Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa
File: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (raw, json)
Hash identifier: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=
Subject key identifier: 5C:A1:94:8D:99:43:EE:DB:24:21:0E:6F:05:4E:57:52:D6:41:74:55
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019FB7E3502FED6C54BAB839213D4153BBFB
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa
Signing time: Fri 31 Jul 2026 11:15:55 +0000
ROA not before: Fri 31 Jul 2026 11:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43700
IP address blocks: 14.102.4.0/22 maxlen: 24
31.172.224.0/22 maxlen: 22
45.84.244.0/22 maxlen: 22
78.158.0.0/19 maxlen: 19
78.158.0.0/20 maxlen: 20
78.158.16.0/20 maxlen: 20
95.215.140.0/22 maxlen: 22
185.246.240.0/22 maxlen: 22
185.252.108.0/22 maxlen: 22
185.252.204.0/22 maxlen: 22
216.25.0.0/22 maxlen: 22
216.25.2.0/24 maxlen: 24
216.25.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:e3:50:2f:ed:6c:54:ba:b8:39:21:3d:41:53:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jul 31 11:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ca1948d9943eedb24210e6f054e5752d6417455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:e4:f8:f5:23:95:c4:2a:27:68:fd:33:d5:
7d:8b:4e:2a:76:41:eb:3a:00:6f:3d:bd:18:2e:56:
56:9c:55:4c:4c:00:dc:ed:dc:0b:50:ff:fa:3a:05:
98:4a:66:e2:42:e2:a1:d2:9f:02:59:82:81:b7:88:
c7:6d:4d:6c:54:5e:2f:30:73:4c:1b:83:55:21:74:
b8:9c:b8:7f:8b:09:58:9c:56:28:a4:4f:cd:b1:f8:
40:85:e2:bf:52:fd:52:8d:9b:f7:46:ea:3a:f3:0e:
e6:84:60:30:ef:a2:56:5d:38:d3:80:ee:ca:1b:0d:
51:b0:b1:05:c7:d4:2d:be:e9:39:48:99:8e:5e:3d:
f8:d3:6d:8e:1a:e7:ba:59:ca:8d:a0:61:fc:04:24:
37:83:ea:12:3b:ca:ff:55:0e:db:de:51:fb:ba:b0:
13:4a:6f:82:ad:ac:4c:d1:ba:51:c0:f3:ae:66:f3:
ab:bf:b7:87:b2:87:c5:e2:12:00:9e:f4:55:85:06:
1c:f1:34:6a:a8:d9:9a:74:f1:c0:be:22:82:68:83:
72:a7:80:57:2b:b1:3a:5f:6f:98:df:cf:eb:ec:bb:
6c:82:ee:de:6b:76:4a:f4:57:1f:88:75:ab:d1:1f:
ec:92:4f:61:69:33:3d:2a:15:7e:46:bc:07:1b:53:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A1:94:8D:99:43:EE:DB:24:21:0E:6F:05:4E:57:52:D6:41:74:55
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.4.0/22
31.172.224.0/22
45.84.244.0/22
78.158.0.0/19
95.215.140.0/22
185.246.240.0/22
185.252.108.0/22
185.252.204.0/22
216.25.0.0/22
Signature Algorithm: sha256WithRSAEncryption
68:6b:b7:3a:3c:a7:e0:ce:27:02:31:1a:96:41:30:d0:06:50:
05:4f:2b:ff:91:28:c6:84:e7:a0:96:75:7b:20:73:03:f5:d3:
ba:8d:38:21:5f:8d:76:b5:15:70:01:59:16:9b:df:91:10:c7:
9c:ba:1e:34:d8:b3:78:dd:32:13:67:19:5e:1f:01:16:7d:0c:
53:ac:ea:66:82:d6:3c:cf:48:ab:df:c9:99:06:ec:22:7f:d0:
15:1a:22:26:61:c8:a9:52:07:20:2c:ef:46:8c:13:c0:2a:85:
09:c4:c5:cc:46:d2:30:c1:d6:90:de:52:19:88:fd:b4:67:1c:
ee:fe:b8:ca:24:7f:45:00:56:bc:70:35:28:f1:a3:ef:2c:89:
25:06:2e:af:99:d3:ce:11:4b:4d:0e:01:7f:67:95:e8:61:a1:
e7:9c:60:72:d7:48:97:c0:9a:21:7e:f1:74:5d:67:09:b7:a2:
f8:e3:18:00:dd:f4:12:46:89:cc:3d:91:c5:03:53:dd:da:07:
b9:11:19:a2:1c:f4:fd:fd:24:00:2e:9f:f3:25:66:61:1b:31:
50:11:4d:84:67:17:99:de:a0:7a:b5:42:43:bb:50:f1:b6:8e:
4a:42:71:a6:0a:56:41:0f:23:d9:2c:a3:25:20:c6:3b:b9:55:
77:a8:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:18:38 2026 by rpki-client