Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/xTS6Tfiu-9uA63wefJtwTOK2RJM.roa
File: xTS6Tfiu-9uA63wefJtwTOK2RJM.roa (raw, json)
Hash identifier: 4AnrhCLByieTG8zvOspxIp8KCN2IgRpCwnbkXSHOdgk=
Subject key identifier: C5:34:BA:4D:F8:AE:FB:DB:80:EB:7C:1E:7C:9B:70:4C:E2:B6:44:93
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01A0D93DB22C3203CB3581D5B20F960A44A5
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/xTS6Tfiu-9uA63wefJtwTOK2RJM.roa
Signing time: Fri 25 Sep 2026 15:44:54 +0000
ROA not before: Fri 25 Sep 2026 15:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.30.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:3d:b2:2c:32:03:cb:35:81:d5:b2:0f:96:0a:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Sep 25 15:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c534ba4df8aefbdb80eb7c1e7c9b704ce2b64493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:35:da:3c:a1:3f:10:b1:ef:b1:97:6c:2a:47:
cb:d0:bf:19:21:29:7c:7d:fd:7a:2c:96:d6:ba:5a:
01:4c:14:6e:d9:ba:41:e9:63:39:a7:58:fe:a8:df:
bd:6a:d1:07:9e:7c:0a:9c:11:81:84:1d:97:bf:3b:
87:51:d6:2c:88:82:ed:b9:8b:c5:0f:0f:c4:ea:98:
59:f1:26:af:53:4a:35:56:a7:d6:7b:e1:51:92:7c:
e3:78:d4:5e:be:45:df:91:b8:5b:07:a9:9f:f8:26:
f0:90:0b:ec:88:bc:92:4f:f5:8e:26:e8:38:e8:de:
05:8d:ce:fb:2f:db:4e:a6:8f:8f:b1:f7:5d:95:32:
d5:f1:7c:19:07:eb:76:74:8a:c2:03:4b:fd:12:ec:
e4:72:d8:c3:6d:c6:57:be:09:66:28:34:4a:3e:7a:
8d:d3:5d:24:ca:4d:9a:61:c1:62:12:5a:4b:2c:e4:
8f:f1:2d:9c:3c:2b:a5:5c:bd:f2:36:a9:03:4d:09:
d2:00:7c:77:c2:17:03:fa:a9:10:2e:11:cb:a6:a9:
47:17:16:60:5c:df:85:f6:d3:f0:2e:c7:21:ea:8f:
4a:f8:cb:8b:95:4d:ac:d1:fa:1d:ff:da:a0:fd:0f:
d7:46:88:fa:43:66:1b:0c:7e:fd:04:6e:d4:68:2b:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:BA:4D:F8:AE:FB:DB:80:EB:7C:1E:7C:9B:70:4C:E2:B6:44:93
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/xTS6Tfiu-9uA63wefJtwTOK2RJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:08:8b:14:57:43:95:61:b7:34:7c:46:b8:9e:a0:5d:a8:e7:
db:4f:fa:91:b7:f5:b2:21:0c:f4:a8:a9:bf:ed:19:6e:76:9b:
17:33:01:21:ba:e6:29:48:ae:75:45:e3:09:56:ac:fc:c8:6f:
43:f6:fb:89:3a:fb:2a:1a:22:f9:fa:a3:8c:34:40:dc:69:3e:
66:99:d6:b5:1d:ce:bb:53:97:13:6e:06:73:35:da:b8:69:d7:
98:72:54:9c:72:d2:ca:ba:1c:06:18:54:9e:e2:b2:5e:cb:20:
a3:92:aa:9c:05:38:9c:a4:bc:a9:eb:f7:53:02:e3:e2:29:e3:
cf:e1:bf:16:1f:e6:cd:9c:16:2f:6d:ac:36:0f:65:10:1f:91:
77:08:77:fa:bf:52:36:42:aa:81:e0:5e:c5:fb:13:72:a9:51:
c9:03:91:6c:57:e6:34:00:fa:70:d3:fc:8a:d4:cc:91:08:cc:
a8:f6:3f:cb:5b:d4:20:76:2e:cb:38:1f:ce:8f:1d:59:ac:d2:
4e:7d:1c:98:b9:6c:c4:05:c5:ed:3a:97:6c:18:f8:47:54:e8:
36:79:9e:ac:df:26:51:5b:b4:ba:06:67:72:9c:76:11:e8:bc:
49:74:4d:d2:42:4d:f7:48:3f:35:69:cb:2c:1f:0d:f4:a1:0f:
11:8e:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:23 2026 by rpki-client