Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/xsSqj2sPhqh0xGD0mFUtMhw97Ns.roa
File: xsSqj2sPhqh0xGD0mFUtMhw97Ns.roa (raw, json)
Hash identifier: YVOyG5Eyfvy9N6XwL6tYrwFleBAjgiXxG5H4rYnGvlg=
Subject key identifier: C6:C4:AA:8F:6B:0F:86:A8:74:C4:60:F4:98:55:2D:32:1C:3D:EC:DB
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019F286657BC965753670B4FD473F091DF44
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/xsSqj2sPhqh0xGD0mFUtMhw97Ns.roa
Signing time: Fri 03 Jul 2026 14:33:43 +0000
ROA not before: Fri 03 Jul 2026 14:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.92.247.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.7.219.0/24 maxlen: 24
185.243.212.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:66:57:bc:96:57:53:67:0b:4f:d4:73:f0:91:df:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jul 3 14:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c4aa8f6b0f86a874c460f498552d321c3decdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:d7:d5:4b:20:39:23:3d:e5:b8:20:9e:e9:
1b:21:ca:72:5b:af:b5:d8:6a:06:a8:73:e0:3c:7d:
04:7b:f1:d7:f7:8c:03:0a:12:cb:c4:d5:e1:da:72:
0d:18:34:2d:ce:f2:32:c0:9c:99:76:5c:85:a0:a3:
ca:13:1e:9f:99:69:a0:81:33:e3:6d:89:69:b6:d1:
87:3e:2e:9a:ea:5d:da:f7:41:e4:70:b6:69:13:f9:
2f:f9:a9:51:2a:60:21:b3:00:bd:e2:be:b6:de:b6:
0e:87:d1:4d:ad:a5:cc:f6:fe:b9:fd:1f:b1:00:98:
36:50:23:6c:d6:20:c7:3b:69:9b:5a:1c:17:54:f7:
98:11:75:c1:e1:54:b6:89:5f:3c:ff:ec:5b:de:87:
57:bd:d0:7a:1a:91:f2:e7:5d:57:cb:c4:69:01:4a:
5c:de:ed:3d:78:fb:b4:14:7a:7a:6a:22:1b:b3:76:
4d:e6:28:a0:c8:d9:e8:21:67:18:c7:c6:a9:af:4c:
a9:cd:6f:f1:c1:63:87:18:2e:42:8d:14:fa:e4:91:
a0:c6:3c:a9:9b:86:b9:7a:7a:ea:1e:88:7f:17:6a:
b4:3f:33:d5:0b:0c:96:40:81:0f:f5:87:ff:1d:b6:
41:50:5b:35:57:2d:bd:a5:c3:dd:4e:6f:cd:40:81:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:AA:8F:6B:0F:86:A8:74:C4:60:F4:98:55:2D:32:1C:3D:EC:DB
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/xsSqj2sPhqh0xGD0mFUtMhw97Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.92.247.0/24
91.132.60.0/23
91.132.63.0/24
93.94.140.0/24
93.94.142.0/24
95.169.196.0/24
95.169.202.0/23
185.1.156.0/24
185.7.219.0/24
185.243.212.0/23
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
24:e7:a2:cd:c8:94:0b:af:54:b6:58:40:c9:35:38:f6:78:4a:
d6:1e:69:d3:2a:71:a0:21:59:5c:ad:06:3c:8a:73:53:e4:6c:
1f:3b:af:28:3e:f3:93:df:bc:69:0f:7a:d4:15:de:b6:29:e3:
a7:e1:84:6c:c5:a9:88:24:fb:b5:29:ef:b7:ad:00:6c:c8:69:
64:c0:63:61:36:fb:ef:e0:bf:93:a9:cb:f5:e4:b3:d3:d1:53:
d8:2b:cd:e5:04:25:56:2f:f9:bd:dd:6b:d9:8b:4f:a8:6d:f0:
52:99:88:23:14:02:d9:ef:eb:a5:18:7d:b7:cc:56:79:c1:da:
85:50:fc:82:67:17:dc:f4:6d:8b:e3:98:91:58:79:0a:49:53:
63:af:b9:97:f6:58:a2:66:e6:d0:59:38:61:0b:4f:d6:7f:51:
6a:94:2b:26:ce:e0:fb:4c:ea:5e:98:c3:54:be:f7:03:9c:ce:
32:ea:1e:7b:69:87:8c:d2:6e:f3:ce:8e:42:da:2b:f4:70:cc:
ed:fd:60:f5:65:b0:3a:92:64:57:b9:65:dc:bc:16:5a:da:d0:
ad:26:00:5f:ae:1c:72:c2:5e:04:91:62:aa:bf:90:41:65:f6:
4e:cf:7d:08:88:50:e0:88:67:24:7a:70:b0:24:d5:48:e0:a6:
ea:c5:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:13 2026 by rpki-client