Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xfymiOaGkXDgwwLlqKOQEGSsXN8.roa
File: xfymiOaGkXDgwwLlqKOQEGSsXN8.roa (raw, json)
Hash identifier: LUf079Ipr2cYBKWBVKbcSJUL/8hC//aGHxyeNjrF6jE=
Subject key identifier: C5:FC:A6:88:E6:86:91:70:E0:C3:02:E5:A8:A3:90:10:64:AC:5C:DF
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019F6B832C9B9FF5F23D3994F3DEF76857B4
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xfymiOaGkXDgwwLlqKOQEGSsXN8.roa
Signing time: Thu 16 Jul 2026 15:19:46 +0000
ROA not before: Thu 16 Jul 2026 15:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206216
IP address blocks: 185.147.157.0/24 maxlen: 24
185.147.159.0/24 maxlen: 24
185.214.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:83:2c:9b:9f:f5:f2:3d:39:94:f3:de:f7:68:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 16 15:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5fca688e6869170e0c302e5a8a3901064ac5cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:e5:0c:9d:ef:8a:83:3b:84:45:cd:0f:9b:
8b:6e:ab:91:ff:13:ec:ab:22:e2:b9:7b:63:eb:92:
51:c2:9a:0b:b6:b4:8b:96:5a:42:cf:29:1d:3d:12:
81:7b:90:a0:b3:e0:0a:a6:89:37:67:a8:91:23:af:
1e:fc:fe:26:95:7a:50:ce:c8:06:f5:36:40:af:e2:
cf:e1:de:c5:a3:ac:60:8f:60:a4:c5:c5:1f:2d:91:
ae:df:dd:53:7a:71:ce:31:5a:de:ac:31:3f:df:4a:
df:2d:a9:df:20:84:10:31:8b:c6:80:98:f2:cf:f3:
1f:77:3e:71:d7:71:fd:19:d0:3f:38:17:d1:56:d7:
28:d3:20:d4:9d:16:46:46:f1:b4:3f:37:8a:b5:b3:
54:9a:9a:76:63:3a:1a:50:6f:ca:44:f9:26:68:b2:
ac:41:e1:1c:4c:7b:63:0c:f2:59:18:2b:eb:b6:21:
cd:0f:cd:1c:38:25:7a:c0:43:86:4d:c9:11:bf:ff:
a6:1c:6b:e0:2d:04:fa:ef:9d:ed:5e:fd:a7:4d:3b:
06:50:84:92:4b:fc:6a:d9:f0:a7:76:4c:1b:31:9b:
13:7c:e3:b9:fa:87:0d:d2:71:f3:de:f3:03:8b:b3:
27:94:a8:24:31:4c:bb:69:c4:f3:85:23:42:96:30:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FC:A6:88:E6:86:91:70:E0:C3:02:E5:A8:A3:90:10:64:AC:5C:DF
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xfymiOaGkXDgwwLlqKOQEGSsXN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.157.0/24
185.147.159.0/24
185.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a4:05:40:de:08:5f:a5:09:32:c6:be:5f:ed:91:57:6c:78:
a6:e9:a8:36:7c:b4:59:40:59:f2:96:c2:d3:51:66:22:86:0b:
07:43:70:d5:03:ba:09:d5:b8:df:ad:1d:41:bb:09:41:0a:54:
f0:00:6b:f2:6e:96:5c:2f:f7:f7:0e:38:0d:2f:d1:c9:30:4a:
8c:9b:23:17:3f:44:38:8a:b6:19:9b:15:08:fd:9b:6b:6f:c3:
df:a9:1c:2c:dc:43:01:5f:52:75:33:c0:79:b8:21:30:a5:a4:
da:aa:10:a7:72:8b:05:2a:dd:e6:90:72:8c:69:e6:b6:6a:5f:
b3:13:30:ee:83:fc:9e:f0:6a:a9:cd:68:04:28:61:b3:ad:36:
35:9e:bc:c2:f7:d1:cc:2d:9f:c5:57:51:bf:b8:35:f3:d8:d0:
53:50:9b:99:c9:c6:4c:0e:92:48:35:94:1d:1e:11:74:ef:8e:
72:86:45:ae:9b:0d:bd:fb:a3:36:38:ae:d2:1c:c0:82:a4:23:
3e:4e:fb:08:70:8e:86:ea:55:6d:05:e9:91:04:d8:e6:2a:e4:
b0:6e:ce:8c:c4:2f:49:59:d3:d9:bd:dd:cd:6f:94:eb:70:cf:
8f:0d:ce:87:ab:e6:2b:ba:ee:25:6d:43:29:a4:62:74:6b:85:
1c:da:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:59 2026 by rpki-client