Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/xKZaKt2ejyS1RvKxbygcbV14q7Y.roa
File: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (raw, json)
Hash identifier: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=
Subject key identifier: C4:A6:5A:2A:DD:9E:8F:24:B5:46:F2:B1:6F:28:1C:6D:5D:78:AB:B6
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019DF93596AEBEC88BE7890B5E8B9F2B2EF1
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/xKZaKt2ejyS1RvKxbygcbV14q7Y.roa
Signing time: Tue 05 May 2026 17:35:31 +0000
ROA not before: Tue 05 May 2026 17:35:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.148.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:35:96:ae:be:c8:8b:e7:89:0b:5e:8b:9f:2b:2e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: May 5 17:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4a65a2add9e8f24b546f2b16f281c6d5d78abb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:15:ff:bb:d1:bf:53:e3:74:1c:33:17:f4:
11:ad:0c:96:de:a4:49:77:62:60:84:c5:f4:f3:a7:
06:e5:dd:0a:71:e3:97:1d:1b:f2:33:cc:33:71:65:
9c:3e:f3:7e:68:8b:41:d1:7d:14:07:84:60:d0:46:
58:d3:77:5b:2e:3c:63:5e:16:ef:9c:e7:0c:f9:05:
5d:6d:18:eb:73:c4:12:b7:de:07:0d:99:66:d3:0a:
1a:de:c7:4b:08:60:c1:a2:4a:66:16:fb:94:68:16:
ae:1d:e1:a1:be:55:01:f3:2f:fd:51:13:92:53:dc:
d8:6e:ff:62:a7:c4:44:06:13:73:24:43:d0:81:94:
7d:69:73:be:e8:25:d5:f0:72:2a:00:da:61:f6:27:
4e:44:4a:e3:0b:f5:2e:91:fc:6d:51:2e:a5:69:14:
9e:0a:37:eb:57:c0:2d:ed:71:98:a4:e8:3d:00:8d:
32:e5:2e:e1:98:07:e6:97:07:ec:94:a6:cf:f6:56:
6d:25:09:bd:70:09:15:d3:e5:4a:c7:90:f9:85:90:
c8:f2:3c:47:d5:4e:f1:cc:fa:a1:c4:2d:62:3d:6c:
1a:33:ae:92:83:e0:c8:24:2a:1a:57:76:7e:cf:36:
4b:fb:f4:cc:60:11:c0:1b:7b:55:6b:2b:78:03:2f:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:5A:2A:DD:9E:8F:24:B5:46:F2:B1:6F:28:1C:6D:5D:78:AB:B6
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/xKZaKt2ejyS1RvKxbygcbV14q7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.181.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:40:34:bf:62:ff:63:91:b3:d5:11:dc:cb:75:d0:4c:fa:30:
63:cc:3a:b4:17:c8:43:a8:a4:3b:b0:f6:b6:80:84:aa:2a:30:
25:94:ff:35:ad:91:84:99:81:b8:8e:1a:3c:88:c7:1f:ac:03:
df:7e:d0:94:e6:77:e2:1d:e6:f7:c1:e5:bc:45:a0:5e:b0:4d:
96:bd:ed:2a:88:83:71:ad:b6:6b:1f:78:df:58:9a:d7:af:15:
ae:55:1d:cb:7d:75:5e:21:a7:24:4f:1f:87:5c:8d:cd:57:8c:
13:8e:7a:50:ae:75:98:c8:1d:a0:ad:89:e5:a4:2c:a6:1c:62:
96:b1:5c:c3:cd:45:54:3e:00:44:52:3c:3a:4c:f7:c8:b5:7e:
0d:ed:fe:ca:62:b7:89:a6:7c:df:0a:d6:fb:c6:0e:db:b0:80:
60:0b:48:cf:7d:42:97:91:95:c9:d0:4e:b8:1b:73:3c:50:96:
11:9b:45:88:21:9b:04:56:10:20:e4:73:0a:e6:2b:f0:6f:64:
ee:5e:57:ec:66:a0:67:79:c4:e6:83:21:2f:47:20:aa:6c:8f:
60:4e:9f:f4:d2:c1:25:17:26:e1:79:3d:c9:3b:03:b5:e4:33:
3f:03:fb:2d:09:8c:34:ad:66:48:a0:54:49:7f:d6:50:6d:78:
b8:5c:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:37 2026 by rpki-client