Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/XOhgn7pGRtzSsh1ARAU6rIaXlck.roa
File: XOhgn7pGRtzSsh1ARAU6rIaXlck.roa (raw, json)
Hash identifier: yyMmpdVjtyMnj1bE7AUUOokdJhPtrwDQpFFTBMYuLm0=
Subject key identifier: 5C:E8:60:9F:BA:46:46:DC:D2:B2:1D:40:44:05:3A:AC:86:97:95:C9
Certificate issuer: /CN=8347632da7d63d3eb7baa6cbbcf24e986abc6821
Certificate serial: 01A116A3A7B031D82DE516F5D6D9EEAA8E69
Authority key identifier: 83:47:63:2D:A7:D6:3D:3E:B7:BA:A6:CB:BC:F2:4E:98:6A:BC:68:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0djLafWPT63uqbLvPJOmGq8aCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/XOhgn7pGRtzSsh1ARAU6rIaXlck.roa
Signing time: Wed 07 Oct 2026 13:53:06 +0000
ROA not before: Wed 07 Oct 2026 13:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59686
IP address blocks: 185.3.112.0/22 maxlen: 24
193.25.0.0/21 maxlen: 21
193.25.0.0/24 maxlen: 24
193.25.1.0/24 maxlen: 24
193.25.2.0/24 maxlen: 24
193.25.3.0/24 maxlen: 24
193.25.4.0/24 maxlen: 24
193.25.5.0/24 maxlen: 24
193.25.6.0/24 maxlen: 24
193.25.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0djLafWPT63uqbLvPJOmGq8aCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:a3:a7:b0:31:d8:2d:e5:16:f5:d6:d9:ee:aa:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8347632da7d63d3eb7baa6cbbcf24e986abc6821
Validity
Not Before: Oct 7 13:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ce8609fba4646dcd2b21d4044053aac869795c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:7c:ca:ea:fc:a5:6f:49:62:50:e6:20:a3:
10:53:a8:47:43:60:4a:f1:32:78:82:d7:ca:69:2c:
31:01:e3:db:0d:80:85:73:89:03:11:38:27:e1:d8:
b4:84:c0:66:46:9d:bb:ac:30:12:49:b5:f1:6c:99:
11:12:ac:6b:7c:16:5d:08:4c:84:db:e4:a7:65:9e:
81:36:34:2b:ab:5e:cb:f1:b2:2d:bc:0f:2c:74:fd:
11:55:bd:a1:36:7f:0d:f9:bf:c4:0e:5c:e0:e5:55:
96:19:ee:ed:ee:48:70:5e:56:fe:c5:ba:72:28:37:
a8:60:59:93:03:3e:6f:a3:d8:6d:14:f0:6d:4f:bb:
c2:6a:02:9f:c2:8d:e5:10:48:44:80:52:9e:ae:f7:
bf:c4:fb:26:a2:da:05:8c:f7:43:2c:c4:5a:65:1b:
d1:ff:ba:21:07:bc:de:99:94:be:25:68:bc:2e:5a:
9a:46:8f:f2:68:76:6c:8b:45:bc:9d:de:a9:48:9a:
29:8b:87:79:f2:11:79:a7:67:02:9a:6e:c3:35:f1:
4f:25:42:41:8c:d8:c6:17:10:8a:20:6e:1b:36:ae:
42:b3:30:24:f7:ea:bf:3c:7d:3f:6b:c4:ef:9f:57:
2a:ba:57:0d:80:1d:3f:af:ec:32:dc:d3:53:e7:ea:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:60:9F:BA:46:46:DC:D2:B2:1D:40:44:05:3A:AC:86:97:95:C9
X509v3 Authority Key Identifier:
keyid:83:47:63:2D:A7:D6:3D:3E:B7:BA:A6:CB:BC:F2:4E:98:6A:BC:68:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0djLafWPT63uqbLvPJOmGq8aCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/XOhgn7pGRtzSsh1ARAU6rIaXlck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3cecb1-04af-4031-9a32-3c7c3cb1a31f/1/g0djLafWPT63uqbLvPJOmGq8aCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.112.0/22
193.25.0.0/21
Signature Algorithm: sha256WithRSAEncryption
99:42:34:e1:ac:51:e3:f9:72:7a:2b:f9:b3:0a:c8:0a:7a:e5:
84:f3:9f:89:82:37:97:51:ba:a8:ac:3c:67:9e:f6:6e:fc:3c:
a1:57:65:98:7d:ab:55:80:dd:40:f9:44:ff:ef:e9:4f:a3:da:
1a:30:3a:18:7a:94:47:53:d4:ef:52:ee:2b:79:07:7c:21:d4:
f3:c0:c8:08:09:50:bc:e0:5b:d5:e5:11:21:cb:b0:0a:6a:6f:
7d:ac:32:f6:35:67:28:dd:27:94:92:00:65:6d:d2:64:9c:8f:
5a:47:16:42:79:7a:36:61:8e:da:eb:3b:35:94:c0:21:cd:96:
cd:7b:a2:a9:03:00:6a:f0:4e:a6:89:de:16:90:38:70:c9:cf:
52:e0:d7:db:c2:a0:69:d7:ec:e5:66:76:18:51:de:9b:80:2e:
74:ba:66:83:7c:e7:72:7d:2c:86:a8:65:3c:4c:2f:12:d2:fc:
c7:c1:f1:73:31:c3:f9:ee:31:8c:29:e8:8f:b1:d4:91:3b:61:
a4:ae:49:8c:67:94:75:e5:f8:bb:ac:c2:eb:0f:ce:24:18:6e:
c8:20:27:b4:c0:16:b6:52:f0:94:75:26:63:18:a6:d6:f8:5d:
ea:25:c1:92:9f:1e:f7:50:b3:35:78:76:c5:94:28:39:b1:bf:
1a:ca:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:07 2026 by rpki-client