Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/xJY_AM5c5mqbzDMlBNgNsWz_lug.roa
File: xJY_AM5c5mqbzDMlBNgNsWz_lug.roa (raw, json)
Hash identifier: B551H0yQy3AcP1JDauGu2ZmstUvG2dDmNnX6HF0awWo=
Subject key identifier: C4:96:3F:00:CE:5C:E6:6A:9B:CC:33:25:04:D8:0D:B1:6C:FF:96:E8
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019E161B1FB3EF5A38CA3E2D959C0F635F2D
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/xJY_AM5c5mqbzDMlBNgNsWz_lug.roa
Signing time: Mon 11 May 2026 08:15:36 +0000
ROA not before: Mon 11 May 2026 08:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.63.33.0/24 maxlen: 24
185.63.34.0/24 maxlen: 24
185.63.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:1b:1f:b3:ef:5a:38:ca:3e:2d:95:9c:0f:63:5f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: May 11 08:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4963f00ce5ce66a9bcc332504d80db16cff96e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:52:17:df:ef:7f:7d:d4:c9:60:9f:fa:ce:
8d:de:12:93:ad:79:48:c6:a0:40:2c:60:34:bb:79:
eb:f9:21:05:63:8c:8f:2c:cc:2b:00:15:fa:51:08:
a4:c0:79:1c:8d:d4:46:c2:1d:1b:42:d4:ee:e2:a0:
af:8f:fa:1a:3e:8b:84:8e:a1:00:b7:51:84:b6:37:
9e:8f:a1:4d:97:e7:18:ea:00:44:87:1e:54:1d:34:
72:28:d5:e3:15:0c:95:22:a2:ce:f6:d8:5a:73:e8:
02:15:3c:f1:f8:68:b7:f5:b5:83:07:ea:b4:51:c6:
75:bb:d1:d8:19:2e:6c:b5:33:ac:27:81:ee:28:7f:
bb:23:06:f7:a6:19:d1:a4:50:44:04:bd:99:cc:1c:
34:44:80:d0:23:ac:5e:a6:fa:0b:3d:db:9f:47:7b:
5d:1f:f8:f6:87:e5:d9:50:9f:f8:62:27:d9:73:01:
24:7a:d5:a7:0f:10:70:28:e1:e5:5b:36:b2:84:80:
db:c3:6b:61:10:34:b0:15:7c:5c:26:91:67:08:f7:
80:ac:a1:6f:8e:40:36:39:cc:c3:53:eb:94:eb:f9:
fd:8b:a1:8a:5b:00:da:1f:68:55:12:ec:2b:cc:f8:
9f:1c:01:12:0f:36:99:4b:69:40:6c:8a:dd:ec:74:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:3F:00:CE:5C:E6:6A:9B:CC:33:25:04:D8:0D:B1:6C:FF:96:E8
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/xJY_AM5c5mqbzDMlBNgNsWz_lug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0-185.63.35.255
Signature Algorithm: sha256WithRSAEncryption
62:66:db:0b:db:5d:da:ca:78:d3:56:2f:7d:b0:86:bb:3f:5f:
37:7d:4d:46:2e:22:d3:3c:75:95:82:2e:af:7f:81:3e:cc:f0:
83:32:6f:1a:f1:b0:37:a1:c8:9b:85:27:23:a9:5d:9b:ec:3e:
fa:d3:fc:f7:5e:27:07:49:6e:eb:9a:48:dd:10:b1:18:90:96:
59:b9:0d:e6:05:03:1b:cc:35:1f:15:c5:22:30:d3:17:87:82:
81:ba:6f:83:2f:7f:b3:11:86:47:c2:df:03:53:a4:c6:39:8f:
99:62:c0:e3:de:c0:23:b6:35:55:91:d4:5e:5e:68:cd:5b:a7:
6b:02:3d:ad:29:b5:31:68:13:c3:c3:f3:cb:c9:39:cf:e6:8f:
fe:ed:53:02:86:d7:0d:d6:8b:34:6c:1c:74:19:a2:af:63:1e:
64:12:99:fe:13:13:1e:32:bb:44:79:ee:af:c9:2a:14:82:18:
b2:1a:21:3a:76:c3:97:28:e8:80:70:1d:a7:86:e4:10:6e:15:
a0:09:7e:f0:fb:6d:b8:62:d4:72:81:26:e4:8b:a5:66:1c:a0:
9f:39:bc:40:e8:b4:36:c2:18:91:fa:f1:96:f8:d8:d3:10:89:
17:4e:de:5a:97:43:b7:5b:5b:ca:46:96:bb:b7:cb:af:a3:8f:
23:c1:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:19 2026 by rpki-client