Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/_XQtBPNeW_iuy40orAGtRGhMTSk.roa
File: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (raw, json)
Hash identifier: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=
Subject key identifier: FD:74:2D:04:F3:5E:5B:F8:AE:CB:8D:28:AC:01:AD:44:68:4C:4D:29
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019DAB3E1846C6A2EC4C5F7B4B9AD6D5C3BF
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/_XQtBPNeW_iuy40orAGtRGhMTSk.roa
Signing time: Mon 20 Apr 2026 14:14:26 +0000
ROA not before: Mon 20 Apr 2026 14:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63911
IP address blocks: 81.85.128.0/19 maxlen: 24
85.136.16.0/20 maxlen: 24
85.136.48.0/20 maxlen: 24
85.136.84.0/22 maxlen: 24
85.136.120.0/21 maxlen: 24
85.136.144.0/21 maxlen: 24
85.136.212.0/22 maxlen: 24
85.136.216.0/22 maxlen: 22
85.136.220.0/22 maxlen: 24
85.137.0.0/22 maxlen: 24
85.137.4.0/22 maxlen: 24
85.137.8.0/22 maxlen: 24
85.137.12.0/22 maxlen: 24
85.137.32.0/20 maxlen: 24
85.137.64.0/20 maxlen: 24
85.137.96.0/20 maxlen: 24
165.217.112.0/20 maxlen: 24
188.95.90.0/24 maxlen: 24
213.18.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:3e:18:46:c6:a2:ec:4c:5f:7b:4b:9a:d6:d5:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Apr 20 14:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd742d04f35e5bf8aecb8d28ac01ad44684c4d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:58:b2:7d:85:2a:df:de:a9:44:1f:b1:99:
c3:58:ad:49:e6:bf:4c:b7:f7:35:30:1d:a7:49:dc:
a1:f8:ff:bb:8c:4e:29:d9:15:f1:36:2c:76:1d:a8:
f3:d3:4d:9e:97:c9:88:86:8b:f9:f2:7e:5b:57:10:
f1:f0:83:c3:76:2c:b4:b1:8f:03:6f:a2:09:1e:39:
08:0b:53:d5:96:0c:95:d2:62:a2:9b:ce:ec:78:3b:
c9:c8:6d:36:98:48:41:ee:a7:df:96:26:a6:d2:ab:
1c:da:2c:4a:20:f0:be:b1:0f:88:c9:e4:1f:f6:c3:
be:41:6a:ba:2f:89:3e:44:cd:04:f4:53:de:66:b3:
e0:91:41:f7:99:32:71:70:72:c7:3a:5a:a4:0b:45:
ee:49:ab:aa:6d:b5:29:dc:c1:06:cb:da:8c:ed:0e:
5b:cf:ba:d4:f4:7e:da:db:8e:e4:27:4a:29:0b:05:
a3:a2:dd:ba:f0:e7:95:3f:7a:b2:2a:5f:3e:65:8d:
89:42:0f:b1:90:4c:2e:5f:e9:f7:78:0a:02:98:5e:
3a:80:2a:d3:cb:bd:0d:f7:26:85:3f:ff:7c:d4:c7:
c9:35:7d:a1:78:3d:5c:38:b1:f8:75:42:60:03:8b:
98:8b:f1:89:9e:3f:44:d0:4d:87:f6:94:48:ac:17:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:2D:04:F3:5E:5B:F8:AE:CB:8D:28:AC:01:AD:44:68:4C:4D:29
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/_XQtBPNeW_iuy40orAGtRGhMTSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.128.0/19
85.136.16.0/20
85.136.48.0/20
85.136.84.0/22
85.136.120.0/21
85.136.144.0/21
85.136.212.0-85.136.223.255
85.137.0.0/20
85.137.32.0/20
85.137.64.0/20
85.137.96.0/20
165.217.112.0/20
188.95.90.0/24
213.18.224.0/20
Signature Algorithm: sha256WithRSAEncryption
63:9a:61:ba:1e:02:0c:70:6d:60:94:0c:8a:5e:4e:5d:ec:03:
b2:f6:ec:1b:07:7a:f8:29:14:79:67:57:9f:5f:91:72:29:16:
e6:c5:49:26:b8:9a:4e:82:2d:07:a0:86:1b:a5:32:65:3a:72:
0d:45:b6:6c:db:44:97:7f:da:c3:46:15:e3:c2:81:e2:4e:1d:
48:21:30:73:9c:32:a7:fa:aa:19:14:0f:59:8f:42:59:88:19:
3f:d0:a7:5a:b2:0b:15:b3:a5:0c:42:ee:02:48:e5:08:29:20:
67:a2:24:84:64:46:e8:e7:b4:4d:3f:d8:17:3b:09:de:f5:1c:
a8:c1:36:3c:4b:81:b2:f1:98:2d:17:19:97:64:3f:0d:b2:73:
5f:50:e1:20:8b:76:a7:a3:fa:ec:04:34:f9:02:5d:d8:71:66:
77:c3:40:b0:64:d2:a5:49:bc:2d:c5:b0:54:48:34:b1:ae:0e:
44:6e:d2:a7:e8:5b:be:c8:9a:e6:8c:f8:71:33:5f:62:1d:34:
fa:eb:1e:5c:0e:47:ee:3b:72:5b:58:cb:6b:d5:c2:5f:cb:53:
ec:c6:f3:62:cb:1a:8b:4d:09:e3:ee:4a:d1:c7:cc:f0:c5:27:
7b:9d:0e:a4:57:b5:3e:7f:ff:0c:73:3e:18:68:52:5f:61:2c:
97:00:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:27 2026 by rpki-client