Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/x-roBh6jG7KCniHokxRupVGwGZQ.roa
File: x-roBh6jG7KCniHokxRupVGwGZQ.roa (raw, json)
Hash identifier: yBX5/V4EaB2eLIcbcfm0hLUfz+34aBb04Fs5u2UEpTc=
Subject key identifier: C7:EA:E8:06:1E:A3:1B:B2:82:9E:21:E8:93:14:6E:A5:51:B0:19:94
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019E82861ACFAC6A2EC3A24121576EF987DC
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/x-roBh6jG7KCniHokxRupVGwGZQ.roa
Signing time: Mon 01 Jun 2026 09:31:27 +0000
ROA not before: Mon 01 Jun 2026 09:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
88.223.44.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
95.173.44.0/24 maxlen: 24
95.173.46.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
95.173.54.0/24 maxlen: 24
95.173.58.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:86:1a:cf:ac:6a:2e:c3:a2:41:21:57:6e:f9:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 1 09:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7eae8061ea31bb2829e21e893146ea551b01994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:b9:35:c1:39:01:b6:bd:53:31:a7:ac:16:
4b:12:24:26:2c:16:52:a2:18:4b:d4:b9:ff:2a:78:
49:67:de:99:ac:72:c7:eb:c4:80:20:f0:56:f7:0f:
c1:82:8b:97:8a:2e:78:a5:6f:4f:7d:d0:37:42:3f:
3a:ff:df:a9:dc:a9:9f:38:94:b0:5e:f9:bd:ea:eb:
2d:6d:07:7e:21:f4:11:ce:8f:a1:a0:c3:51:26:3d:
65:0a:cb:f3:e7:6c:6b:fb:02:ce:63:63:9a:fe:4c:
e3:fd:e7:c3:e5:fd:3f:fc:39:27:ce:da:5e:b7:5d:
4f:9f:7d:fb:05:0e:a7:cf:f7:24:ce:0a:10:71:61:
8b:64:e8:ef:cf:dc:ad:2e:dd:dc:6f:cd:af:97:ab:
dc:a3:46:30:ca:2a:3b:76:80:0e:e0:6f:41:6c:ab:
00:1d:ce:62:2d:51:7f:b3:53:fb:4b:92:df:54:c5:
f7:0a:11:d1:11:64:d7:b8:f1:1f:b4:66:e2:70:08:
b2:46:42:3c:42:e9:15:d7:ac:c8:c2:d4:1f:94:b9:
4b:6b:33:10:aa:a9:eb:5d:bd:26:14:df:09:68:cc:
a9:69:ac:22:18:d9:a2:ec:64:8b:09:e1:3e:9e:64:
48:41:d3:05:b5:e9:15:a4:57:29:a4:b0:76:35:0e:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:E8:06:1E:A3:1B:B2:82:9E:21:E8:93:14:6E:A5:51:B0:19:94
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/x-roBh6jG7KCniHokxRupVGwGZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
88.223.44.0/24
88.223.46.0/24
88.223.168.0/23
95.173.44.0/24
95.173.46.0/24
95.173.48.0/23
95.173.51.0/24
95.173.54.0/24
95.173.58.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7b:91:7e:ca:22:76:29:31:c5:76:15:ed:e8:4a:85:cc:df:
27:02:28:21:9d:78:5c:97:47:e5:95:b9:8b:89:d8:a3:e5:da:
78:97:9e:5b:71:df:48:af:e0:96:07:52:48:ed:af:fb:ba:6c:
60:7d:6f:58:d3:b8:93:d3:c5:6e:fd:db:50:0b:42:1d:7f:7a:
0e:65:a0:76:aa:f0:2a:b6:70:81:40:07:88:f0:41:b6:0f:84:
05:78:b6:1c:d9:96:bc:96:e5:c7:24:0e:31:09:de:5e:9e:14:
30:23:c4:37:45:14:18:29:1e:98:a1:85:07:4c:24:d2:94:86:
0e:3b:1e:94:0b:2d:d7:b4:23:c2:49:8a:7e:7d:b5:79:71:a1:
b8:2b:10:f9:b0:8e:e9:79:c8:7d:a0:0b:d0:6d:00:0f:ab:d7:
3f:c3:32:9d:c8:12:df:09:01:03:ad:dc:24:17:6a:4e:82:84:
79:6d:51:20:45:87:3d:66:4c:1a:80:3c:da:c5:f8:19:4a:c4:
db:58:49:3d:ba:86:ec:6d:e9:27:3e:a1:ad:50:a1:4c:33:91:
25:86:11:04:36:f2:a6:9d:56:23:c8:41:2b:5f:5d:16:ed:0f:
75:1f:c4:ad:e7:70:56:6b:c8:72:e8:76:05:37:c0:49:ec:82:
7c:d0:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:19 2026 by rpki-client