Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xpdXzJEvxRUaF1_kHxyKOQ79rFg.roa
File: xpdXzJEvxRUaF1_kHxyKOQ79rFg.roa (raw, json)
Hash identifier: PzAnTfa4EoHUd8Kol0B8PjYCixlmHXaok22H1DIkuYY=
Subject key identifier: C6:97:57:CC:91:2F:C5:15:1A:17:5F:E4:1F:1C:8A:39:0E:FD:AC:58
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019FD6A87E5E8476C944714E4A5FA595FD25
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xpdXzJEvxRUaF1_kHxyKOQ79rFg.roa
Signing time: Thu 06 Aug 2026 10:39:54 +0000
ROA not before: Thu 06 Aug 2026 10:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208864
IP address blocks: 37.18.4.0/22 maxlen: 22
46.243.152.0/22 maxlen: 22
46.243.188.0/22 maxlen: 22
46.243.192.0/21 maxlen: 21
128.0.68.0/23 maxlen: 23
178.170.148.0/22 maxlen: 22
178.170.152.0/22 maxlen: 22
188.72.64.0/22 maxlen: 22
188.72.68.0/23 maxlen: 23
188.120.32.0/22 maxlen: 22
188.120.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:a8:7e:5e:84:76:c9:44:71:4e:4a:5f:a5:95:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 6 10:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c69757cc912fc5151a175fe41f1c8a390efdac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:75:7b:14:85:ec:8a:4f:9b:a5:d6:5f:fa:
b1:68:e6:7e:07:b8:1d:0c:a8:cb:13:b1:da:a8:91:
91:78:a6:31:1e:83:c7:7c:4d:03:c0:30:99:f4:1d:
9e:cf:02:7d:8d:d1:40:9f:7a:b9:3a:d0:8f:df:39:
f8:cb:c0:15:72:48:0d:06:53:3f:c3:c3:8b:43:cd:
02:c6:c6:3d:31:9c:58:14:20:04:4e:81:d3:97:ae:
b5:84:d4:e6:b8:67:0b:9f:7c:21:46:e8:49:34:df:
7a:ac:70:ab:ff:42:96:db:90:5f:50:a8:a5:57:02:
ee:e3:22:e4:af:60:0e:da:5e:94:13:12:54:6a:50:
4e:3a:e7:f4:50:af:98:98:a4:1e:ba:a8:b7:c1:0a:
c7:4e:d9:e2:7d:c1:21:7c:88:a0:35:31:7f:7d:98:
de:59:95:a4:22:ef:1e:44:45:7e:02:ba:be:35:bd:
54:83:cb:24:09:e6:96:f5:60:28:33:37:ee:bc:77:
f8:e3:65:da:5f:e2:e0:f8:3d:84:0e:69:03:0a:41:
51:1a:22:86:ae:5d:49:03:6e:f5:9a:22:c6:6a:53:
99:ad:8c:eb:65:57:54:a9:9d:94:5d:1e:bd:f7:af:
4e:bd:b2:be:36:ce:56:52:a7:1e:fe:54:5b:50:2e:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:57:CC:91:2F:C5:15:1A:17:5F:E4:1F:1C:8A:39:0E:FD:AC:58
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xpdXzJEvxRUaF1_kHxyKOQ79rFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.4.0/22
46.243.152.0/22
46.243.188.0-46.243.199.255
128.0.68.0/23
178.170.148.0-178.170.155.255
188.72.64.0-188.72.69.255
188.120.32.0/22
188.120.44.0/22
Signature Algorithm: sha256WithRSAEncryption
91:dd:cb:51:a4:65:83:e2:a0:d8:b8:7e:28:81:aa:77:25:18:
86:73:35:cf:68:0a:9e:2b:e3:dc:d4:11:9d:5f:e2:f7:a2:35:
37:9d:10:d7:7d:cb:24:8e:4e:be:f9:a9:b4:85:59:fa:ff:36:
6c:8f:08:ed:ee:b1:98:ce:2d:7d:5b:cd:f0:0c:98:9a:d1:4d:
e5:3b:b9:a5:f2:2c:43:a8:6b:88:89:e9:e6:92:65:5f:f2:cb:
8f:0a:16:f4:32:a1:f1:f2:5b:43:60:34:ed:62:2f:d0:bf:a1:
86:43:fb:50:4d:d8:3e:04:86:eb:31:1b:61:53:29:21:d1:55:
f4:a0:80:68:c1:7a:08:1e:21:56:77:c3:b2:6d:4a:38:ab:bb:
d9:9b:41:fe:fb:63:ba:d4:03:a5:91:99:65:e1:06:73:2b:f8:
de:eb:91:f0:36:11:18:ff:8c:08:33:1e:5f:a7:bb:ae:53:5d:
11:fe:1a:30:b3:75:19:93:93:d1:4c:69:b9:d6:43:1f:97:48:
63:79:8c:21:88:70:91:86:59:f4:81:54:c2:3c:f7:f3:97:b0:
fc:c5:ae:62:c6:cf:c3:0a:82:5f:eb:08:25:44:0b:94:64:e5:
5b:d8:07:b7:12:30:ef:b2:32:41:0e:66:00:0a:c4:d9:94:c0:
1c:39:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:46:03 2026 by rpki-client