Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/XGylWLMmuf-6cyXPIHTSqm3GCd8.roa
File: XGylWLMmuf-6cyXPIHTSqm3GCd8.roa (raw, json)
Hash identifier: Bd9s12c8P6Pe+DYxSBmdpuoMDBh5umpoBqgkM4LDkJw=
Subject key identifier: 5C:6C:A5:58:B3:26:B9:FF:BA:73:25:CF:20:74:D2:AA:6D:C6:09:DF
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F236913D988412ACBD5EAA7ED89C0005B
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/XGylWLMmuf-6cyXPIHTSqm3GCd8.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208058
IP address blocks: 212.53.139.0/24 maxlen: 24
212.53.141.0/24 maxlen: 24
212.53.143.0/24 maxlen: 24
212.53.146.0/24 maxlen: 24
212.53.152.0/24 maxlen: 24
212.53.154.0/24 maxlen: 24
212.53.161.0/24 maxlen: 24
212.53.164.0/24 maxlen: 24
212.53.172.0/24 maxlen: 24
212.53.174.0/24 maxlen: 24
212.53.194.0/24 maxlen: 24
212.53.196.0/24 maxlen: 24
212.53.204.0/24 maxlen: 24
2a00:1f78:f001::/48 maxlen: 48
2a00:1f78:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:d9:88:41:2a:cb:d5:ea:a7:ed:89:c0:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c6ca558b326b9ffba7325cf2074d2aa6dc609df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:ab:3d:07:07:00:44:89:45:64:42:67:82:
47:05:f6:d6:da:50:7f:c9:37:12:24:a8:cf:44:f9:
0b:a5:75:59:45:7b:8d:eb:9e:c8:e1:1e:0c:0c:1f:
b9:58:ba:03:3d:82:8e:99:89:60:71:7a:e6:b5:51:
ef:66:41:cf:5c:1c:22:06:ad:44:bc:bf:33:ef:34:
8d:62:6e:0a:d1:85:a9:09:3c:c3:a4:3b:50:f4:d9:
ce:1f:1b:97:87:ca:a5:8b:1e:9c:d4:b6:b7:3b:2c:
eb:2f:eb:91:9b:71:69:11:26:0f:c5:11:f8:e5:c9:
07:0b:d7:fe:a2:f9:1a:db:54:b0:de:c8:b1:b8:ce:
27:6c:70:8e:46:ee:c6:03:1c:dc:b3:91:a6:dd:15:
76:97:c9:6b:54:b3:23:ed:1b:99:ba:52:7e:8f:cc:
89:3f:b8:b2:05:0f:45:ce:df:fd:00:25:9f:84:ca:
6d:1f:bc:2f:83:cd:37:4e:1e:db:6a:dd:a0:7a:a1:
d9:e8:08:51:8d:98:c9:c8:5a:ad:0f:ec:44:37:40:
30:c4:70:c8:a8:1d:d5:37:a8:9f:a1:56:e5:e7:12:
59:bc:ea:6d:a3:a4:0c:e4:7a:95:54:7a:57:ec:b3:
39:aa:fc:c0:8e:fd:03:79:38:b5:ad:04:40:7d:45:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:A5:58:B3:26:B9:FF:BA:73:25:CF:20:74:D2:AA:6D:C6:09:DF
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/XGylWLMmuf-6cyXPIHTSqm3GCd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.53.139.0/24
212.53.141.0/24
212.53.143.0/24
212.53.146.0/24
212.53.152.0/24
212.53.154.0/24
212.53.161.0/24
212.53.164.0/24
212.53.172.0/24
212.53.174.0/24
212.53.194.0/24
212.53.196.0/24
212.53.204.0/24
IPv6:
2a00:1f78:f001::/48
2a00:1f78:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
0a:03:fb:36:54:8a:8c:cb:da:e8:fc:80:41:c3:bf:f1:64:cb:
1c:fb:f7:68:63:c8:6f:ce:b8:18:d7:3d:14:7b:bc:a9:76:7e:
b5:ff:3c:2a:1c:6f:4c:4f:ec:b4:ab:6d:04:cd:36:2b:2d:e2:
cb:29:79:ab:4f:d9:64:c5:9d:e0:18:4f:ea:72:10:17:be:0c:
1e:4f:d1:af:9d:e0:e0:1e:e3:3c:3d:64:38:28:5e:f6:4d:c3:
24:f4:21:4d:fe:5d:93:0f:97:96:0b:44:33:ab:3b:8f:1e:48:
5f:e3:da:bf:37:d7:82:ac:0c:58:00:26:1d:7a:71:c9:48:69:
cf:35:8a:e0:af:34:4f:0c:19:74:9f:ef:9d:97:bf:db:46:26:
41:4e:3a:e8:b4:62:20:49:b6:78:ff:cb:68:ac:51:1e:f3:ac:
74:c6:a5:1c:f5:ad:66:4f:72:e9:a5:9b:16:16:87:a8:dd:4b:
ac:83:30:e3:e8:ca:0e:f2:ca:8d:30:cc:c8:f8:e1:91:e0:7c:
4e:39:e6:85:be:0b:3a:27:2c:77:1d:c8:27:65:f9:63:9e:45:
51:9d:af:1d:61:c3:5c:b3:1c:b6:fb:6e:2e:4f:fe:ae:35:6d:
8f:c6:fa:c1:63:40:72:7a:b8:6e:ad:91:d0:cc:fc:6d:6d:22:
52:a1:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:01 2026 by rpki-client