Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/XcfrqwVkAecmKG1ymoxc8TU7gig.roa
File: XcfrqwVkAecmKG1ymoxc8TU7gig.roa (raw, json)
Hash identifier: oUgtmg6950LaRLY6EKaoiD6KJRJQ+cPDjzmJU5AJKho=
Subject key identifier: 5D:C7:EB:AB:05:64:01:E7:26:28:6D:72:9A:8C:5C:F1:35:3B:82:28
Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial: 019D337D8738F3703B16EAB77096C93A81DB
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/XcfrqwVkAecmKG1ymoxc8TU7gig.roa
Signing time: Sat 28 Mar 2026 08:09:17 +0000
ROA not before: Sat 28 Mar 2026 08:09:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49604
IP address blocks: 45.151.4.0/23 maxlen: 23
45.151.6.0/23 maxlen: 23
85.222.232.0/22 maxlen: 24
85.234.242.0/23 maxlen: 23
85.234.244.0/23 maxlen: 23
85.234.246.0/23 maxlen: 24
185.31.240.0/22 maxlen: 24
194.147.241.0/24 maxlen: 24
194.147.244.0/24 maxlen: 24
194.147.255.0/24 maxlen: 24
194.149.89.0/24 maxlen: 24
217.146.64.0/20 maxlen: 24
2a02:29e9:10::/48 maxlen: 48
2a02:29e9:20::/48 maxlen: 48
2a02:29e9:30::/48 maxlen: 48
2a02:29ea::/32 maxlen: 32
2a02:29ea:a::/48 maxlen: 48
2a02:29ea:1e::/48 maxlen: 48
2a02:29ea:ffff::/48 maxlen: 48
2a02:29eb::/32 maxlen: 32
2a02:29ec::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:7d:87:38:f3:70:3b:16:ea:b7:70:96:c9:3a:81:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Validity
Not Before: Mar 28 08:09:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dc7ebab056401e726286d729a8c5cf1353b8228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:7f:08:98:59:7d:3d:57:3a:3d:bd:c4:d8:
93:27:cb:c8:f5:70:c4:9e:d7:91:31:98:ad:08:04:
af:6e:a2:d3:54:ad:55:08:1f:e4:40:1c:e8:2e:75:
9d:9c:f7:4e:ec:1c:25:9e:63:6b:fc:aa:6b:6f:28:
29:cb:d4:0e:a4:6a:3e:2a:c5:54:37:77:60:fd:59:
d7:b7:75:e8:0a:63:7a:85:34:62:31:79:97:93:f6:
ad:4f:4c:53:b0:70:f2:7b:1a:e3:cf:5e:a2:31:92:
4c:fc:62:fe:87:d6:6e:eb:ed:f6:12:d9:46:d7:a4:
06:fd:cc:01:98:05:2b:d4:5a:5c:52:b1:5a:66:fb:
07:8d:0d:71:fd:6c:79:9b:48:86:ed:4f:e1:94:96:
33:28:28:69:92:84:01:f7:46:cc:e4:6d:25:08:60:
54:3b:b9:2f:f4:3f:14:39:1c:03:c9:f3:73:c3:4c:
7b:d6:53:d9:60:a2:10:18:e6:08:ff:5c:18:2d:1d:
d5:2f:c1:2a:46:79:c7:10:a2:c9:b1:6a:41:21:07:
73:75:64:e0:5b:44:97:12:48:ed:4c:0f:a0:bf:1d:
40:f4:3a:9a:c4:98:41:d7:62:c0:e6:32:c7:e1:33:
3d:d8:bb:c9:18:70:70:ba:9f:cc:64:f8:fe:35:b2:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C7:EB:AB:05:64:01:E7:26:28:6D:72:9A:8C:5C:F1:35:3B:82:28
X509v3 Authority Key Identifier:
keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/XcfrqwVkAecmKG1ymoxc8TU7gig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.4.0/22
85.222.232.0/22
85.234.242.0-85.234.247.255
185.31.240.0/22
194.147.241.0/24
194.147.244.0/24
194.147.255.0/24
194.149.89.0/24
217.146.64.0/20
IPv6:
2a02:29e9:10::/48
2a02:29e9:20::/48
2a02:29e9:30::/48
2a02:29ea::-2a02:29ec:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:e7:b2:b4:1b:2f:ad:41:b4:2e:d9:c0:bf:63:71:8d:da:b3:
4b:47:4d:be:5c:d2:60:30:7b:05:e5:ba:82:bf:2f:31:07:53:
ad:52:a7:21:8b:dc:90:94:0a:24:9b:7c:42:7a:ca:3e:39:31:
d0:33:6c:ea:d2:61:b2:9a:44:9b:ad:6b:af:18:47:1d:8a:cc:
6e:f7:78:58:8b:55:e7:03:46:5c:f1:6b:bf:39:61:44:7f:51:
9d:f9:b8:3f:fc:a4:51:23:2e:b4:ec:54:e3:c4:1d:85:36:b1:
5a:10:92:07:f1:35:15:50:bd:e5:dd:8a:b6:64:b4:ad:3f:b9:
0d:e7:74:84:d8:27:74:e0:32:ae:34:8c:a2:59:e1:ea:5c:38:
d7:ed:ad:0a:cd:a2:d7:e3:d5:77:18:9f:c6:8c:ce:3e:d0:69:
50:3d:12:80:3d:e7:a9:94:30:92:c4:9c:56:0a:ee:f7:12:1b:
a1:02:37:e4:01:39:2b:fe:5c:e1:a4:e4:fb:33:36:cd:73:8c:
7a:b6:5e:e3:83:d9:c8:15:4a:8a:1b:f8:d2:e0:c1:cf:c2:61:
70:c3:3c:51:8e:3c:d0:aa:32:85:d9:94:7f:d6:4d:1a:54:48:
38:a7:30:c4:9b:84:cf:2f:64:2a:62:83:86:79:4a:57:5b:a5:
7d:fe:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:00:33 2026 by rpki-client