Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/XljkstcGowTsOd_9qwEoGYCfFf4.roa
File: XljkstcGowTsOd_9qwEoGYCfFf4.roa (raw, json)
Hash identifier: xJT3X5dYdz8MbjovvaW8RgsCJ0duEud+3Cyei6W30zE=
Subject key identifier: 5E:58:E4:B2:D7:06:A3:04:EC:39:DF:FD:AB:01:28:19:80:9F:15:FE
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01A07C4919AA1CCD8280D275391FD40A15A0
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/XljkstcGowTsOd_9qwEoGYCfFf4.roa
Signing time: Mon 07 Sep 2026 14:32:40 +0000
ROA not before: Mon 07 Sep 2026 14:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62163
IP address blocks: 46.161.216.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
46.161.218.0/24 maxlen: 24
46.161.219.0/24 maxlen: 24
193.56.239.0/24 maxlen: 24
194.40.246.0/23 maxlen: 24
213.185.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:49:19:aa:1c:cd:82:80:d2:75:39:1f:d4:0a:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 7 14:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e58e4b2d706a304ec39dffdab012819809f15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:d0:3d:a8:6b:be:e4:58:c7:64:7b:ec:6a:
b4:57:0a:7b:03:c6:05:d8:8e:fa:e0:56:96:3e:27:
05:5e:ca:2a:8d:d1:f5:86:3c:53:4f:e4:e8:68:e8:
92:8c:b4:49:9e:2a:99:3d:34:92:1c:08:5e:c6:a3:
91:b0:2d:aa:23:d7:d6:02:40:66:1d:cc:c1:5b:c6:
c3:aa:c8:6d:aa:68:4b:db:e6:26:f0:19:01:c7:49:
ff:81:d9:4b:29:05:0a:ca:ab:c0:e9:e1:3e:c6:96:
f4:d7:8e:6e:43:75:6f:5e:7e:73:67:59:2c:45:3f:
c5:f7:05:81:4c:f0:12:0e:cf:08:f6:8f:2b:9e:be:
07:af:67:b7:30:5d:2b:5b:f8:b2:a0:01:96:c7:c9:
b0:d7:1a:31:11:40:8e:29:75:72:d3:bb:83:b9:85:
09:93:81:55:6c:78:bc:e0:cb:40:7e:00:34:77:c2:
ad:b4:3a:98:c1:14:39:84:81:5a:e0:5e:53:51:a9:
c2:f0:ef:29:7b:e4:e5:a8:d6:f1:6f:ae:84:51:0b:
44:aa:aa:1f:e2:4b:40:cc:78:b4:1b:7a:e2:f0:5f:
0b:a8:bf:34:92:f0:39:d4:22:d3:60:f4:4b:a8:09:
c6:ab:38:63:c1:5b:af:60:f6:1d:30:fa:f9:09:59:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:E4:B2:D7:06:A3:04:EC:39:DF:FD:AB:01:28:19:80:9F:15:FE
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/XljkstcGowTsOd_9qwEoGYCfFf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.216.0/22
193.56.239.0/24
194.40.246.0/23
213.185.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ec:00:1e:23:35:3e:6e:ce:ff:49:1b:e5:ff:4a:14:10:11:
1c:09:47:94:67:a7:01:89:04:f9:7f:4c:07:df:95:65:b5:7e:
87:c9:7c:55:e3:be:bf:e0:0e:b7:03:6b:92:ee:0e:04:4e:3c:
60:e7:88:11:27:d1:73:4f:b7:86:98:c2:35:c9:81:f3:de:32:
2a:bd:33:b0:e9:59:a4:89:5d:9e:42:6c:fe:a1:27:cb:4a:12:
e7:5d:7a:19:f4:f7:6c:6e:57:87:f0:e9:b5:6e:d9:10:9f:f4:
78:f7:bf:43:12:78:e2:2a:be:c8:a0:f6:e4:ba:d4:46:8f:9e:
e8:eb:48:c3:07:5e:52:35:b3:76:9c:1e:a3:a3:48:c3:34:97:
be:c9:00:f7:4e:8e:53:1b:85:de:b3:bb:19:54:bf:cb:05:0a:
48:0d:4f:c1:ff:70:7f:17:0d:01:66:3a:e6:21:c8:29:76:ea:
08:92:2f:fa:fa:49:da:f9:be:31:b4:9b:23:3b:bd:b0:da:4b:
b3:6f:71:fb:6c:e2:61:47:65:6a:0c:8e:63:9d:4c:55:b9:ed:
a2:be:8e:01:c0:04:f5:76:98:91:43:c2:39:ea:89:0f:e5:56:
54:3e:97:30:5f:0d:9e:f9:52:74:06:f7:e3:8d:ec:be:a7:02:
fc:36:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:02:21 2026 by rpki-client