Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/In_xgreKFfWQTYFlnjjmLhiHwyI.roa
File: In_xgreKFfWQTYFlnjjmLhiHwyI.roa (raw, json)
Hash identifier: gsiqXm6RUxLr8tboWvbsB1DhI1DS1FN/O6oO/pFKm00=
Subject key identifier: 22:7F:F1:82:B7:8A:15:F5:90:4D:81:65:9E:38:E6:2E:18:87:C3:22
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 019EB5E93B89CD0274A5165D9A7E05D8E462
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/In_xgreKFfWQTYFlnjjmLhiHwyI.roa
Signing time: Thu 11 Jun 2026 09:00:21 +0000
ROA not before: Thu 11 Jun 2026 09:00:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48362
IP address blocks: 45.152.52.0/22 maxlen: 24
86.111.44.0/22 maxlen: 24
91.195.116.0/23 maxlen: 24
94.199.168.0/21 maxlen: 24
185.31.212.0/22 maxlen: 24
185.252.36.0/22 maxlen: 24
2a02:1688::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:3b:89:cd:02:74:a5:16:5d:9a:7e:05:d8:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jun 11 09:00:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=227ff182b78a15f5904d81659e38e62e1887c322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:37:b8:1f:a4:a9:ee:ef:8b:87:7e:40:0c:
66:ef:65:f6:31:5f:5f:73:86:ce:41:90:f7:d2:fe:
4d:0b:8a:8a:ae:e5:e8:e1:65:3b:8f:32:d0:0c:12:
32:3d:7b:e3:a3:57:29:c0:cb:7a:46:e9:ef:65:e8:
40:70:a1:76:fc:3a:6e:09:fa:07:d4:8d:fe:c7:4a:
d9:a4:2c:e5:97:20:4a:a6:0a:82:e2:a2:a0:c9:e6:
cc:c4:72:ec:25:e2:0f:21:17:e5:57:af:db:9c:d3:
bd:c3:63:18:6e:12:cd:97:0d:0a:46:5b:a3:1b:9a:
aa:c3:fa:fd:77:a3:25:d9:2c:60:4b:02:e6:af:5c:
ed:95:0b:5f:d3:a7:ab:dc:ce:e2:34:d2:ad:99:28:
e4:2e:c9:e9:0e:44:f7:52:bd:07:be:27:73:03:70:
68:ac:4b:d9:ea:bd:53:c8:0b:a6:c0:b8:70:47:0a:
0d:14:00:3c:3b:7a:1f:db:53:d6:70:39:58:bd:8e:
52:b7:4b:ef:e7:4f:dc:1b:cc:ba:07:27:23:81:38:
dd:06:bf:68:7f:e8:ea:4e:b7:d7:cc:4a:48:8d:e4:
d4:a2:01:85:b8:51:0c:2d:14:f8:70:2d:67:1b:21:
57:62:1a:3e:81:ac:9d:10:99:81:14:89:11:f5:06:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:F1:82:B7:8A:15:F5:90:4D:81:65:9E:38:E6:2E:18:87:C3:22
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/In_xgreKFfWQTYFlnjjmLhiHwyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.52.0/22
86.111.44.0/22
91.195.116.0/23
94.199.168.0/21
185.31.212.0/22
185.252.36.0/22
IPv6:
2a02:1688::/32
Signature Algorithm: sha256WithRSAEncryption
91:88:2e:d1:f3:ab:99:be:32:42:4f:8b:be:72:50:16:56:f7:
ba:5e:de:57:73:ac:57:c1:90:66:ed:39:4f:56:12:a8:f4:e3:
db:8a:06:c4:b2:24:31:80:83:3e:ab:a2:64:86:4f:cd:74:4c:
5c:f6:61:98:ed:bb:e9:f4:49:2d:2d:bf:8f:36:fa:17:55:09:
fd:1e:f6:cf:74:92:7e:b8:dc:21:30:6e:d1:ef:92:de:0f:34:
86:01:4f:4d:ab:33:d5:eb:25:b0:58:7e:07:99:38:2a:4a:f2:
6c:56:ed:48:e3:fa:fa:f5:f7:04:ca:bf:87:61:cd:d5:65:7d:
54:8b:eb:e7:84:a8:f4:86:08:9d:13:5a:9d:ff:a9:1d:07:18:
9c:57:9e:1f:dc:62:25:88:52:3f:61:88:9a:eb:ef:99:d2:e9:
8f:22:8d:27:d6:7b:48:e2:b1:16:3e:ed:cb:22:f6:94:cf:21:
9f:1e:c0:5d:3b:2f:4f:21:b0:b0:c2:ed:fe:45:c1:9f:44:c8:
05:40:96:a0:c3:47:6b:28:6d:61:04:f3:c9:44:a1:91:ee:bc:
4e:02:a3:72:48:18:6d:e3:39:b7:1b:10:fd:4a:9e:a2:fb:89:
86:4e:d8:1a:38:6a:25:48:ee:21:dc:ed:72:7a:75:67:8d:3a:
df:e2:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:09:16 2026 by rpki-client