Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/xBbmUNut2X7Nbu9MrCmvtOkNLsc.roa
File: xBbmUNut2X7Nbu9MrCmvtOkNLsc.roa (raw, json)
Hash identifier: kzlztlWSCmlrYg8BvRuHwSgxicW8qhydqsndoVqEW8A=
Subject key identifier: C4:16:E6:50:DB:AD:D9:7E:CD:6E:EF:4C:AC:29:AF:B4:E9:0D:2E:C7
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019FB7F689B85906AED629ED15C71C71BA0E
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/xBbmUNut2X7Nbu9MrCmvtOkNLsc.roa
Signing time: Fri 31 Jul 2026 11:36:55 +0000
ROA not before: Fri 31 Jul 2026 11:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 185.67.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:f6:89:b8:59:06:ae:d6:29:ed:15:c7:1c:71:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jul 31 11:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c416e650dbadd97ecd6eef4cac29afb4e90d2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:51:d7:e5:b0:e8:4d:78:d5:53:07:6e:17:
29:d7:18:79:21:12:02:22:5e:c4:82:b0:81:4a:f8:
a0:85:b4:61:04:17:77:40:a6:d6:7d:bf:9f:6a:b2:
ed:64:fe:ea:51:d7:55:02:16:92:1a:ef:9e:53:2b:
66:98:4f:1d:ef:ea:8c:3a:e1:5f:67:ff:ff:13:2f:
92:c7:89:99:25:c2:9d:08:0e:17:88:cd:84:3d:b4:
1b:dc:41:0e:ba:19:ff:68:18:b2:16:d4:ef:9e:dd:
79:c2:b4:d9:ee:32:6f:48:28:c9:b6:1f:21:4e:df:
de:b3:09:fd:37:42:f9:79:88:84:ae:aa:0d:d0:4e:
83:64:f6:b2:39:0c:1f:69:d9:e6:42:d9:93:90:09:
42:1f:06:e0:89:a4:72:f2:3f:3f:6b:8f:9f:0e:8f:
0a:38:12:e2:52:1f:12:48:8c:a7:67:eb:50:b0:3d:
c2:fe:87:34:56:a7:9f:76:11:c0:05:bd:24:f1:6a:
f3:b7:a9:5c:13:01:28:62:52:9d:10:23:d3:94:55:
39:7f:24:f0:f0:33:0b:b8:74:2a:1f:70:b3:90:a1:
0d:ab:36:6a:1e:14:ef:50:26:3a:37:d2:ce:ee:9d:
5f:96:a6:78:b5:43:7c:bd:d8:08:a5:82:66:ee:7f:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:E6:50:DB:AD:D9:7E:CD:6E:EF:4C:AC:29:AF:B4:E9:0D:2E:C7
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/xBbmUNut2X7Nbu9MrCmvtOkNLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.22.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d6:40:0c:ff:e3:06:a2:89:42:83:14:2d:17:c3:6b:47:80:
f5:3a:3e:4d:89:3f:40:eb:89:26:58:af:8a:8c:8c:df:33:2c:
89:c4:ed:58:83:5e:d3:e5:b2:75:f4:20:c6:02:f4:93:37:8a:
9f:0d:0d:21:f7:c8:8d:51:b0:d4:95:92:15:a8:58:bf:17:71:
d0:69:00:28:ab:bc:e9:86:fc:8f:75:da:ac:75:79:e6:23:60:
76:56:f6:0b:65:e6:d9:9f:40:40:cf:d0:57:e0:02:89:16:ba:
41:d3:2a:b3:7e:5f:a9:ff:aa:74:c7:c9:2f:56:1b:5c:ed:51:
f9:8d:17:cc:da:21:13:62:d8:70:6d:ed:b8:21:34:9a:c7:39:
7c:d3:a2:95:06:96:f2:95:0b:74:f1:e3:f9:b8:c1:31:f0:e4:
6d:85:6a:13:e6:0c:97:f3:6a:fb:4c:ab:43:63:76:44:59:5e:
80:64:a5:81:7f:ce:4e:2a:3a:6c:76:f3:b5:b8:1b:58:6f:c2:
e0:d1:f0:0b:f4:e4:95:51:2a:ad:55:b5:44:6b:dc:72:9a:49:
a9:c0:d0:92:3a:a0:a2:1b:70:ee:9f:a4:8c:6c:05:bd:48:5e:
61:64:37:5c:9c:ad:e2:1f:06:12:71:f9:15:33:c1:a1:7a:c8:
82:f9:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:26:03 2026 by rpki-client