Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/X9F7v4AXG7bPpuEkvPpmXb8iQng.roa
File: X9F7v4AXG7bPpuEkvPpmXb8iQng.roa (raw, json)
Hash identifier: iwWDtcquwV309wrQ4g5VKIsUxyjbCcTHSbr+j3QYLgw=
Subject key identifier: 5F:D1:7B:BF:80:17:1B:B6:CF:A6:E1:24:BC:FA:66:5D:BF:22:42:78
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019F845F6FD7A760D833B04F5F939F139236
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/X9F7v4AXG7bPpuEkvPpmXb8iQng.roa
Signing time: Tue 21 Jul 2026 11:11:14 +0000
ROA not before: Tue 21 Jul 2026 11:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272104
IP address blocks: 185.227.217.0/24 maxlen: 24
185.227.218.0/23 maxlen: 23
185.227.218.0/24 maxlen: 24
185.227.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:5f:6f:d7:a7:60:d8:33:b0:4f:5f:93:9f:13:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 21 11:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fd17bbf80171bb6cfa6e124bcfa665dbf224278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:58:d6:da:46:96:d2:28:5c:29:50:43:7d:
56:82:dc:78:8c:bf:00:15:d9:24:66:4f:99:d2:42:
c1:52:b2:0c:ee:9c:ad:67:d6:9f:9d:ee:f0:d2:f3:
65:6e:9a:b4:8f:9e:c6:44:f0:c8:35:f9:64:d5:fa:
57:67:2c:62:14:e6:99:82:35:0b:4c:c3:e1:95:ec:
8e:55:02:88:cd:d7:d8:61:d9:68:ab:35:5c:62:b4:
97:9e:bf:3a:e2:fd:53:e7:d9:a6:ea:80:14:76:c9:
e1:5b:db:77:f4:8d:e1:37:8f:47:47:8d:fc:23:ee:
92:98:e7:1a:ff:a8:3d:c1:a1:09:ac:36:ac:4f:81:
23:03:c9:b7:a0:75:51:83:8e:02:71:37:25:df:5b:
f4:97:d0:c8:25:58:1e:e0:96:e4:5e:71:3a:4b:f6:
8a:49:b1:5f:82:73:21:ad:0d:39:19:66:c8:d1:48:
ac:ed:e3:f9:ec:7f:20:7b:68:87:61:83:19:7d:86:
1e:bf:93:29:7b:c5:aa:47:4a:89:2d:c6:4f:a4:07:
57:ca:3e:c6:0a:4f:0d:b9:ed:3e:bd:f3:2b:b5:59:
c3:90:25:75:ed:7b:c3:8b:06:e8:e9:46:c1:7f:8d:
a4:d7:e9:71:46:46:49:68:99:51:f5:71:cb:33:41:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D1:7B:BF:80:17:1B:B6:CF:A6:E1:24:BC:FA:66:5D:BF:22:42:78
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/X9F7v4AXG7bPpuEkvPpmXb8iQng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.217.0-185.227.219.255
Signature Algorithm: sha256WithRSAEncryption
10:bc:b2:e5:ff:55:c2:cf:43:ea:c5:ae:77:8a:08:37:08:fd:
e7:2a:a6:fd:c4:a6:4b:7c:30:92:42:27:1a:39:cc:c4:e5:66:
7b:67:77:93:c3:dd:95:81:92:ad:7c:ba:ba:aa:54:62:0f:06:
ca:83:6c:fc:da:71:ec:a9:7a:12:f0:7a:b2:80:20:66:6a:1e:
b0:ee:94:8c:77:3d:0f:b0:38:4c:5d:cb:2b:5f:af:7e:20:ef:
62:6c:ac:1d:8e:46:6b:fb:6e:9d:05:cd:99:15:5a:62:69:fc:
ae:99:e3:36:52:09:41:9f:bd:fc:e3:f2:ea:f1:b3:f3:3e:69:
fd:b7:4e:33:4c:7d:d0:4b:37:75:cb:a4:d4:2b:a1:16:cc:c6:
5a:97:1d:a3:7e:ab:bd:79:3f:82:4f:79:95:80:9a:ff:d3:eb:
c7:68:39:04:a9:5e:34:db:30:65:19:03:c9:a6:94:ce:43:15:
7f:bf:e0:d1:6e:3c:87:c4:c0:d2:eb:9b:a0:cf:60:39:db:aa:
19:be:4a:04:32:42:58:dc:a7:f7:84:59:a4:ef:e4:b6:26:32:
15:bb:8c:3c:19:74:a7:cd:bf:96:28:7c:b3:86:1c:95:a9:98:
92:89:4d:a1:4f:fa:46:9a:42:9d:39:9f:92:0e:64:55:83:03:
ef:c1:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:22 2026 by rpki-client