Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XhWNq_03YO6idZVx8wSudiAf8Ak.roa
File: XhWNq_03YO6idZVx8wSudiAf8Ak.roa (raw, json)
Hash identifier: jjd9Ntow5yuYQ1z+cFhSsqPXNrtdpbaOjcPj/8pmaOM=
Subject key identifier: 5E:15:8D:AB:FD:37:60:EE:A2:75:95:71:F3:04:AE:76:20:1F:F0:09
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A0499C91563E9BF40569C08FA779A78079
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XhWNq_03YO6idZVx8wSudiAf8Ak.roa
Signing time: Fri 28 Aug 2026 18:23:12 +0000
ROA not before: Fri 28 Aug 2026 18:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 9.237.128.0/18 maxlen: 18
9.249.28.0/22 maxlen: 22
138.226.214.0/23 maxlen: 23
151.145.128.0/20 maxlen: 20
151.145.128.0/24 maxlen: 24
151.145.144.0/20 maxlen: 20
151.145.176.0/20 maxlen: 20
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
170.100.148.0/22 maxlen: 22
170.100.204.0/24 maxlen: 24
170.100.206.0/23 maxlen: 23
192.6.64.0/22 maxlen: 22
192.6.172.0/22 maxlen: 22
192.6.252.0/22 maxlen: 22
192.25.180.0/22 maxlen: 22
192.25.200.0/22 maxlen: 22
192.25.208.0/22 maxlen: 22
192.25.232.0/22 maxlen: 22
192.25.244.0/22 maxlen: 22
192.137.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:9c:91:56:3e:9b:f4:05:69:c0:8f:a7:79:a7:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 28 18:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e158dabfd3760eea2759571f304ae76201ff009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:09:46:37:72:a1:f1:51:08:be:1c:d8:3c:
c8:46:26:14:65:0a:4c:32:1a:c8:6e:47:f5:61:8f:
5b:9d:18:7c:a1:cc:5a:76:e9:e5:47:fc:17:71:7c:
d2:3d:c7:56:92:6a:f5:f2:32:06:10:08:5d:f5:04:
bd:7e:7c:d2:c4:65:ba:49:f4:49:7a:51:3d:19:3c:
6b:ac:e6:37:95:5c:0a:da:ea:24:02:f1:ab:8f:09:
73:06:1a:e3:3d:6d:7a:13:89:48:de:cc:23:18:31:
2f:41:c7:07:17:21:9e:11:19:27:a6:07:f8:d6:6b:
8b:4b:d4:6d:3b:cb:aa:fa:e4:f1:97:fc:88:90:ae:
91:c5:2b:ed:38:88:a9:81:8c:6d:d6:bf:8e:9f:4c:
fd:20:05:40:b6:b4:ec:42:56:d5:9a:9a:2e:ae:21:
99:6d:d8:58:f8:f0:4c:be:98:4b:be:a2:f7:7d:71:
13:b8:0c:1b:e2:2a:f0:86:c7:58:db:ec:bb:0c:83:
48:08:48:87:b1:97:d3:dd:8e:23:c6:96:26:43:ee:
2b:54:86:37:ed:41:5d:ad:21:59:d0:43:80:14:6f:
60:56:c9:f9:ea:01:a5:cb:9f:52:07:02:e3:79:c2:
d4:99:99:e0:80:fc:bc:18:70:94:86:62:98:65:4e:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:8D:AB:FD:37:60:EE:A2:75:95:71:F3:04:AE:76:20:1F:F0:09
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XhWNq_03YO6idZVx8wSudiAf8Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.237.128.0/18
9.249.28.0/22
138.226.214.0/23
151.145.128.0/19
151.145.176.0/20
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
170.100.148.0/22
170.100.204.0/24
170.100.206.0/23
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:99:26:b5:49:75:48:a9:38:66:6e:e9:95:14:4a:90:80:ae:
6c:f6:8e:2d:79:91:d5:36:f6:a0:05:60:5c:f8:51:04:60:b3:
0e:3b:74:d7:6c:54:de:07:6a:56:45:8c:5d:84:dd:d7:37:19:
f9:87:29:3d:10:f2:fe:69:7e:c2:d9:af:7b:84:69:bd:0c:49:
62:fb:b9:c9:6a:aa:12:d3:ef:36:1d:1c:3e:e4:ec:1c:2c:7c:
37:0e:09:42:29:8d:9c:ce:45:f1:3d:84:24:c7:71:ad:00:ec:
68:d9:f2:eb:8b:18:e5:02:d8:d3:10:c3:37:32:6f:35:9a:5e:
f5:13:05:fa:63:9c:85:16:1e:b8:05:00:23:ca:1b:18:33:7f:
96:3c:7e:d1:03:e8:4f:80:08:d0:fc:e2:39:40:ce:03:da:e4:
22:71:b4:c8:e4:7e:8b:e0:8e:c9:0d:26:80:39:ae:e5:e2:c9:
09:ce:5a:c3:ad:b9:44:b3:53:d2:0c:c7:7f:12:f3:16:d2:9c:
5c:cf:9c:fc:88:02:25:d3:d4:67:48:1d:85:ff:80:33:e5:77:
73:36:c5:c8:25:4f:c3:d0:47:c7:ce:a2:e0:0d:99:58:eb:1a:
ff:96:f8:63:a8:d8:7b:7a:c3:10:8b:4e:95:51:85:e3:1a:c9:
d6:ce:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:38 2026 by rpki-client