Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/XHiCg7-vOaMABA4CYBKSVf3rQRk.roa
File: XHiCg7-vOaMABA4CYBKSVf3rQRk.roa (raw, json)
Hash identifier: g1IQNPouH48EoFzQdEYNrlJEZkzgvbZrvrkCirhFzgo=
Subject key identifier: 5C:78:82:83:BF:AF:39:A3:00:04:0E:02:60:12:92:55:FD:EB:41:19
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 019F2368EB390A5353730E5AD48E152324F6
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/XHiCg7-vOaMABA4CYBKSVf3rQRk.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.190.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:39:0a:53:53:73:0e:5a:d4:8e:15:23:24:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c788283bfaf39a300040e0260129255fdeb4119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:43:a0:4d:d7:35:3e:db:fd:b1:32:39:fa:
b2:f3:65:e0:9b:ae:05:70:ca:26:9f:50:7d:09:28:
df:1f:ce:66:3f:39:89:8b:e6:37:52:ff:60:1a:e2:
50:11:ff:4f:85:c0:2b:22:4a:57:a3:5d:a1:9a:97:
a0:1d:d7:a5:a0:64:82:3a:b4:63:e3:0c:60:f3:57:
4f:80:e6:4c:73:67:51:ba:b8:01:cc:93:b0:04:6b:
4d:62:65:62:4e:4f:22:db:5f:78:54:63:9b:73:02:
ff:2c:7b:26:dc:0b:09:94:02:51:e9:fe:82:33:ff:
9a:30:f7:d7:ad:d9:5c:86:3b:15:60:66:ce:67:bd:
1e:37:f3:63:c7:78:19:c9:d2:cb:b0:12:0b:97:97:
76:c8:7c:17:85:16:71:d4:3d:99:0c:c2:a6:1c:bc:
68:22:1f:8f:62:8d:1c:a4:1b:dd:c0:b8:36:5e:45:
47:c9:88:05:9e:3b:16:5e:d6:65:bb:6c:80:7d:d1:
53:3e:78:fd:cc:40:4e:d6:99:90:36:61:41:7a:7a:
ba:49:9b:a4:49:96:a0:6a:93:56:6a:a0:d2:a5:42:
6b:a2:11:4c:17:28:89:09:a1:59:7e:95:4b:a4:03:
f1:3c:93:62:9d:72:52:04:4d:15:5d:63:b7:87:a7:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:82:83:BF:AF:39:A3:00:04:0E:02:60:12:92:55:FD:EB:41:19
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/XHiCg7-vOaMABA4CYBKSVf3rQRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.37.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1d:34:41:c6:f9:ff:5d:4e:7a:6f:0b:45:2a:20:a0:89:94:
91:f4:4f:72:58:69:ca:af:60:59:ce:61:c8:7f:c3:e0:f5:b9:
4d:88:5d:c0:b9:be:77:ec:1c:a0:7f:1d:d7:72:9c:2a:9a:64:
db:f5:ff:c5:9f:a9:66:03:4b:e1:b7:65:4c:5e:21:1f:32:0c:
13:29:a3:6d:44:55:e6:a7:9d:d6:12:6e:d1:07:b1:1c:aa:35:
f1:fa:d5:5b:92:f8:40:72:1e:4a:18:f6:c6:b0:88:18:b6:dc:
46:71:c0:ca:2e:30:48:47:32:80:25:e6:fb:a5:c6:3a:70:d2:
68:7f:85:92:9c:e7:54:be:e6:4b:a4:e2:e7:61:79:39:81:fb:
13:4e:7a:e8:90:28:f7:77:9e:45:de:48:2c:d2:ae:cf:9c:57:
d4:bb:0a:c7:24:19:16:f7:f5:1f:21:cb:c8:6c:fc:05:27:fd:
b7:40:b4:47:bc:3f:ea:ac:39:f1:7b:7c:ad:5b:bb:97:f6:93:
e4:4d:da:03:d7:de:63:0a:30:1b:7b:b9:d2:14:e9:f1:4b:d5:
6c:5b:ef:ac:20:a7:22:9b:0b:54:6d:48:f5:50:04:34:57:4a:
e1:b2:68:4d:15:ef:c8:f2:46:be:ff:6a:c1:04:30:05:3c:1b:
48:58:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:50 2026 by rpki-client