Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa
File: xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa (raw, json)
Hash identifier: og0HfAzHezrSbN3NhEsFptFW8eiLweJs1cF+3fN0CHk=
Subject key identifier: C6:87:0D:08:86:0A:7C:09:E9:B7:88:FB:FB:87:48:E5:C5:A4:4F:C4
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 019EF1DE427D164883279E53925381BDD7BB
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa
Signing time: Tue 23 Jun 2026 00:25:35 +0000
ROA not before: Tue 23 Jun 2026 00:25:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.71.228.0/24 maxlen: 24
185.71.229.0/24 maxlen: 24
185.71.231.0/24 maxlen: 24
185.125.84.0/24 maxlen: 24
185.125.85.0/24 maxlen: 24
185.125.87.0/24 maxlen: 24
193.0.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:de:42:7d:16:48:83:27:9e:53:92:53:81:bd:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jun 23 00:25:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6870d08860a7c09e9b788fbfb8748e5c5a44fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:c0:55:9c:e6:3d:53:0e:a6:d1:10:48:1d:
74:c2:4e:64:68:a5:14:fe:9c:86:f8:89:7a:f0:10:
6a:4e:b7:6e:a8:1e:ea:fe:10:5b:f4:7b:2b:48:04:
a6:11:7a:b2:cd:c1:6d:b3:f1:52:b0:af:25:ec:ef:
bb:b2:7b:29:7a:06:95:56:51:36:fa:00:93:bb:11:
5a:c1:9d:92:62:cc:2e:b5:4e:87:15:ba:51:af:fb:
53:54:59:c8:86:42:f8:01:55:2d:d8:c3:2a:f7:73:
eb:a4:2a:40:9a:3b:9a:78:b7:74:52:f4:22:44:a7:
4f:a6:11:91:74:96:c2:b5:e6:48:81:2b:b2:72:4a:
b9:b4:28:44:84:d9:fd:d1:fc:e2:d0:9c:e7:e5:be:
bd:41:d0:86:05:ba:fe:b9:bd:fc:2b:36:97:59:a8:
c5:5b:1e:29:05:98:a8:31:1d:56:1e:a8:34:05:8f:
66:59:1a:0e:af:e7:40:0f:bd:c6:a0:a5:49:69:6e:
d5:37:1d:59:c2:07:11:dd:cf:cb:c1:4e:40:16:1b:
84:b7:b2:41:a4:10:f6:1d:07:b1:11:70:cc:cf:c9:
ff:56:f5:a3:3d:9e:79:b7:91:b6:70:dd:66:df:dc:
75:a0:e4:f7:79:69:72:6c:b2:3d:e1:30:74:59:f7:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:0D:08:86:0A:7C:09:E9:B7:88:FB:FB:87:48:E5:C5:A4:4F:C4
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.228.0/23
185.71.231.0/24
185.125.84.0/23
185.125.87.0/24
193.0.181.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2c:7a:2a:93:48:49:3c:b2:8a:05:22:5b:13:78:c3:de:c3:
a7:5f:93:90:8b:b9:d1:18:84:d0:e4:c6:d8:b2:58:a5:83:15:
d2:12:f7:1e:11:b7:f6:ab:29:0d:c8:30:1f:99:7d:36:88:e3:
c2:d9:9c:d5:13:ee:0b:52:f6:aa:1a:72:65:66:2e:0c:d1:b5:
08:a7:e0:16:fc:fa:03:d3:c0:58:45:f0:8e:06:13:9c:60:f4:
cf:75:3a:a0:3c:48:34:02:79:d7:15:bb:11:41:e3:c0:5b:ca:
f9:e3:9a:57:7a:7e:32:78:28:b5:03:1b:3a:a3:50:c4:18:cb:
81:bb:7d:23:9f:fa:84:69:27:ac:b7:48:c7:dc:4c:5d:5b:cc:
1c:82:96:0a:44:00:d7:1e:3d:8b:91:ac:d3:55:57:33:60:40:
27:77:ef:d1:76:c9:c4:f9:cd:5b:4d:db:7e:07:97:cb:cc:6c:
d9:3b:3f:85:0e:0c:28:8a:57:80:6b:b1:ad:d9:60:0f:47:46:
10:f6:3d:da:f2:38:f7:6f:bf:15:bb:1c:4d:6c:ef:00:60:08:
4d:f0:1b:d9:28:ea:0a:53:1d:58:69:99:d2:07:be:04:64:95:
0c:db:f1:b7:c2:fe:ad:61:fc:3e:da:d8:4f:a2:f3:a3:88:37:
84:ed:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:53 2026 by rpki-client