Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/XFkubg9wfX84ABip8hpjo9juzcU.roa
File: XFkubg9wfX84ABip8hpjo9juzcU.roa (raw, json)
Hash identifier: RFSGBBaYL7X28QtoqEmxImOKkYGxx+hir2PVsN+RGjY=
Subject key identifier: 5C:59:2E:6E:0F:70:7D:7F:38:00:18:A9:F2:1A:63:A3:D8:EE:CD:C5
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019F659625AA30C1F51F5EF8222299646DF5
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/XFkubg9wfX84ABip8hpjo9juzcU.roa
Signing time: Wed 15 Jul 2026 11:42:46 +0000
ROA not before: Wed 15 Jul 2026 11:42:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 37.152.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:96:25:aa:30:c1:f5:1f:5e:f8:22:22:99:64:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jul 15 11:42:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c592e6e0f707d7f380018a9f21a63a3d8eecdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:91:a1:b2:29:0e:82:e9:0d:a3:ad:a7:45:
22:1e:34:be:07:f4:fa:14:fa:82:34:cd:56:c4:06:
3d:d3:48:77:4a:1c:0c:d6:51:c3:6e:f0:02:23:6a:
46:6c:4a:e5:dc:de:58:d7:63:8c:63:d7:39:01:80:
94:15:05:94:0a:11:78:64:47:40:2f:82:00:2f:62:
56:02:4c:bf:5a:76:89:ac:c1:52:5b:37:9e:7a:52:
c7:8e:eb:c8:06:4b:c0:bb:2b:86:44:95:8d:d7:2e:
6a:0c:c5:34:d2:65:ae:2d:66:47:0d:7a:ec:63:ea:
71:73:7b:5f:7b:81:06:0c:2b:ac:20:55:74:ea:92:
af:e6:73:b6:2f:18:0b:80:67:2b:45:67:79:a9:b8:
db:51:54:bb:09:96:be:3b:dd:e9:28:55:12:da:9d:
5f:d2:60:95:81:e5:5d:6b:47:cb:a7:5f:64:5d:45:
b5:5f:a9:73:8e:f5:72:2f:f6:61:51:94:32:30:01:
7a:5e:00:d4:b7:b0:f0:fb:4e:0e:8c:f1:63:74:b3:
ed:ad:70:8c:d9:f9:6d:6d:55:3f:76:b3:f9:3e:13:
5d:76:72:ee:26:8c:27:e2:4c:65:3c:86:06:63:63:
da:54:af:8c:e5:d9:4c:0f:5b:06:c5:a2:7c:29:71:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:2E:6E:0F:70:7D:7F:38:00:18:A9:F2:1A:63:A3:D8:EE:CD:C5
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/XFkubg9wfX84ABip8hpjo9juzcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.174.0/24
Signature Algorithm: sha256WithRSAEncryption
11:93:35:e2:6a:32:8f:b4:e7:8d:d7:fd:dc:8e:a8:31:86:fa:
d7:e3:c1:df:6d:c6:0c:9e:9a:fd:22:5d:d2:c1:5d:9a:2e:1d:
59:75:f1:e5:0a:bf:4b:9b:7c:ea:4e:b1:f1:b4:f4:29:22:29:
4a:bd:06:96:da:73:72:c4:e9:6c:40:59:1c:4d:ea:a1:f1:bf:
15:05:9e:72:79:67:40:90:dd:b9:44:26:9f:81:3b:6a:30:16:
9a:ad:fc:92:cf:33:79:ca:7f:41:f7:42:b7:73:59:6d:88:8e:
1d:87:34:fe:40:8e:9d:70:c7:8a:82:1f:bf:1c:3a:1e:2c:c4:
a8:af:b1:16:6e:d6:58:6d:55:84:68:aa:a4:80:fc:d4:61:6e:
b3:d9:ef:45:c1:70:e8:a7:56:52:3a:f2:40:49:2b:2e:51:07:
9b:74:75:49:f3:24:42:09:57:c9:8b:b4:af:5c:b0:ad:22:ee:
f5:1e:4b:59:5b:9f:37:74:c7:a4:04:da:5f:92:11:9a:82:fe:
5e:f6:af:d5:97:dd:d8:90:d9:90:69:6c:ed:6e:7b:ae:cb:ea:
f1:84:7a:dd:1a:59:b5:be:46:3c:62:a0:4f:59:6b:ae:80:6e:
a0:52:4a:de:50:ec:af:a4:35:87:9d:85:09:16:b5:2c:f9:7b:
a7:4f:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:27 2026 by rpki-client