Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/xknKtTv3aOJfGX6wPs3f3yNuujM.roa
File: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (raw, json)
Hash identifier: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=
Subject key identifier: C6:49:CA:B5:3B:F7:68:E2:5F:19:7E:B0:3E:CD:DF:DF:23:6E:BA:33
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 019F236847F365DC92A62E322BC2A18E70BD
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/xknKtTv3aOJfGX6wPs3f3yNuujM.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206602
IP address blocks: 185.245.144.0/22 maxlen: 22
185.245.144.0/24 maxlen: 24
185.245.145.0/24 maxlen: 24
185.245.146.0/24 maxlen: 24
185.245.147.0/24 maxlen: 24
2a12:bcc0::/29 maxlen: 29
2a12:bcc0:1::/48 maxlen: 48
2a12:bcc0:2::/48 maxlen: 48
2a12:bcc0:101::/48 maxlen: 48
2a12:bcc0:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:47:f3:65:dc:92:a6:2e:32:2b:c2:a1:8e:70:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c649cab53bf768e25f197eb03ecddfdf236eba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:b2:e9:f4:ec:ee:14:de:39:57:88:01:04:
2f:48:50:95:34:15:6d:12:73:cf:fb:a8:5e:e0:87:
c2:53:f3:8e:4f:36:39:73:c9:1e:c3:8f:03:90:5d:
22:b8:37:93:94:8e:51:b9:17:bf:8b:d6:65:9a:0f:
50:88:4e:bc:df:b6:a7:88:7b:c9:00:14:2a:91:92:
49:b7:76:e5:a2:1f:69:97:b4:94:a1:3d:39:c6:ff:
fd:ce:e5:4d:c5:4a:21:22:e8:43:fe:3b:cf:40:06:
00:65:6d:be:2d:2d:43:a0:a8:1d:de:f4:43:e6:aa:
a8:27:2d:ac:78:ac:b1:81:f6:bd:92:e1:f0:0a:57:
b7:b0:fa:fd:f6:80:a1:b1:b8:be:10:65:f4:98:b3:
20:4f:b1:b1:36:02:ec:11:6f:3a:67:58:56:35:37:
d6:91:13:01:67:2b:ae:13:2e:9b:47:28:6c:00:b4:
8e:1f:64:97:a0:a9:91:1d:58:d2:54:22:4a:c9:f2:
4f:60:00:89:d0:7f:f3:5a:59:af:53:3f:a0:5d:02:
3f:8a:8c:05:85:c1:e5:04:dc:2e:b7:40:b9:75:a9:
7c:b6:12:99:af:cb:76:be:12:87:3a:be:ef:91:33:
90:bf:f5:fd:cb:d6:66:92:89:83:b8:62:e7:67:f1:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:CA:B5:3B:F7:68:E2:5F:19:7E:B0:3E:CD:DF:DF:23:6E:BA:33
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/xknKtTv3aOJfGX6wPs3f3yNuujM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.144.0/22
IPv6:
2a12:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:b6:5f:d2:b5:66:40:4a:1b:b9:68:d8:56:96:8c:b6:4a:65:
86:d2:6e:31:c6:ec:61:56:36:5d:c1:05:a8:56:56:31:52:39:
b8:c1:9a:d3:7f:ae:80:e5:a5:97:d6:d3:be:6a:f0:be:45:94:
62:a0:2c:9a:2f:f7:29:5b:c7:cf:8e:f3:a0:74:c8:24:54:64:
cb:cb:3f:17:85:24:b9:57:7c:72:a7:bb:21:e5:f2:db:ec:24:
8d:d2:92:65:ed:60:d5:88:b7:04:39:1f:ed:7d:89:c9:a0:93:
5f:c6:12:9c:b4:1c:ca:41:d0:b6:82:1a:ec:f2:3f:08:4e:4f:
30:4d:d5:41:3b:fc:7b:21:83:cb:08:39:99:b8:e9:09:06:cf:
8b:67:ce:46:3b:d6:06:c1:a9:b1:5f:24:27:27:39:28:0a:81:
0c:5c:a7:4e:e2:08:52:71:6b:3d:f8:40:20:51:04:84:1c:73:
a5:78:2c:96:e9:16:55:89:0b:5c:7d:1e:5a:3a:e6:48:e5:72:
05:e0:d3:37:a8:3f:ce:1a:9c:70:76:fc:af:a9:92:2b:53:4e:
92:70:9d:73:39:52:15:fd:47:83:03:df:81:cd:b3:7e:fe:65:
fe:fc:be:ea:03:54:22:f5:c6:17:48:e9:73:14:1b:e5:53:33:
d0:24:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:18 2026 by rpki-client