Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa
File: xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa (raw, json)
Hash identifier: lYAG9LJCT1e4qcqagtD7wUdtWmWH2kRZheOBDzQ9ReE=
Subject key identifier: C6:56:4C:A3:4D:A2:7B:7E:A8:80:9D:1D:67:88:DF:92:BE:BF:12:00
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019F6B82424139ED6996B479419208D0CA0C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa
Signing time: Thu 16 Jul 2026 15:18:46 +0000
ROA not before: Thu 16 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22295
IP address blocks: 185.147.157.0/24 maxlen: 24
185.147.159.0/24 maxlen: 24
185.214.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:82:42:41:39:ed:69:96:b4:79:41:92:08:d0:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 16 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6564ca34da27b7ea8809d1d6788df92bebf1200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:3c:8e:24:27:5e:64:16:90:9e:a1:50:e6:
66:5b:af:fb:8c:9b:67:8f:4a:67:19:d0:c0:00:0f:
38:ca:1d:a3:b6:fb:a2:2e:fd:7a:8d:de:ae:34:28:
e1:84:1e:89:33:01:ed:e3:1f:42:41:69:ba:d1:f9:
ae:cd:ff:4f:9e:fe:1d:3e:97:75:0a:dd:b3:6b:88:
74:75:a9:69:12:81:82:6f:fc:2f:43:6c:28:9d:ec:
d6:25:15:b5:ae:08:24:9d:5e:58:ae:69:57:c4:e2:
20:56:23:85:33:04:4a:e3:3f:14:5b:23:41:2b:00:
55:85:84:cb:73:8c:23:bb:36:77:ad:5e:9a:5b:b2:
23:57:e5:a4:68:48:ae:49:88:3c:82:a6:6d:9a:5e:
ab:e9:61:3e:ec:7d:5f:0b:d5:01:ea:31:36:b2:7a:
20:06:39:9a:03:bf:c5:15:f5:53:43:81:ac:76:6b:
ff:17:74:99:24:13:17:2f:f0:89:68:69:bc:d4:2f:
be:41:85:4a:8e:10:a6:21:95:81:6e:93:98:50:fd:
82:e2:ad:b0:93:d4:d1:c7:3d:b4:31:8d:64:94:ba:
aa:d1:aa:30:52:3e:0a:f6:36:f4:fe:12:14:f3:ad:
e9:92:4e:7e:56:b9:6b:fd:0d:d3:03:09:1f:8a:09:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:4C:A3:4D:A2:7B:7E:A8:80:9D:1D:67:88:DF:92:BE:BF:12:00
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.157.0/24
185.147.159.0/24
185.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1b:bd:de:2d:ae:0a:c4:68:26:1b:93:1d:c2:73:a5:54:fa:
a8:c1:9b:ed:2a:08:64:33:54:53:99:64:5d:60:51:12:cc:16:
01:58:b8:3b:88:80:b2:45:e7:37:10:f1:df:63:3d:b9:51:b0:
d6:62:56:fd:74:37:22:3d:d5:b2:d0:87:7c:7d:28:12:d9:1f:
ee:ce:c5:59:fe:83:bc:e3:c6:5c:d1:25:4e:e2:02:ff:0f:dd:
52:e3:1c:8f:b7:03:be:03:47:95:89:05:cb:66:f2:96:d3:09:
9b:f9:ce:19:3c:24:c1:c7:03:15:05:37:c6:c1:3b:43:69:1e:
37:6b:79:df:f6:c3:3c:4f:4d:59:d7:95:05:51:a7:d1:7b:91:
d2:73:f4:87:ba:21:30:b8:f0:4e:7b:73:f0:f3:88:2f:0f:a2:
a6:d1:bb:f1:8f:02:59:88:a4:60:00:d0:b0:a0:e7:7b:47:2c:
b9:55:9c:ab:d2:2a:52:0d:9b:4f:0a:ae:5c:36:66:87:7d:de:
80:70:88:44:24:9d:bd:1f:70:29:de:e2:6f:c7:bc:d4:c2:38:
7b:07:38:cd:5c:ad:90:5c:5f:47:6d:28:54:99:47:39:f7:87:
b7:b0:84:04:52:69:db:3b:59:3a:29:ae:5e:6c:db:ee:5f:7e:
e2:46:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:54 2026 by rpki-client