Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa
File: xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa (raw, json)
Hash identifier: pKVwIh7ZBo3ZwPW274FG7Z+VnBFjJnW9qgbfx0gaNg8=
Subject key identifier: C4:26:72:39:7D:D4:74:6A:89:E0:DD:07:E2:C5:45:3D:49:6D:33:20
Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Certificate serial: 019E180A6BE604AC2C60E474AB0266A83F7D
Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa
Signing time: Mon 11 May 2026 17:16:36 +0000
ROA not before: Mon 11 May 2026 17:16:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.116.53.0/24 maxlen: 24
185.116.54.0/24 maxlen: 24
185.116.55.0/24 maxlen: 24
2a06:7a40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:0a:6b:e6:04:ac:2c:60:e4:74:ab:02:66:a8:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49
Validity
Not Before: May 11 17:16:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c42672397dd4746a89e0dd07e2c5453d496d3320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:a2:2a:05:4b:52:bc:bd:28:1b:8f:3d:8b:
ea:8c:41:29:8c:7d:5d:e4:25:82:d7:c1:1b:29:ee:
5e:a2:5b:c0:c6:6f:73:fa:b2:e4:b6:b8:39:5c:ec:
6a:df:9e:82:60:79:76:63:aa:ef:60:a0:23:29:03:
de:0c:55:e6:30:76:dc:7c:e0:ab:05:ef:d2:c0:6d:
95:84:d6:4e:bc:d5:d5:0c:c5:db:86:5e:b6:c1:eb:
3f:da:05:6c:7c:7a:7f:1b:01:57:b4:f1:00:5d:f3:
88:ba:49:ea:84:0e:3f:7d:44:9e:93:b1:16:80:f6:
34:ec:88:f8:aa:d3:25:e8:ed:7c:e9:dc:d4:5c:69:
a0:26:9d:42:dd:50:c0:a2:4f:81:36:25:80:2e:d1:
f0:d7:be:72:dc:1b:f5:9e:f6:9e:63:ce:b4:92:3e:
27:f2:97:24:9e:0c:35:05:d9:40:ac:8f:85:f8:fc:
7b:42:66:b3:51:3c:11:44:49:e2:5c:45:e2:c1:90:
3e:21:e5:ec:2f:ce:2a:8a:30:dc:ca:d9:24:68:88:
ea:ee:4d:8a:f4:6f:4b:5a:e3:87:5f:b5:23:22:bc:
81:2d:20:c2:a4:16:23:8f:ed:ac:d2:ef:e9:3f:d2:
c9:53:2c:5a:b8:1d:91:b2:8d:92:73:b9:22:1c:5b:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:72:39:7D:D4:74:6A:89:E0:DD:07:E2:C5:45:3D:49:6D:33:20
X509v3 Authority Key Identifier:
keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/xCZyOX3UdGqJ4N0H4sVFPUltMyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.53.0-185.116.55.255
IPv6:
2a06:7a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
c9:ce:a9:71:fb:97:5e:bf:e7:ab:2f:50:5a:63:d7:a6:f9:7f:
af:16:e0:62:c3:aa:07:02:47:dd:83:71:45:dd:35:17:99:48:
c3:b3:d7:15:c7:31:3b:39:8d:0f:fd:09:16:a8:20:59:d1:73:
ab:08:55:33:59:b6:36:13:78:a2:b8:2c:ca:9b:e0:ac:56:9a:
5f:c3:1b:74:aa:fa:9a:f2:48:c1:e9:53:7e:88:2b:8d:71:13:
5b:ba:de:28:0a:55:cb:96:1f:6e:6b:23:96:be:f1:0c:ff:89:
b6:9c:fb:e1:63:89:29:8f:3d:7f:6c:db:5e:90:c8:e8:23:a9:
ff:72:02:dc:ca:ae:53:89:40:92:12:3a:27:06:f7:55:ba:67:
df:d6:f8:46:3b:a8:d3:8a:dd:38:fc:93:25:06:6e:7c:37:76:
36:e3:5c:d0:2d:cc:de:ba:77:ac:4c:2a:35:5f:01:96:fa:58:
09:3d:34:83:7e:43:78:47:cb:c6:aa:23:aa:11:18:00:d0:9d:
85:be:61:75:63:ba:4d:13:55:10:9f:29:32:12:b6:c4:c6:58:
f2:dd:82:ed:01:84:b6:e0:55:a5:76:42:2f:f0:ef:e2:14:71:
0a:ed:f5:a0:22:7c:e7:1e:d2:74:e1:ce:34:19:47:71:f9:23:
be:2e:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:29 2026 by rpki-client