Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/xFRlA_WCCtl4Fju19ONjDEmoD1k.roa
File: xFRlA_WCCtl4Fju19ONjDEmoD1k.roa (raw, json)
Hash identifier: UGXakbfRLTme4sGda2l7oDppZgoq8uWKm7vnvwj4GMA=
Subject key identifier: C4:54:65:03:F5:82:0A:D9:78:16:3B:B5:F4:E3:63:0C:49:A8:0F:59
Certificate issuer: /CN=d8907e88a5355dd6c493310da909c49c82e6462b
Certificate serial: 019F2368CFDD226EF6F3F0A93EAC40D616AD
Authority key identifier: D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/xFRlA_WCCtl4Fju19ONjDEmoD1k.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51088
IP address blocks: 185.63.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:dd:22:6e:f6:f3:f0:a9:3e:ac:40:d6:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8907e88a5355dd6c493310da909c49c82e6462b
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4546503f5820ad978163bb5f4e3630c49a80f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:c8:19:9b:86:dd:f8:7d:f8:e3:e9:f0:50:
9c:9a:ad:1a:d3:13:e8:3f:48:55:d2:e7:f6:f0:47:
bb:16:cd:52:b6:a7:ff:1d:07:77:b7:dd:93:b9:02:
ae:42:d4:5c:b6:d5:df:e7:15:9d:8e:5a:08:24:9d:
33:76:b1:01:5a:14:0f:f4:6f:e3:e0:e8:58:3d:34:
e4:99:9a:96:c1:35:88:74:55:c9:c5:89:fc:85:86:
9a:cd:7f:25:1a:02:7a:24:32:30:2e:dd:7c:f0:c8:
f1:8a:8a:77:d7:b4:88:20:4a:c1:1f:80:63:73:41:
8d:a6:35:3f:c9:3b:a5:db:53:b4:e0:4a:2c:3e:10:
43:cb:0a:45:eb:4e:15:2c:d6:af:ea:cc:cf:da:2d:
7e:bc:53:32:c0:49:8e:ba:ad:51:a0:0f:23:33:fd:
cb:23:a4:47:79:1f:1d:7f:3c:31:eb:1b:be:00:9e:
15:0e:d7:15:39:f9:38:dc:16:12:ed:d5:5d:3d:61:
56:0b:d7:2f:3f:09:33:4f:c8:92:60:82:0d:54:e2:
d2:9f:3d:14:cf:ec:b6:20:2e:f2:a2:f4:89:d0:d4:
a7:c9:55:e7:bf:58:e3:70:41:8c:cc:bc:e8:73:c0:
51:ea:f4:87:26:9d:dd:03:15:5e:f5:27:2c:53:c1:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:65:03:F5:82:0A:D9:78:16:3B:B5:F4:E3:63:0C:49:A8:0F:59
X509v3 Authority Key Identifier:
keyid:D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/xFRlA_WCCtl4Fju19ONjDEmoD1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.244.0/22
Signature Algorithm: sha256WithRSAEncryption
63:33:c7:a9:79:5b:aa:fd:f6:8d:01:15:ff:9a:f1:ac:42:29:
b8:44:e9:08:19:52:37:82:f8:f0:11:54:1e:5d:f3:64:f0:21:
1d:c1:76:79:92:17:ce:65:9e:e9:54:9f:eb:f0:bc:b2:49:f5:
0f:c4:fb:0b:0c:e1:cf:9e:f9:ec:11:89:2b:53:bb:63:84:90:
a9:aa:ed:8e:ac:ab:f5:70:07:89:22:1b:72:d7:10:d7:48:2e:
c2:02:99:42:4d:da:74:9a:bc:de:1f:c4:cf:75:d1:0d:90:05:
72:68:5d:9c:10:ce:50:d6:08:66:60:5e:c1:a2:07:1a:a6:ae:
0e:db:c3:ca:2b:ad:06:ef:10:05:30:64:2f:c8:ef:3f:68:f2:
6c:14:d7:60:37:4e:89:0e:5e:9e:ba:5a:3c:a0:5b:25:ed:db:
6b:71:03:1b:14:90:55:66:ad:5f:94:a2:2d:ec:e3:57:4a:ad:
e5:11:1d:4c:d5:0d:97:9c:22:f2:9b:f1:fe:78:bf:b3:d0:cc:
36:65:e2:f6:13:6e:5b:30:f8:d6:65:69:6a:18:e3:ff:f9:5b:
bd:7d:35:2d:84:0e:53:57:5d:28:0d:f2:58:cf:29:11:55:cf:
92:65:48:ca:e3:9f:c1:4a:cc:e9:c1:ab:cd:89:b1:4d:6b:9c:
bc:0f:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:20 2026 by rpki-client