Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/XhZYqo-93sizkFwJq1Oc8KABtwQ.roa
File: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (raw, json)
Hash identifier: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=
Subject key identifier: 5E:16:58:AA:8F:BD:DE:C8:B3:90:5C:09:AB:53:9C:F0:A0:01:B7:04
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236945F974FC6FB3D16FD1B9464D5619
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/XhZYqo-93sizkFwJq1Oc8KABtwQ.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205659
IP address blocks: 185.218.232.0/23 maxlen: 23
185.218.232.0/24 maxlen: 24
185.218.233.0/24 maxlen: 24
185.218.234.0/24 maxlen: 24
185.229.242.0/24 maxlen: 24
185.235.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:45:f9:74:fc:6f:b3:d1:6f:d1:b9:46:4d:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e1658aa8fbddec8b3905c09ab539cf0a001b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:9f:81:d8:19:f0:46:50:cb:f3:44:f2:6e:
61:7a:4d:cd:64:78:e2:5a:56:4a:05:88:53:7a:ac:
77:71:5d:12:47:cb:c8:ba:8f:8e:2a:07:ba:58:12:
89:14:fb:74:de:0a:f0:8d:23:4b:b6:a9:a6:0a:4a:
dd:41:db:6b:86:5e:5a:9e:de:45:21:d8:ad:d1:06:
54:47:56:f2:3b:f8:c0:ae:60:7d:f4:94:65:54:10:
b2:7c:33:ab:9d:a3:51:43:41:8b:5e:b4:3b:16:6a:
f9:d6:35:ec:ff:82:aa:a3:14:2d:b9:80:fb:7c:1e:
ca:c7:6b:f1:a2:7c:8d:09:41:aa:e2:e4:25:1a:1d:
d6:54:04:0a:72:39:79:41:95:7f:c6:46:36:58:5c:
47:f1:38:d1:b0:9b:18:b5:02:8b:c6:be:2b:c1:36:
ff:ac:fe:1e:7b:12:ce:3d:d0:89:2d:3b:ba:c9:fc:
e1:97:ca:2f:d7:60:fd:e5:54:a0:31:a1:70:ad:3a:
30:d3:7a:71:96:e2:7b:75:c7:7f:84:8d:eb:88:1f:
eb:c4:40:8c:33:1d:b3:74:6a:49:da:98:0b:33:e9:
00:d5:56:48:36:5e:26:ce:8a:f7:bb:a7:54:00:69:
a7:15:62:5f:95:55:17:d1:00:77:ce:1e:56:0e:ac:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:58:AA:8F:BD:DE:C8:B3:90:5C:09:AB:53:9C:F0:A0:01:B7:04
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/XhZYqo-93sizkFwJq1Oc8KABtwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.232.0-185.218.234.255
185.229.242.0/24
185.235.12.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e8:d1:9e:a2:f5:0c:55:29:93:ae:78:36:c2:76:45:74:17:
39:c0:e0:56:b2:40:9a:49:1f:f3:74:f6:55:01:04:c1:04:9d:
29:1f:02:81:ce:8f:74:c5:ac:e3:4a:fb:f1:2b:fd:1f:59:77:
13:87:d3:00:fb:24:49:6f:bf:c3:16:af:5f:a1:55:ab:07:e5:
78:34:9e:7a:42:14:61:d7:18:5c:ca:ed:c4:92:0f:fb:4e:57:
ff:89:49:7c:ff:fd:0f:86:e2:bb:01:f9:95:c6:c0:8a:d4:07:
82:02:c9:90:3c:3d:18:b8:07:31:29:6c:d6:3e:a8:20:d0:cc:
0a:39:20:26:00:3b:3b:3a:12:18:81:77:90:13:14:e4:33:29:
29:ef:74:7a:0c:65:ed:0f:5d:53:81:a1:b7:35:16:99:0a:7c:
99:73:91:79:9b:6c:d3:19:49:7e:10:db:2b:80:95:1b:54:83:
50:99:89:34:9c:9f:ce:a5:f8:cc:1e:f2:22:ee:a1:46:a6:6e:
7f:7d:70:fe:82:e9:01:ab:ea:85:56:0c:ab:92:18:46:65:73:
95:17:4b:fa:aa:b9:98:22:28:b4:8e:db:92:3c:4a:3e:ee:f2:
ac:1e:1e:4c:ec:3e:d5:f4:12:74:ed:6e:24:6b:14:f3:18:cf:
06:ab:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:59:32 2026 by rpki-client