Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Xhzkqm0Z5CNvNWkDLZP-d635Yho.roa
File: Xhzkqm0Z5CNvNWkDLZP-d635Yho.roa (raw, json)
Hash identifier: RpqH2W8NQQNMWpraczBEfWAh0hHpD+pPbhq2NuY7Vt4=
Subject key identifier: 5E:1C:E4:AA:6D:19:E4:23:6F:35:69:03:2D:93:FE:77:AD:F9:62:1A
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019F6BB1DE12E002FB4B205925CEA6FE6222
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Xhzkqm0Z5CNvNWkDLZP-d635Yho.roa
Signing time: Thu 16 Jul 2026 16:10:46 +0000
ROA not before: Thu 16 Jul 2026 16:10:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.86.13.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.25.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:b1:de:12:e0:02:fb:4b:20:59:25:ce:a6:fe:62:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 16 16:10:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e1ce4aa6d19e4236f3569032d93fe77adf9621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:d7:b0:77:f5:6b:f5:48:35:f8:94:36:f9:
64:27:13:2a:d5:71:ea:d0:3d:3d:72:cd:5b:df:ec:
32:ae:f3:68:9a:76:78:74:54:7a:fe:01:a3:c1:83:
2e:e0:86:1b:ec:f3:4d:85:5e:16:b4:d7:f0:18:47:
cf:05:2f:93:a7:b7:7a:38:bc:a6:9e:a3:3b:70:e9:
5a:5e:16:de:cf:c3:13:46:bf:4a:78:0b:dd:af:95:
1f:1c:ab:59:6e:0b:89:ad:4d:23:25:25:68:a5:a3:
5a:0e:61:43:0d:25:1b:cc:bc:01:69:a2:d7:96:4a:
68:96:7d:e1:41:c5:c8:47:2d:7b:7d:79:16:a4:48:
4e:04:15:b6:ea:a1:e9:7a:93:e3:25:ae:06:3a:30:
82:f3:50:01:8e:b4:7d:5b:eb:ac:9c:ca:01:6c:53:
c5:2a:30:2c:a2:e2:6a:7c:dc:12:e1:69:cf:9e:42:
b0:5b:25:35:ed:e9:29:87:26:8b:05:27:1b:97:cb:
94:cf:12:55:0c:ce:be:d1:72:5b:39:06:11:d1:7c:
61:4a:f2:3d:57:4c:6b:47:db:62:eb:7d:7e:44:90:
d8:ea:b8:e0:2d:37:e3:e1:f5:57:0a:5d:b5:e6:30:
0c:d2:68:37:19:05:89:27:a2:c5:80:21:16:63:7e:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1C:E4:AA:6D:19:E4:23:6F:35:69:03:2D:93:FE:77:AD:F9:62:1A
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Xhzkqm0Z5CNvNWkDLZP-d635Yho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.13.0/24
185.86.164.0/22
185.87.24.0/23
185.87.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:cf:73:01:07:eb:10:cb:7b:81:01:5f:e5:da:c6:3e:c5:03:
70:99:2f:e7:c2:77:0e:73:74:15:92:31:d9:4e:f8:32:17:5f:
81:63:7a:f3:31:ff:65:74:fd:89:23:34:a4:0e:02:b5:fd:8d:
cd:13:51:cd:35:55:e2:3e:63:91:f8:65:37:98:63:83:cd:0e:
a6:f5:19:2e:cf:ca:02:16:76:17:e8:9f:8e:34:95:0d:cf:8e:
e7:2f:fc:c8:f9:51:ce:fa:dd:96:71:45:5a:bf:92:ed:26:46:
75:f1:81:a8:26:ce:17:83:94:6e:c3:03:c6:dd:02:98:64:cc:
c1:48:1c:ae:58:06:2e:16:4f:41:ae:cb:ce:6e:42:49:72:6d:
6a:4c:ad:c5:1a:72:d4:e9:32:15:b5:32:dd:ba:08:70:a5:a0:
92:6f:f6:26:61:16:61:a7:75:21:c0:e9:9a:f4:65:b8:93:d0:
b3:72:77:89:ee:73:0f:20:9c:0a:7c:97:41:28:15:f9:81:0a:
5e:5d:79:6a:05:47:ea:37:46:76:4f:af:e1:c4:f6:82:95:de:
46:d1:dd:f7:87:ff:a4:9b:f1:d4:d9:6c:c3:35:4c:75:48:e6:
53:f5:25:06:64:f8:0a:cf:9d:36:4a:e6:eb:0a:b1:d6:f3:5b:
a1:11:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:32 2026 by rpki-client