Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/xoWvafIMJ6TLt2ZntxrZctfmhMc.roa
File: xoWvafIMJ6TLt2ZntxrZctfmhMc.roa (raw, json)
Hash identifier: Rhaku6Y4Ce9/CA5bX0DFke+wrnSAKtC/WyFWuc4Uj/U=
Subject key identifier: C6:85:AF:69:F2:0C:27:A4:CB:B7:66:67:B7:1A:D9:72:D7:E6:84:C7
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019E5DECBDF2E62E1D1FFEA85F36117F86B1
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/xoWvafIMJ6TLt2ZntxrZctfmhMc.roa
Signing time: Mon 25 May 2026 06:57:36 +0000
ROA not before: Mon 25 May 2026 06:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59441
IP address blocks: 185.36.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:ec:bd:f2:e6:2e:1d:1f:fe:a8:5f:36:11:7f:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: May 25 06:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c685af69f20c27a4cbb76667b71ad972d7e684c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:28:5a:8b:60:fd:b2:d9:c5:84:c3:93:53:
93:d0:e6:87:e7:d6:ad:bc:87:50:7f:9e:10:fa:a1:
3f:26:c3:1f:4b:42:0d:fa:2e:80:69:00:24:4f:d0:
6c:12:bc:68:ec:90:8b:30:27:9d:73:1e:21:36:e2:
32:74:ea:aa:e8:b9:71:9f:13:0e:2f:69:16:8e:8d:
a1:5f:d6:3f:e7:d7:e2:51:bd:f4:06:e4:38:01:09:
0f:3c:99:42:c1:86:30:90:d2:19:64:de:ed:0f:73:
34:cc:b5:a2:71:97:4c:21:85:41:26:e5:31:c0:51:
5a:56:d3:9f:22:dc:e5:ea:25:8e:a8:8f:74:ec:db:
db:56:54:05:22:0e:8c:72:1c:0c:33:a6:6c:5c:24:
81:66:b8:a7:09:f8:76:62:c0:f2:0a:dd:ee:b5:22:
4a:76:7b:81:9d:27:4d:87:65:28:48:c4:a0:89:91:
33:75:fb:e7:87:f7:35:04:6f:2c:3a:fe:39:b2:68:
37:5a:f9:1d:25:08:1a:22:00:16:fa:80:34:07:7c:
51:ed:1b:09:b8:ee:5e:3d:46:b3:e3:f1:f7:2d:02:
98:38:f0:76:43:f6:37:58:5a:41:42:51:b6:ee:67:
1a:66:01:63:1d:64:9f:18:64:e7:4f:9e:59:34:df:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:AF:69:F2:0C:27:A4:CB:B7:66:67:B7:1A:D9:72:D7:E6:84:C7
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/xoWvafIMJ6TLt2ZntxrZctfmhMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.145.0/24
Signature Algorithm: sha256WithRSAEncryption
11:da:58:1c:03:4b:b2:d0:cb:c6:f1:72:09:ab:37:d7:6f:cf:
f9:7a:4e:be:ec:1c:7b:c3:fa:d3:64:a3:f5:97:cd:6a:02:05:
f0:71:7a:f4:00:93:11:53:e4:94:17:e7:65:1c:79:5c:58:8c:
ef:36:4a:ac:6b:08:a2:7b:d7:c9:4a:df:9f:00:32:5e:6f:90:
4e:18:f8:5d:4e:6e:85:38:03:42:71:d5:da:7a:f7:25:80:eb:
d6:e2:28:2f:65:83:36:78:39:99:db:17:9f:0f:0d:ac:01:88:
c2:27:7a:2d:e1:fa:92:33:f4:21:38:f9:b3:90:7c:3b:39:49:
25:6f:d1:c3:07:66:4f:cc:42:b2:e5:af:cb:4f:78:67:80:43:
69:90:ba:aa:22:51:7c:c5:04:f1:02:70:ae:29:a7:36:38:91:
fb:98:59:43:7b:74:45:a0:7c:9f:d6:e4:84:ec:4e:6f:5a:c9:
44:50:eb:40:df:0f:ea:ce:d1:05:0b:bb:41:b0:31:0e:75:6a:
4f:32:f3:c6:72:7f:87:f1:20:61:46:e4:c9:66:81:63:3e:01:
ba:69:0d:6a:c0:86:c1:c2:67:55:47:a4:f0:b2:b4:f7:d5:62:
49:c8:53:4a:f6:c0:f7:b9:e1:85:c8:4e:c4:1f:53:19:7e:5e:
22:f5:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:36:10 2026 by rpki-client