Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xmfSnvRXYD3imV0Uar9V5pMe-J4.roa
File: xmfSnvRXYD3imV0Uar9V5pMe-J4.roa (raw, json)
Hash identifier: O3UR+wfUjxQy2DQOv5AEkIE0rjXF4bVzMH3075JaJ7Y=
Subject key identifier: C6:67:D2:9E:F4:57:60:3D:E2:99:5D:14:6A:BF:55:E6:93:1E:F8:9E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F5F33E4FC6067E033F5F0C7B274678F5B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xmfSnvRXYD3imV0Uar9V5pMe-J4.roa
Signing time: Tue 14 Jul 2026 05:57:44 +0000
ROA not before: Tue 14 Jul 2026 05:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273267
IP address blocks: 153.51.244.0/22 maxlen: 22
153.51.244.0/23 maxlen: 23
153.51.244.0/24 maxlen: 24
153.51.245.0/24 maxlen: 24
153.51.246.0/23 maxlen: 23
153.51.246.0/24 maxlen: 24
153.51.247.0/24 maxlen: 24
185.225.246.0/23 maxlen: 23
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:33:e4:fc:60:67:e0:33:f5:f0:c7:b2:74:67:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 14 05:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c667d29ef457603de2995d146abf55e6931ef89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:3c:fd:42:5d:a4:37:6f:d6:b7:57:cf:8a:
77:2e:7a:9a:cb:9f:64:62:28:bf:30:34:7c:5a:26:
89:05:58:7f:dc:3c:66:48:df:7d:ab:9f:44:5e:32:
b3:7f:5c:13:6a:90:07:8c:d1:42:ce:14:3d:9c:93:
fd:51:9b:89:c0:1b:05:5e:e9:cb:5b:a6:ce:84:2e:
e7:4e:a4:34:85:27:4e:40:03:3b:c8:4d:af:61:be:
88:b7:6f:54:48:35:93:6a:f5:fc:51:e7:ce:47:7c:
c7:35:93:cc:30:78:fb:31:a5:0d:64:8c:50:d8:6c:
1b:fe:95:06:62:23:97:d7:8a:77:20:1d:ee:f6:c6:
ed:ff:05:4d:d1:59:c4:54:42:bd:31:c6:f1:a8:8c:
04:8a:b4:61:07:d4:4d:4b:c8:a1:15:3a:5d:a1:6b:
cc:15:ba:b9:d1:98:99:4f:cc:d6:79:44:c9:9d:44:
64:21:e9:76:36:35:ed:a7:34:9d:a6:a0:fd:b2:30:
a5:fe:77:73:c5:bc:89:b4:44:7a:34:2d:40:cc:2f:
d0:e2:31:8a:ee:66:4a:9a:46:fc:e1:ec:b7:3e:bc:
48:12:23:04:74:95:91:a2:d6:2c:99:68:68:c9:91:
38:1e:ed:79:cb:26:0c:2d:e0:f4:cc:2c:62:3a:4f:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:67:D2:9E:F4:57:60:3D:E2:99:5D:14:6A:BF:55:E6:93:1E:F8:9E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xmfSnvRXYD3imV0Uar9V5pMe-J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.244.0/22
185.225.246.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:b3:59:0a:86:30:98:88:b6:70:40:d5:5b:ad:ae:2e:02:02:
8f:64:91:91:6b:2c:a7:a2:7a:79:be:25:0c:b3:9e:86:81:fc:
a4:12:ea:e6:a6:04:73:83:dc:e0:b8:d3:71:df:1b:4b:40:f5:
15:da:2e:7b:ed:c3:00:df:61:cb:9c:f4:97:c9:ec:85:75:77:
8c:53:a9:be:fb:06:ee:7d:fb:cf:86:b6:b2:f4:5b:c4:f4:0a:
09:e6:db:3f:96:df:97:dd:a1:e1:d3:1b:03:4b:c6:17:a1:34:
47:59:7e:a0:fe:a7:21:af:1b:1a:55:23:5e:e5:2a:b3:0f:68:
de:2a:d4:b8:76:8a:f8:3e:e1:4d:da:7a:d2:64:73:4d:db:54:
eb:d2:f9:d5:d7:8e:9c:cf:2e:cd:56:2a:f0:8c:30:08:84:b8:
ab:ba:b9:d4:8f:42:ec:91:4d:c3:cd:56:9e:ca:30:df:55:c3:
6a:5f:58:aa:a8:65:fc:83:98:89:9f:2e:f1:c4:f6:11:7c:2f:
e6:1f:67:ac:a4:b7:3e:18:18:eb:d9:31:76:9b:a4:27:14:34:
b0:33:3b:79:92:b5:cc:a4:c7:78:96:e9:9d:ac:c6:0b:4f:5d:
7a:a2:8a:4c:37:99:c7:cd:a7:8f:ec:fd:68:c7:aa:74:9c:9c:
47:8e:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:21 2026 by rpki-client