Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/X18nP2YXusglmmwBliQYUGVmd64.roa
File: X18nP2YXusglmmwBliQYUGVmd64.roa (raw, json)
Hash identifier: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=
Subject key identifier: 5F:5F:27:3F:66:17:BA:C8:25:9A:6C:01:96:24:18:50:65:66:77:AE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019E02602953BCE4110BC7325316B89F7445
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/X18nP2YXusglmmwBliQYUGVmd64.roa
Signing time: Thu 07 May 2026 12:18:36 +0000
ROA not before: Thu 07 May 2026 12:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 160.20.108.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:60:29:53:bc:e4:11:0b:c7:32:53:16:b8:9f:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 7 12:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f5f273f6617bac8259a6c0196241850656677ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:8e:ec:ed:f7:e1:0a:19:84:98:52:0d:4a:
22:99:75:46:3e:93:04:bd:b2:d7:3b:f6:a3:88:38:
7a:26:68:4b:16:12:d2:88:6f:1b:ba:a0:f2:6b:b1:
d5:05:18:a5:11:27:6d:98:cc:ad:0f:d6:9a:e9:44:
ad:4c:8f:7c:60:b8:3a:5f:cf:b7:e6:f4:d9:77:5c:
6c:99:68:b2:f2:1f:f5:6f:ca:ec:6e:79:90:55:91:
92:7d:1c:b5:0d:b5:11:c4:a0:ae:9c:14:d3:99:05:
5a:a4:d1:6b:20:52:f6:74:af:0a:7f:7a:07:01:31:
41:b5:bb:fc:8f:0c:96:d6:c7:eb:12:cd:1a:06:0a:
53:c1:24:3f:45:15:ff:77:10:85:0a:fe:27:bc:ab:
f4:7f:7b:84:8b:eb:aa:b3:03:cb:ae:b9:f6:2b:a8:
38:15:3b:64:7b:11:98:e8:53:39:f8:c3:22:f1:7e:
3c:6a:e1:49:a2:92:68:29:ca:74:b2:c1:31:ca:91:
b9:01:45:b7:ec:63:97:e3:4f:4e:11:ee:c5:4f:90:
f5:a0:0a:4e:13:c8:d5:e9:bb:45:ea:60:b6:a9:28:
dd:10:37:1f:d0:84:cb:d5:be:db:5b:4b:4b:01:ca:
71:20:8b:31:ce:4d:a0:69:ec:99:7f:32:01:d3:a0:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:27:3F:66:17:BA:C8:25:9A:6C:01:96:24:18:50:65:66:77:AE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/X18nP2YXusglmmwBliQYUGVmd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.108.0/24
185.86.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f9:0f:f9:85:13:66:a9:33:c4:7d:5b:78:2e:b5:bb:dc:68:
36:ba:6e:ba:08:a2:51:a8:de:87:00:5c:60:b0:ca:51:5e:81:
4c:39:1b:f6:61:41:fd:d4:d6:6d:31:b8:61:b1:5c:c5:f0:55:
fb:21:6b:b9:ac:0f:f0:d6:2f:a3:8b:1e:e5:5d:d0:98:ac:96:
a4:34:97:46:9f:7d:57:ff:10:2a:1f:78:0a:73:30:09:51:fe:
ef:bf:4d:ca:17:77:b4:9a:80:c0:36:04:aa:d9:7d:cc:ad:d4:
c6:b8:25:4c:a3:ca:f1:71:ed:b8:b0:e6:cf:db:ea:3c:a6:a0:
e8:0e:f6:9a:8a:14:ea:d0:a3:83:5e:76:59:3e:20:01:33:64:
a1:f7:a7:83:3c:a3:5b:86:91:a1:e2:c8:b8:33:c5:ab:26:c5:
21:fe:bb:c6:ca:ee:b4:81:7c:f3:bb:9d:20:20:4f:ed:c4:33:
a7:48:e9:ef:6d:ea:e6:c5:33:3a:88:4a:ef:ea:61:28:a2:85:
5e:93:ae:35:73:99:c5:54:86:d2:ba:87:7e:c9:4e:70:3d:28:
e8:bb:55:e2:47:68:67:db:16:39:63:1c:9b:4b:b0:72:03:81:
5c:42:3b:e0:a3:aa:ad:88:a3:b9:cc:16:ec:7c:f0:e8:c6:99:
fc:f5:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:03 2026 by rpki-client