3:21:1E:30:B9:F1:10:A2:13
X509v3 Authority Key Identifier:
keyid:11:E3:9C:58:20:2F:5A:43:5D:32:63:56:C6:EB:05:D9:94:3C:38:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/XTSG5UT08K9G0xizIR4wufEQohM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.48.0/21
185.145.48.0/22
Signature Algorithm: sha256WithRSAEncryption
96:c6:b7:ff:13:32:8e:c6:0f:92:63:47:5d:f9:23:e2:ee:a7:
c5:05:9e:cb:45:fb:2b:40:35:f5:27:e9:4f:e6:23:e6:6e:91:
02:89:7d:44:8e:b4:e9:a7:1d:fa:27:05:7a:70:e5:c1:cc:96:
44:95:4c:70:52:54:97:e9:2a:52:e6:9e:4f:f3:85:ca:4d:f5:
48:99:74:46:df:01:aa:a7:e7:61:65:a2:6b:cb:b7:7b:2f:5f:
67:2c:60:6e:94:77:56:e1:68:c3:4b:c6:3f:d8:b6:04:01:a1:
4d:4e:ef:55:42:1b:4a:4d:4e:aa:46:e2:d6:d7:56:bd:d6:41:
0e:a7:4d:00:64:10:bf:22:e9:74:5b:dc:3c:fa:9e:b0:62:fb:
14:f0:1f:4d:2e:2e:16:30:6e:c6:eb:bd:65:4d:60:c0:5b:8b:
db:c5:75:06:38:14:85:10:90:9c:f4:8f:e5:8c:fa:16:33:9a:
df:82:64:5b:40:78:c9:46:b3:cb:8d:ff:d1:9a:e0:dd:87:a0:
3a:b5:5f:0c:5e:0d:86:59:0f:de:f9:4f:b4:6a:d3:12:12:9d:
22:f5:a3:2d:d0:92:4b:9d:2f:02:f3:90:83:0c:40:cc:aa:28:
f6:9d:a6:98:94:8e:35:4a:83:53:ce:ad:91:c7:29:b6:12:3e:
9b:21:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:05:40 2026 by rpki-client