Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa
File: xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa (raw, json)
Hash identifier: /FjGi3zucL1NzNe41iFvx0RHmpavP7RfeWxzQfA6e5E=
Subject key identifier: C5:26:D7:4E:F5:11:13:39:33:73:BF:A5:D8:92:FA:19:F8:3C:2D:B1
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 019CF0AA2A295E28F1BF1091EF58250FC254
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa
Signing time: Sun 15 Mar 2026 08:43:29 +0000
ROA not before: Sun 15 Mar 2026 08:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50633
IP address blocks: 185.36.146.0/24 maxlen: 24
193.84.50.0/24 maxlen: 24
193.107.72.0/22 maxlen: 22
193.107.72.0/24 maxlen: 24
193.107.73.0/24 maxlen: 24
193.107.74.0/24 maxlen: 24
193.107.75.0/24 maxlen: 24
193.194.124.0/22 maxlen: 22
193.194.124.0/24 maxlen: 24
193.194.126.0/24 maxlen: 24
193.194.127.0/24 maxlen: 24
195.68.216.0/24 maxlen: 24
195.68.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:aa:2a:29:5e:28:f1:bf:10:91:ef:58:25:0f:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: Mar 15 08:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c526d74ef51113393373bfa5d892fa19f83c2db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:48:e9:6b:d8:e1:fd:e0:92:a1:a0:0d:e2:
4a:e0:45:f7:49:85:db:c9:6e:77:ee:6b:ba:b8:0b:
1c:be:52:0d:5d:53:e5:45:b3:a5:d5:c0:5a:6a:aa:
6a:a5:79:8a:10:c8:0d:fd:6b:79:df:c1:f8:88:32:
26:70:34:4f:83:03:7c:5c:ad:b8:8b:3f:1f:a8:cf:
c6:9f:eb:db:0d:44:20:9c:f8:df:c5:50:17:63:c3:
a9:8a:99:95:57:93:7e:13:88:80:48:cf:b7:be:7a:
71:68:72:b4:68:42:cd:23:ed:8b:9e:7d:b6:88:9e:
bd:09:1c:d4:f6:c6:2a:34:aa:32:78:06:bd:4e:71:
b3:ae:af:b3:fc:7f:20:9d:34:3b:47:2c:d3:fb:13:
41:b6:a9:5f:87:50:e3:73:8b:84:d9:59:28:da:89:
25:b9:ca:c3:29:27:0f:d3:ce:63:18:07:bc:4f:c8:
2d:d9:be:4b:02:ba:d3:25:aa:89:72:84:3c:67:14:
bc:4f:75:01:c4:91:3c:a8:03:77:40:1a:79:93:d3:
59:16:8b:32:a2:cd:0b:2c:d1:3c:bd:95:5f:1d:4e:
a3:6e:03:2a:70:37:d7:20:92:02:10:e1:f6:79:5d:
5a:f0:20:1e:61:39:0e:80:ee:5b:d4:b7:73:65:46:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:D7:4E:F5:11:13:39:33:73:BF:A5:D8:92:FA:19:F8:3C:2D:B1
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.146.0/24
193.84.50.0/24
193.107.72.0/22
193.194.124.0/22
195.68.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:ee:4c:e2:82:67:c0:d0:5b:5c:26:b5:c7:c2:c2:72:a2:40:
67:00:09:94:06:ac:13:14:42:40:28:27:5d:7e:d5:4a:2e:0d:
7e:be:94:fc:19:39:73:df:80:d9:dd:4e:a0:0a:d7:57:bb:a9:
84:db:b4:cb:e7:6b:fa:1f:fd:2f:85:cd:ef:1f:fd:7a:e1:5f:
e2:b2:f4:2c:ba:24:13:bd:6f:70:43:90:63:5f:de:84:71:60:
5f:43:25:a9:30:ac:44:19:5e:aa:0b:59:27:e9:1e:68:ac:19:
dc:36:75:00:08:72:ef:3f:f9:ee:e7:99:95:b1:54:46:9c:57:
80:98:3f:60:6d:8c:f7:32:9e:02:7a:1f:8b:f8:27:2b:ef:98:
66:24:7e:c8:b4:9d:e0:03:4f:a5:fc:60:3c:2c:7c:71:70:04:
e5:3d:06:b8:1c:24:9a:d3:59:20:2c:39:2c:d3:41:80:d9:ed:
03:d3:70:c4:76:f4:08:36:d1:54:6e:11:c7:b4:c1:79:d5:7f:
1e:c0:37:1c:8d:1d:4c:3f:f3:73:03:b6:82:44:c5:45:90:67:
28:d5:b0:3f:a2:88:1b:e2:a4:00:1a:73:8a:26:ba:8b:07:0d:
e7:fe:62:e5:84:96:58:5e:1b:96:54:30:d0:32:9f:29:43:88:
cb:d8:e0:cf
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZzwqiopXijxvxCR71glD8JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OGQ0OTgzYzljNjNiZDhhMTU4MDAzYzU4NWY0M2Q5OTRj
MTJkYzIwHhcNMjYwMzE1MDg0MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTI2ZDc0ZWY1MTExMzM5MzM3M2JmYTVkODkyZmExOWY4M2MyZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUlI6WvY4f3gkqGgDeJK4EX3SYXb
yW537mu6uAscvlINXVPlRbOl1cBaaqpqpXmKEMgN/Wt538H4iDImcDRPgwN8XK24
iz8fqM/Gn+vbDUQgnPjfxVAXY8OpipmVV5N+E4iASM+3vnpxaHK0aELNI+2Lnn22
iJ69CRzU9sYqNKoyeAa9TnGzrq+z/H8gnTQ7RyzT+xNBtqlfh1Djc4uE2Vko2okl
ucrDKScP085jGAe8T8gt2b5LArrTJaqJcoQ8ZxS8T3UBxJE8qAN3QBp5k9NZFosy
os0LLNE8vZVfHU6jbgMqcDfXIJICEOH2eV1a8CAeYTkOgO5b1LdzZUYaQQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMUm1071ERM5M3O/pdiS+hn4PC2xMB8GA1UdIwQY
MBaAFKWNSYPJxjvYoVgAPFhfQ9mUwS3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYt
Y2UzMGQ0YTM5OGUwLzEveFNiWFR2VVJFemt6YzctbDJKTDZHZmc4TGJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYtY2UzMGQ0YTM5OGUw
LzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuSSSAwQA
wVQyAwQCwWtIAwQCwcJ8AwQBw0TYMA0GCSqGSIb3DQEBCwUAA4IBAQCa7kzigmfA
0FtcJrXHwsJyokBnAAmUBqwTFEJAKCddftVKLg1+vpT8GTlz34DZ3U6gCtdXu6mE
27TL52v6H/0vhc3vH/164V/isvQsuiQTvW9wQ5BjX96EcWBfQyWpMKxEGV6qC1kn
6R5orBncNnUACHLvP/nu55mVsVRGnFeAmD9gbYz3Mp4Ceh+L+Ccr75hmJH7ItJ3g
A0+l/GA8LHxxcATlPQa4HCSa01kgLDks00GA2e0D03DEdvQINtFUbhHHtMF51X8e
wDccjR1MP/NzA7aCRMVFkGco1bA/oogb4qQAGnOKJrqLBw3n/mLlhJZYXhuWVDDQ
Mp8pQ4jL2ODP
-----END CERTIFICATE-----
Generated at Thu Mar 19 20:47:23 2026 by rpki-client