Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Xkknxh7cgY2g-AruuRazn-AcBMU.roa
File: Xkknxh7cgY2g-AruuRazn-AcBMU.roa (raw, json)
Hash identifier: DxXAl0Qzh/kbGfwtLWMglKczcL8hVfV83GTcOZSCTZY=
Subject key identifier: 5E:49:27:C6:1E:DC:81:8D:A0:F8:0A:EE:B9:16:B3:9F:E0:1C:04:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F21CC52FF0779DF5405C465A153BC69EE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Xkknxh7cgY2g-AruuRazn-AcBMU.roa
Signing time: Thu 02 Jul 2026 07:47:46 +0000
ROA not before: Thu 02 Jul 2026 07:47:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16611
IP address blocks: 151.244.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:cc:52:ff:07:79:df:54:05:c4:65:a1:53:bc:69:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 2 07:47:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e4927c61edc818da0f80aeeb916b39fe01c04c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:7c:36:33:e8:0d:ad:2c:66:c5:ef:c6:20:
5c:0d:87:75:6c:8c:db:c6:2f:71:c4:97:69:a7:bf:
05:dc:5e:ab:5d:39:87:d0:74:32:27:8f:6a:e2:76:
df:5b:79:22:48:0c:ed:bb:ce:9a:91:bf:c8:d1:b1:
bb:8f:55:98:03:68:da:86:2e:1e:5c:cb:64:38:97:
8a:69:51:4d:e9:69:f2:bd:d4:ff:e4:01:d1:32:34:
b9:e5:8c:b0:e6:3c:20:3a:4f:89:9c:0c:90:58:95:
ab:92:5b:4b:8c:e8:53:a0:8f:df:2c:e6:af:59:ea:
09:6d:f8:6b:98:4e:a8:10:07:c9:ad:d6:f1:2b:b8:
ff:89:89:10:81:dd:05:d0:76:10:6e:05:2a:b9:54:
86:fa:9f:2c:74:ae:25:c6:b9:d3:6c:ac:5a:50:76:
24:df:e3:9a:e8:db:7b:30:39:ae:b4:62:4b:ad:3d:
4b:ef:d4:13:2b:aa:5f:bb:86:22:ee:2f:33:18:f5:
bc:e8:5a:06:03:8a:34:a1:81:82:04:7c:34:8c:e6:
b6:62:b7:a9:37:2f:f4:7c:64:7a:d7:f7:63:9d:d6:
55:05:78:8a:95:5f:73:aa:aa:80:90:47:69:11:fb:
7e:54:73:bf:d0:ec:e9:9b:6b:ac:90:d5:39:dc:41:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:27:C6:1E:DC:81:8D:A0:F8:0A:EE:B9:16:B3:9F:E0:1C:04:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Xkknxh7cgY2g-AruuRazn-AcBMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9f:74:83:2c:4c:60:fe:b4:fd:42:a5:30:3f:05:fb:47:d7:
e2:a3:2d:8b:b8:6d:e1:db:e7:2d:c4:8c:d4:21:69:81:76:c6:
7e:65:21:00:43:41:ba:02:27:07:65:64:53:66:bf:c2:c2:ba:
f2:02:f5:48:4e:44:61:f9:ac:f5:53:3d:a0:9f:95:a3:17:71:
f8:00:e6:a4:6b:2e:78:a2:5c:19:a0:fc:b7:ad:b0:2c:53:65:
f8:1d:f0:e2:ca:98:c2:b4:50:ca:bb:9d:0b:4f:05:64:cd:e9:
9c:e3:cf:6e:e8:00:f2:8a:8a:92:77:9f:11:0f:57:bf:c6:2d:
1c:26:43:c0:c3:63:2c:a6:f6:80:22:c1:d1:82:08:56:bd:93:
a6:6b:94:fc:00:1f:a7:ea:25:2a:0f:51:4a:2e:47:09:c7:d0:
ec:68:48:f9:1c:f0:9f:53:f4:2a:82:be:7d:80:1f:9f:dd:d4:
03:7d:e9:17:ca:0a:cb:51:15:47:c7:a7:4f:44:d3:8a:39:98:
59:6a:8f:f5:79:28:8e:21:d7:0c:85:e1:4f:f2:49:6d:76:6f:
f4:7d:c5:f9:cb:fd:c0:e0:9b:24:9d:25:6a:00:02:b6:65:80:
4d:9a:67:8a:04:0d:69:b3:47:22:59:df:ea:e4:a3:45:0b:8c:
90:40:48:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8hzFL/B3nfVAXEZaFTvGnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzAyMDc0NzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTQ5MjdjNjFlZGM4MThkYTBmODBhZWViOTE2YjM5ZmUwMWMwNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihh8NjPoDa0sZsXvxiBcDYd1bIzb
xi9xxJdpp78F3F6rXTmH0HQyJ49q4nbfW3kiSAztu86akb/I0bG7j1WYA2jahi4e
XMtkOJeKaVFN6WnyvdT/5AHRMjS55Yyw5jwgOk+JnAyQWJWrkltLjOhToI/fLOav
WeoJbfhrmE6oEAfJrdbxK7j/iYkQgd0F0HYQbgUquVSG+p8sdK4lxrnTbKxaUHYk
3+Oa6Nt7MDmutGJLrT1L79QTK6pfu4Yi7i8zGPW86FoGA4o0oYGCBHw0jOa2Yrep
Ny/0fGR61/djndZVBXiKlV9zqqqAkEdpEft+VHO/0Ozpm2uskNU53EH9SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF5JJ8Ye3IGNoPgK7rkWs5/gHATFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWGtrbnhoN2NnWTJnLUFydXVSYXpuLUFjQk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TEMA0G
CSqGSIb3DQEBCwUAA4IBAQCTn3SDLExg/rT9QqUwPwX7R9fioy2LuG3h2+ctxIzU
IWmBdsZ+ZSEAQ0G6AicHZWRTZr/CwrryAvVITkRh+az1Uz2gn5WjF3H4AOakay54
olwZoPy3rbAsU2X4HfDiypjCtFDKu50LTwVkzemc489u6ADyioqSd58RD1e/xi0c
JkPAw2MspvaAIsHRgghWvZOma5T8AB+n6iUqD1FKLkcJx9DsaEj5HPCfU/Qqgr59
gB+f3dQDfekXygrLURVHx6dPRNOKOZhZao/1eSiOIdcMheFP8kltdm/0fcX5y/3A
4JsknSVqAAK2ZYBNmmeKBA1ps0ciWd/q5KNFC4yQQEj7
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:03 2026 by rpki-client