Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4xKqjsrahG0fWHXSB-lctTdLg-M.roa
File: 4xKqjsrahG0fWHXSB-lctTdLg-M.roa (raw, json)
Hash identifier: 5Wn8+sWQJfylfb5qMkJSWI+0p7g455jpqUk2yWGLUh4=
Subject key identifier: E3:12:AA:8E:CA:DA:84:6D:1F:58:75:D2:07:E9:5C:B5:37:4B:83:E3
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019E1CDAB97A99478DB24826D894A3855FE1
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4xKqjsrahG0fWHXSB-lctTdLg-M.roa
Signing time: Tue 12 May 2026 15:42:36 +0000
ROA not before: Tue 12 May 2026 15:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.85.191.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.25.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:da:b9:7a:99:47:8d:b2:48:26:d8:94:a3:85:5f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 12 15:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e312aa8ecada846d1f5875d207e95cb5374b83e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:4e:ab:75:33:22:4c:54:b2:d8:fd:01:cd:
c3:5f:6e:27:9c:c6:89:82:3e:54:03:57:c1:ff:63:
0e:4f:b3:63:85:da:b0:d9:8e:17:f7:f0:5b:57:8a:
32:c2:a4:96:87:fb:d2:16:2a:39:50:2b:37:b9:26:
0a:85:2c:4c:28:a1:05:00:b5:08:55:af:76:f9:e8:
1e:f3:b8:55:30:36:09:62:79:fe:14:41:7c:94:b1:
c2:70:c8:3a:a8:7b:d0:03:a9:98:6a:75:7d:e4:8f:
05:a4:75:e1:4a:c3:3d:76:f5:11:8c:1c:f2:50:58:
09:22:a4:4a:e4:30:66:2e:d4:ba:bf:be:b5:dd:50:
da:50:b8:70:0f:1b:8b:b1:f5:8c:f5:ef:e3:ef:4a:
b9:e6:65:08:fd:ed:ff:01:6f:87:8e:3a:0c:85:d4:
a5:93:be:f6:46:dd:f7:9a:a2:7f:36:8f:69:8e:88:
36:47:f4:c5:fb:34:ac:ba:09:87:3b:c0:a5:d4:f2:
b2:2f:3d:cf:f0:51:e3:89:dc:3e:c7:68:16:61:af:
c3:31:54:1e:31:a0:4b:a9:3f:ca:a8:10:60:25:24:
16:4f:96:d7:8e:bc:ad:1b:ef:86:ef:a2:b4:d7:28:
b0:70:bb:cf:6a:61:21:83:5f:8d:a5:36:95:69:7a:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:AA:8E:CA:DA:84:6D:1F:58:75:D2:07:E9:5C:B5:37:4B:83:E3
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4xKqjsrahG0fWHXSB-lctTdLg-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.191.0/24
185.86.13.0/24
185.86.164.0/22
185.87.24.0-185.87.26.255
185.87.121.0-185.87.123.255
185.119.83.0/24
185.141.32.0/24
Signature Algorithm: sha256WithRSAEncryption
95:31:e3:f7:a3:75:4b:c5:cf:af:dd:44:92:99:f3:b8:af:85:
ce:4d:43:7b:05:b2:d5:e3:70:10:5f:f3:96:85:11:b5:f5:76:
ac:39:6a:df:d1:b0:fa:63:3b:12:c6:dd:36:66:87:63:62:ab:
8b:b8:db:93:17:cc:1f:35:0a:4a:25:c3:2f:d7:37:e2:61:a8:
ec:ed:d4:de:f1:84:92:c7:4e:8f:0d:c1:fe:35:0a:27:14:11:
d1:1d:07:70:26:da:c8:bd:15:90:ee:1c:36:67:48:f8:a8:33:
08:91:27:5c:bb:1c:a7:8b:19:9d:3a:71:f6:04:a6:49:78:10:
31:30:d6:55:51:12:95:6a:8f:7f:e3:61:9f:17:18:97:c2:72:
c3:b1:ca:c6:d3:c8:ea:e6:de:06:59:55:31:67:ac:00:b8:c6:
bd:23:ae:e2:e5:7f:70:e0:c0:2a:70:c9:07:6d:70:a0:a1:1f:
73:5d:3f:75:cb:7c:2d:d1:45:67:db:e9:96:80:14:9b:4d:b6:
4d:d9:ea:53:d6:d5:ec:12:3c:6a:5c:5c:f6:84:c8:b6:64:51:
bb:85:ab:3f:ac:ff:25:9d:29:8e:c1:91:28:3d:f1:8e:4b:65:
b6:68:89:72:61:3b:00:95:ce:04:77:0c:bd:ef:1a:82:e5:15:
37:7f:eb:02
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZ4c2rl6mUeNskgm2JSjhV/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwNTEyMTU0MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzEyYWE4ZWNhZGE4NDZkMWY1ODc1ZDIwN2U5NWNiNTM3NGI4M2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZNOq3UzIkxUstj9Ac3DX24nnMaJ
gj5UA1fB/2MOT7Njhdqw2Y4X9/BbV4oywqSWh/vSFio5UCs3uSYKhSxMKKEFALUI
Va92+ege87hVMDYJYnn+FEF8lLHCcMg6qHvQA6mYanV95I8FpHXhSsM9dvURjBzy
UFgJIqRK5DBmLtS6v7613VDaULhwDxuLsfWM9e/j70q55mUI/e3/AW+HjjoMhdSl
k772Rt33mqJ/No9pjog2R/TF+zSsugmHO8Cl1PKyLz3P8FHjidw+x2gWYa/DMVQe
MaBLqT/KqBBgJSQWT5bXjrytG++G76K01yiwcLvPamEhg1+NpTaVaXpqOwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFOMSqo7K2oRtH1h10gfpXLU3S4PjMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvNHhLcWpzcmFoRzBmV0hYU0ItbGN0VGRMZy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAuVW/AwQA
uVYNAwQCuVakMAwDBAO5VxgDBAC5VxowDAMEALlXeQMEArlXeAMEALl3UwMEALmN
IDANBgkqhkiG9w0BAQsFAAOCAQEAlTHj96N1S8XPr91EkpnzuK+Fzk1DewWy1eNw
EF/zloURtfV2rDlq39Gw+mM7EsbdNmaHY2Kri7jbkxfMHzUKSiXDL9c34mGo7O3U
3vGEksdOjw3B/jUKJxQR0R0HcCbayL0VkO4cNmdI+KgzCJEnXLscp4sZnTpx9gSm
SXgQMTDWVVESlWqPf+NhnxcYl8Jyw7HKxtPI6ubeBllVMWesALjGvSOu4uV/cODA
KnDJB21woKEfc10/dct8LdFFZ9vploAUm022TdnqU9bV7BI8alxc9oTItmRRu4Wr
P6z/JZ0pjsGRKD3xjktltmiJcmE7AJXOBHcMve8aguUVN3/rAg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:25 2026 by rpki-client