Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa
File: xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa (raw, json)
Hash identifier: +oo5HVPSdE5F0vnX0GJbLJAscp8MlST1lOFf6d/1Nz4=
Subject key identifier: C6:E6:04:A5:16:80:FC:16:D5:BD:C4:4C:C2:3E:86:17:C7:73:16:D9
Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Certificate serial: 019B79EC2BED10E8A4D5E1E0CB192A285DB4
Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa
Signing time: Thu 01 Jan 2026 14:17:59 +0000
ROA not before: Thu 01 Jan 2026 14:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44291
IP address blocks: 79.142.192.0/20 maxlen: 20
79.142.192.0/23 maxlen: 23
79.142.194.0/23 maxlen: 23
79.142.196.0/23 maxlen: 23
79.142.196.0/24 maxlen: 24
79.142.198.0/24 maxlen: 24
79.142.200.0/21 maxlen: 21
79.142.200.0/22 maxlen: 22
79.142.203.0/24 maxlen: 24
79.142.206.0/23 maxlen: 23
185.70.16.0/22 maxlen: 22
185.70.17.0/24 maxlen: 24
185.70.18.0/24 maxlen: 24
217.73.80.0/20 maxlen: 20
2a03:8500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:2b:ed:10:e8:a4:d5:e1:e0:cb:19:2a:28:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Validity
Not Before: Jan 1 14:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6e604a51680fc16d5bdc44cc23e8617c77316d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:e2:2a:8c:cb:dd:32:e1:5b:8e:02:ee:e4:
12:5c:1e:67:3e:e5:84:32:86:13:20:cc:4a:29:7a:
5d:0c:53:2d:0a:b3:46:44:ae:cf:1e:1c:85:90:d0:
e8:fd:5b:c2:55:81:57:4b:c2:b2:f4:19:bc:c6:b6:
8f:67:4b:f2:cc:02:15:1d:85:d5:fa:e5:50:0f:75:
3c:dd:aa:61:8d:65:e5:6b:7b:15:b5:f3:1e:0b:d6:
db:e2:15:12:71:bd:b4:23:f3:8c:35:f3:31:36:b4:
ab:95:e4:69:ea:4c:de:c2:52:ef:77:09:88:f1:58:
c2:1a:1b:2a:ad:2e:fd:71:96:a7:d6:af:11:b8:09:
53:07:51:5c:69:3f:2c:2c:07:23:dc:b4:77:da:65:
4a:73:35:35:3e:d8:9a:06:9b:72:8f:01:9d:3c:c9:
8b:69:2f:42:09:31:60:53:8b:4e:6a:d3:92:b8:bb:
b1:4a:2d:b4:5c:f3:0b:4b:4e:70:78:62:fc:5f:f2:
9b:d6:0d:f1:12:2b:6b:ca:80:ae:37:b2:2c:47:60:
f5:52:fc:34:50:ab:8f:56:d6:6c:42:50:5b:a6:a9:
26:ef:43:0d:6a:7a:96:d0:d8:22:56:60:61:36:e7:
eb:3d:63:d8:0a:e7:56:c6:84:36:da:d0:99:5f:35:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:04:A5:16:80:FC:16:D5:BD:C4:4C:C2:3E:86:17:C7:73:16:D9
X509v3 Authority Key Identifier:
keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.192.0/20
185.70.16.0/22
217.73.80.0/20
IPv6:
2a03:8500::/32
Signature Algorithm: sha256WithRSAEncryption
64:2e:72:ac:4d:d9:20:4c:77:79:e7:4c:a9:60:53:0f:85:2c:
25:8a:2d:46:33:e1:98:57:18:20:4d:01:fa:e5:3a:7e:a7:5f:
a9:f1:0e:8b:8a:e3:4f:d7:a2:bc:4f:c8:54:56:4c:41:14:4b:
15:59:28:0f:9e:7c:83:81:a8:e6:b0:c0:10:f9:bc:e3:f0:ce:
c5:ac:25:bb:7e:b5:bb:19:e2:8e:44:72:68:e1:3d:ff:1b:b4:
c6:83:8d:47:0f:82:13:66:36:48:39:f9:84:b3:2f:c4:3d:ed:
4b:24:c5:29:ad:49:d9:85:7b:1b:04:56:80:d3:03:81:44:49:
f9:ef:60:ce:cc:23:41:31:5a:34:04:ec:93:e8:e3:43:67:9f:
a6:68:8b:7a:96:fc:13:a8:a6:9c:16:c7:83:9e:e5:d5:09:95:
6c:75:be:c5:70:21:72:d5:2d:82:0e:6a:62:0f:0e:a8:b9:87:
bd:d2:83:de:af:f4:74:9f:74:e0:c6:8a:e6:fb:01:c2:19:2e:
89:f5:4e:d7:f1:d6:0d:10:b9:d4:7d:10:43:42:80:4f:51:d8:
57:f9:4a:87:24:9e:39:24:fc:8a:9a:9b:ec:03:52:f0:19:66:
7f:86:b3:62:ae:b5:ce:46:ff:ca:94:d5:1e:ea:7c:a4:6b:18:
c7:55:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:53 2026 by rpki-client