Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/xBKM8I38qGeVMeob4yWir2gnqCk.roa
File: xBKM8I38qGeVMeob4yWir2gnqCk.roa (raw, json)
Hash identifier: KcgLf5khcgwTitCwhZW6SThRiWSlxfBJuDkexFoQ3hU=
Subject key identifier: C4:12:8C:F0:8D:FC:A8:67:95:31:EA:1B:E3:25:A2:AF:68:27:A8:29
Certificate issuer: /CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Certificate serial: 019F23689EFEEE18E98F34F60DB368B65815
Authority key identifier: 43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/xBKM8I38qGeVMeob4yWir2gnqCk.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 185.32.44.0/22 maxlen: 22
185.32.44.0/24 maxlen: 24
185.32.45.0/24 maxlen: 24
185.32.46.0/24 maxlen: 24
185.32.47.0/24 maxlen: 24
185.40.32.0/24 maxlen: 24
185.40.33.0/24 maxlen: 24
2a00:c0a0::/32 maxlen: 32
2a00:c0a0::/34 maxlen: 34
2a00:c0a0:4000::/34 maxlen: 34
2a00:c0a0:8000::/34 maxlen: 34
2a00:c0a0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9e:fe:ee:18:e9:8f:34:f6:0d:b3:68:b6:58:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4128cf08dfca8679531ea1be325a2af6827a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:54:ae:df:76:ee:37:f6:9a:e9:fe:b0:fa:
3c:91:05:28:e0:2c:97:ac:4b:95:af:2f:ea:ad:41:
63:5d:33:5b:dc:2b:76:0f:50:3d:30:44:be:14:e0:
94:0c:04:d9:68:1f:73:40:61:98:05:64:b9:09:70:
8c:c0:8e:43:3d:a3:e2:03:6d:df:ad:bf:87:59:5f:
fb:0b:38:91:47:fa:d0:ce:f7:b6:8d:c4:60:dc:a6:
61:31:90:51:9e:58:eb:d2:4c:af:aa:26:11:f5:a0:
f6:55:7a:a5:03:30:4f:fc:6d:c7:af:d6:f4:94:43:
89:a1:bd:e8:20:a7:f5:4c:72:f3:b3:c5:ad:b5:48:
3e:d1:cc:4d:a2:f7:c8:10:f4:ac:38:e7:7c:af:ec:
5c:d6:83:16:99:d3:10:15:53:77:16:3b:cd:b0:8a:
09:7c:6c:64:c2:98:85:cb:58:d7:91:df:25:cb:8d:
9a:f7:93:60:4d:77:5e:24:77:49:65:05:b1:f6:f5:
1c:7c:f0:71:d1:ed:b1:43:fc:44:25:3c:3b:6a:4f:
10:a0:e6:ad:6a:7a:28:85:2e:0a:4e:18:09:56:bb:
2a:d5:2d:e1:bd:d8:be:57:72:16:f7:c0:17:cd:5a:
36:16:2a:0e:96:8d:5b:3d:01:f9:88:9b:04:76:8d:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:8C:F0:8D:FC:A8:67:95:31:EA:1B:E3:25:A2:AF:68:27:A8:29
X509v3 Authority Key Identifier:
keyid:43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/xBKM8I38qGeVMeob4yWir2gnqCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.44.0/22
185.40.32.0/23
IPv6:
2a00:c0a0::/32
Signature Algorithm: sha256WithRSAEncryption
18:c4:cc:5f:e5:01:34:b2:e9:c5:53:62:99:40:f4:af:aa:94:
bb:4f:4f:e5:88:18:60:4a:a3:1d:42:17:0f:78:a6:92:9a:1e:
7e:15:8b:4d:89:0f:0d:98:c9:81:c2:77:34:27:35:51:28:8e:
cc:12:69:ae:43:63:c1:22:f4:d3:77:0d:79:c6:ac:d9:4e:9b:
5f:55:76:12:8f:3a:69:25:cf:e6:f9:b4:ba:3a:44:eb:0d:ce:
1f:1a:ba:f0:d3:15:2e:29:eb:20:26:7d:4f:cd:5b:7c:42:ce:
33:24:ef:76:89:36:82:2c:7d:f3:ff:fe:47:34:aa:aa:9d:a0:
f2:40:c2:25:ca:70:6e:d0:d7:b4:06:af:d0:e9:22:45:80:9a:
d8:23:22:03:ce:c0:dd:9b:f6:c6:78:5b:19:17:52:c5:e3:9e:
ad:15:52:4d:3e:b3:f8:ca:b1:28:de:34:a5:bd:ef:c9:88:f0:
de:01:d0:83:3d:b2:37:7b:09:86:17:32:61:6c:04:66:03:a2:
37:a3:72:f0:bf:32:28:2b:80:16:6b:31:41:b7:b1:a7:fd:4f:
b8:11:6f:40:37:a1:98:c8:6a:56:c5:a1:54:af:6b:80:10:92:
f5:d3:81:57:d8:f5:16:a4:14:44:6a:22:ef:6e:77:8d:af:d5:
fa:f9:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:32 2026 by rpki-client