Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa
File: XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa (raw, json)
Hash identifier: MyDRiichukTa9/2yAU6IIGMytc1TPM1wlbX1da+yjW4=
Subject key identifier: 5C:C8:91:1F:EF:5A:8C:01:80:FD:7A:9C:8E:1B:6F:66:B1:3C:FA:0C
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DE6950457C0656D52D06084E07D5
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215056
IP address blocks: 46.32.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:de:69:50:45:7c:06:56:d5:2d:06:08:4e:07:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cc8911fef5a8c0180fd7a9c8e1b6f66b13cfa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:ed:6b:59:5c:2b:8a:5c:7b:16:80:c8:63:
d9:eb:18:46:b0:e0:0c:3a:cc:58:73:63:15:dd:f8:
b2:24:25:52:fa:c7:52:e5:b3:d3:4a:30:a4:2a:52:
fe:43:d0:41:3b:bc:b6:0c:38:bb:2e:e7:30:35:b9:
fc:37:de:06:7b:1e:93:03:2a:88:11:91:75:6a:94:
fb:a5:41:18:c4:64:34:d1:28:65:f8:88:f0:f8:f0:
c6:d0:28:bb:2f:36:64:15:b0:f3:a1:e3:ee:0b:12:
73:6a:3a:90:a4:8e:a7:28:03:48:20:90:3e:d7:ef:
f7:fd:ee:95:4e:df:51:04:13:82:f5:fd:b0:75:67:
fa:9b:45:7d:ef:f1:5a:50:bd:74:32:ae:4a:3d:c1:
dd:0e:b0:fc:e5:47:1f:3e:cf:6d:3c:e5:7c:64:50:
a5:e8:a1:23:c5:f1:b3:83:48:da:1e:46:f2:cb:76:
97:86:80:1b:9b:c9:ec:58:36:ff:da:43:fd:75:43:
99:d7:73:44:80:6a:23:a7:cd:be:34:b8:ff:f0:90:
ef:07:ff:93:12:ca:ad:66:40:b4:d7:12:6d:b9:65:
8f:fb:b1:55:90:ce:b2:7b:4d:3c:8c:9b:c4:5a:36:
ef:a8:10:41:8d:32:67:78:49:67:84:3d:a2:bc:ba:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:91:1F:EF:5A:8C:01:80:FD:7A:9C:8E:1B:6F:66:B1:3C:FA:0C
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:83:3c:f7:2c:66:be:22:d2:b3:fd:c2:44:66:99:92:30:47:
62:b8:47:54:ee:ab:61:47:e7:f5:20:05:87:03:5d:1c:ca:11:
4c:4d:a0:a7:df:cb:fc:4b:4f:c5:06:8b:f0:af:5a:ac:06:aa:
e1:89:27:21:4d:99:cd:c8:72:da:24:bd:fa:ab:ae:c4:89:0d:
dc:19:78:0c:7f:4f:f5:9b:47:49:b4:18:cc:fd:28:34:24:57:
64:4d:8e:c1:58:10:77:f6:a4:19:ff:f8:88:4e:54:7f:3c:68:
28:ad:12:1a:54:29:f6:10:35:10:93:90:c9:9f:de:b8:50:51:
d1:cc:94:b7:69:20:98:0a:3d:f3:00:91:44:c0:1d:2a:8e:db:
61:63:16:0d:8f:17:22:dd:85:3d:a4:16:9c:a6:09:fa:04:92:
b0:44:c8:fc:f0:96:28:fd:69:c8:f5:87:20:d5:85:f9:10:12:
c1:98:3c:73:20:f4:e5:da:05:f0:83:70:11:98:0b:d2:c6:6e:
58:db:77:af:5e:65:cb:d3:c9:0d:72:42:95:b5:e7:f2:db:4c:
97:9b:8f:c7:30:3a:c9:91:50:8e:ef:dd:a6:77:8e:07:82:e2:
cb:3a:d7:d2:b3:8c:76:08:ba:48:6f:dd:55:dc:e7:5c:95:a2:
6a:09:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:45 2026 by rpki-client