Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/XhfQtg6lg2sPtQqujy0Tvt47GJA.roa
File: XhfQtg6lg2sPtQqujy0Tvt47GJA.roa (raw, json)
Hash identifier: 4PIBlMBLgLaYJg4fGmEmHbbe8E3tiv3yMYNtFBiiWa4=
Subject key identifier: 5E:17:D0:B6:0E:A5:83:6B:0F:B5:0A:AE:8F:2D:13:BE:DE:3B:18:90
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 019F6FA10A7F023B23CB30697D5CED876F8D
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/XhfQtg6lg2sPtQqujy0Tvt47GJA.roa
Signing time: Fri 17 Jul 2026 10:30:52 +0000
ROA not before: Fri 17 Jul 2026 10:30:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41872
IP address blocks: 37.110.200.0/21 maxlen: 24
37.110.200.0/22 maxlen: 22
37.110.205.0/24 maxlen: 24
37.110.206.0/24 maxlen: 24
94.198.248.0/21 maxlen: 22
185.161.20.0/22 maxlen: 22
2a02:6500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:a1:0a:7f:02:3b:23:cb:30:69:7d:5c:ed:87:6f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Jul 17 10:30:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e17d0b60ea5836b0fb50aae8f2d13bede3b1890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:b6:2c:94:5d:53:61:21:c9:c5:f7:f6:f4:
d3:d9:78:6e:48:17:67:53:d5:8f:7e:d9:e3:9d:3c:
a3:10:31:73:18:2e:4f:1f:e1:00:de:45:78:8c:a4:
5f:2a:25:bf:41:ad:f7:f2:52:52:77:75:f5:18:14:
b1:1b:7a:e7:d0:23:ca:ed:6a:2d:20:5c:78:91:8b:
e3:8c:38:bf:75:87:b0:ad:17:5f:25:93:55:39:2c:
e5:08:1c:8f:5d:7b:a9:33:c8:1a:38:e2:64:c2:e1:
37:4c:7e:11:36:26:b4:0e:a2:cf:c8:dd:61:b9:b0:
65:1d:3e:42:e3:e1:0f:51:05:c4:06:dd:0c:38:f6:
ef:50:5f:cc:27:da:80:d6:1e:0c:7c:6b:0c:38:b1:
b5:b9:02:8e:ed:f5:01:55:71:a0:42:a2:5d:6a:7f:
1c:d1:56:47:24:20:9b:02:3a:ad:80:5c:d8:9c:ae:
f7:77:20:cc:93:d6:4c:a5:9b:a1:c4:15:25:f8:34:
ae:02:b5:26:c4:d8:53:33:3a:49:ee:d1:c5:7d:97:
95:94:37:10:7a:ab:93:e4:fe:d6:50:98:21:e0:4f:
9a:02:b9:ef:a0:21:6f:00:da:05:d2:c4:31:8e:3f:
d5:96:eb:f6:05:ef:1b:c9:80:82:d4:36:e1:a7:7a:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:D0:B6:0E:A5:83:6B:0F:B5:0A:AE:8F:2D:13:BE:DE:3B:18:90
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/XhfQtg6lg2sPtQqujy0Tvt47GJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.200.0/21
94.198.248.0/21
185.161.20.0/22
IPv6:
2a02:6500::/32
Signature Algorithm: sha256WithRSAEncryption
22:86:8d:2a:69:0e:2f:eb:90:d6:b8:d1:e1:30:ac:3a:ec:5c:
62:7d:7b:ac:17:22:62:12:1f:a3:6e:39:2c:52:71:4b:78:0f:
80:0c:6e:47:6d:f0:78:77:f2:d0:99:f1:cd:c7:d1:7b:97:db:
ae:52:06:f1:2e:8b:ff:93:f1:d5:7d:5c:65:0a:7e:43:7f:ae:
20:b9:a6:37:b9:a3:5c:22:44:87:4c:c1:32:db:6c:07:ad:96:
08:1f:68:d5:d7:15:cb:1a:24:54:93:c8:44:86:98:83:3a:f7:
33:58:d7:38:40:24:29:6c:09:fc:46:21:21:d0:5d:c4:c4:72:
ae:d0:31:cf:a0:20:d8:eb:22:88:12:12:3d:53:41:fb:97:fd:
39:23:0f:05:31:73:7f:01:aa:47:d3:ba:ce:34:47:eb:ed:08:
e3:0e:ba:b4:e8:7b:d1:1d:19:35:d0:c2:f9:13:34:e8:e6:ec:
b2:fc:41:51:77:80:4e:b6:9c:5c:c6:93:83:43:f3:a6:cd:1b:
6a:3c:5f:af:57:31:e4:bf:80:a8:02:86:dc:69:c1:bf:bb:e9:
4f:04:93:df:a1:eb:8f:5b:26:6a:92:58:fc:dc:56:9c:ac:04:
ac:8f:1d:69:2d:8d:2b:fd:c2:d3:55:87:f4:92:22:3f:96:51:
92:7a:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:10:07 2026 by rpki-client