Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/xnwRzpbS1WTjKstdKX5XhpfLLRM.roa
File: xnwRzpbS1WTjKstdKX5XhpfLLRM.roa (raw, json)
Hash identifier: bcFMdfc8Y04a7ybK/JCHKj4vRb1no9xVFCe96zK8B40=
Subject key identifier: C6:7C:11:CE:96:D2:D5:64:E3:2A:CB:5D:29:7E:57:86:97:CB:2D:13
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019F0FD2BA2D78E7599AED200D22542F2929
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/xnwRzpbS1WTjKstdKX5XhpfLLRM.roa
Signing time: Sun 28 Jun 2026 20:01:36 +0000
ROA not before: Sun 28 Jun 2026 20:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208959
IP address blocks: 45.86.221.0/24 maxlen: 24
46.232.210.0/23 maxlen: 23
85.155.120.0/22 maxlen: 22
150.251.116.0/22 maxlen: 24
185.207.164.0/22 maxlen: 22
185.207.164.0/24 maxlen: 24
185.207.165.0/24 maxlen: 24
185.207.166.0/23 maxlen: 23
185.207.166.0/24 maxlen: 24
185.207.167.0/24 maxlen: 24
216.163.184.0/22 maxlen: 24
216.163.186.0/24 maxlen: 24
2a11:b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:d2:ba:2d:78:e7:59:9a:ed:20:0d:22:54:2f:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jun 28 20:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67c11ce96d2d564e32acb5d297e578697cb2d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:6b:19:c8:c0:0a:30:b0:93:e4:e3:f8:57:
54:69:06:2b:e6:17:c1:59:6e:d1:a0:5e:3b:66:b9:
f4:57:63:13:f0:09:2e:80:2c:40:b8:47:cd:ea:22:
6a:80:1e:bf:31:f1:48:9b:f7:fa:98:72:61:cf:a5:
b8:da:92:21:1e:76:d5:8e:f1:7a:76:ac:5f:e4:37:
1d:cf:4d:ac:22:57:5e:a1:84:ce:47:f5:d7:0a:df:
ae:67:fe:3d:48:c2:ec:35:dc:f3:1d:1f:94:09:c3:
f0:54:b9:f6:2c:59:55:78:9a:20:cc:10:ca:cd:04:
5f:4e:99:be:5e:a6:54:6f:a8:6e:f3:0a:a3:fb:18:
d4:c0:40:80:9a:b7:e5:bd:99:a8:20:9a:54:f4:c2:
b3:14:67:99:14:6a:99:ab:e4:c4:ea:96:c3:a6:6b:
26:20:14:79:42:93:10:7b:7f:47:22:46:5d:5b:57:
00:5b:0b:be:07:2f:2a:4d:78:f0:e5:a7:12:71:2c:
9f:73:6b:c0:77:14:3d:a7:3a:f7:77:de:fc:97:af:
95:ea:8c:31:34:9a:2e:05:78:51:f4:5e:b5:52:ff:
e6:69:09:de:59:ba:79:29:a6:b7:2e:dc:7c:31:cc:
c5:d9:bb:54:6d:dd:22:9d:8b:a8:61:68:50:4c:6d:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:11:CE:96:D2:D5:64:E3:2A:CB:5D:29:7E:57:86:97:CB:2D:13
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/xnwRzpbS1WTjKstdKX5XhpfLLRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.221.0/24
46.232.210.0/23
85.155.120.0/22
150.251.116.0/22
185.207.164.0/22
216.163.184.0/22
IPv6:
2a11:b00::/29
Signature Algorithm: sha256WithRSAEncryption
19:bb:8a:6b:e0:78:41:d4:44:03:ae:35:e2:18:9c:71:2c:f0:
92:76:10:79:b4:77:d6:73:eb:b1:6b:b3:a5:ca:e3:3e:f5:ee:
1d:ae:d6:84:94:8d:5d:9b:40:e9:16:99:22:4e:9f:70:6e:4f:
84:aa:a7:fe:eb:a3:6c:a4:48:66:a2:55:ea:85:0a:fe:9f:b9:
a5:2c:1d:04:89:36:02:16:ad:e3:14:55:ea:5e:36:f6:82:51:
9e:1f:0e:43:e0:af:68:28:c8:43:57:7c:97:47:71:a1:90:38:
d6:60:12:2a:63:1a:c6:0b:2c:91:98:36:0e:a4:f9:3d:d0:03:
c0:bb:6a:8d:78:39:d2:01:6a:9a:8c:60:4c:8c:f9:03:71:54:
38:7d:4f:76:45:b1:0a:18:37:e5:9e:0f:19:38:fd:d8:c5:d1:
25:1f:11:25:40:3a:c4:57:66:f8:00:6b:da:6f:e2:ec:ac:68:
00:7f:48:71:86:6a:e5:10:be:9b:00:65:77:66:1e:7b:39:aa:
f1:75:69:ed:f0:e1:b8:c5:63:d2:40:d1:72:4b:cf:9a:d2:1d:
45:b5:cb:3f:f0:5e:ad:74:1d:87:09:b1:e9:4b:7b:fc:51:ca:
bc:aa:c2:9c:41:28:b3:39:bf:e7:43:94:ee:30:e1:6e:63:90:
76:e4:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:29:03 2026 by rpki-client