Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/xbsOLy08hDmqcrHsStCHW6gzcKY.roa
File: xbsOLy08hDmqcrHsStCHW6gzcKY.roa (raw, json)
Hash identifier: U+nyPksaAcVlKKdUnyPWFx4E2iIYZFylZhL+wDWilqE=
Subject key identifier: C5:BB:0E:2F:2D:3C:84:39:AA:72:B1:EC:4A:D0:87:5B:A8:33:70:A6
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 019C3B081CFFFD71ED3247B7AAB1615440FD
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/xbsOLy08hDmqcrHsStCHW6gzcKY.roa
Signing time: Sun 08 Feb 2026 02:15:13 +0000
ROA not before: Sun 08 Feb 2026 02:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.153.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.225.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.101.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3b:08:1c:ff:fd:71:ed:32:47:b7:aa:b1:61:54:40:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Feb 8 02:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5bb0e2f2d3c8439aa72b1ec4ad0875ba83370a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:31:86:98:53:69:b3:16:a0:83:b6:fd:8e:
13:e1:6d:81:4c:be:77:d5:6d:3a:88:32:dc:8b:69:
f6:8a:4c:16:88:62:54:ea:fa:19:33:80:4a:2f:f2:
89:cb:e7:9f:b1:f1:58:c4:ad:6c:13:68:50:02:a9:
c8:9f:21:4a:3a:ca:7e:82:df:e3:91:5b:36:03:61:
25:fa:07:92:c0:7b:56:18:fe:57:ba:ba:79:89:0e:
43:b7:25:eb:f1:c5:44:5f:c3:1a:3e:d0:f7:77:7d:
48:22:66:fe:e1:60:96:e6:f9:e5:d2:e1:ce:cf:98:
d5:0a:ca:cc:93:a0:57:27:bd:68:f3:ee:65:0c:3c:
75:b1:e0:ed:21:5a:6e:6e:55:41:6f:b2:06:ac:0c:
6f:0e:2a:f2:68:23:93:dd:46:22:77:52:4a:67:ee:
af:4e:40:02:db:5b:fb:b8:22:db:87:0d:4b:c5:b0:
4c:32:97:a4:b1:63:2b:df:a0:c9:8c:f7:f6:84:dc:
45:9d:be:2b:1c:ce:38:ca:a5:5d:9b:da:17:43:70:
00:eb:6c:dd:a1:dd:cf:d9:c5:75:17:5b:56:d7:bd:
e2:50:17:8a:8b:b7:23:a0:55:05:a7:7a:20:e6:75:
18:54:7a:52:00:01:d3:46:f9:1e:68:41:23:9f:7f:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:0E:2F:2D:3C:84:39:AA:72:B1:EC:4A:D0:87:5B:A8:33:70:A6
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/xbsOLy08hDmqcrHsStCHW6gzcKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3f:c6:e1:00:67:1f:3f:34:39:4f:d1:1e:e9:70:9b:1f:02:
98:79:d5:a1:68:55:77:8f:a1:ec:79:a1:2d:26:3a:51:e6:70:
97:e9:cd:87:84:d8:cd:ca:34:14:52:00:39:86:c0:9d:a6:fa:
58:e9:3f:36:08:4d:38:76:52:f3:2e:a7:57:f8:08:19:34:e2:
7e:f3:a3:ca:ef:d8:c6:f0:3d:c2:68:8f:2c:b9:4e:d1:c8:7d:
d5:aa:87:09:f6:66:47:5e:a3:7b:bf:20:22:6f:1a:5e:2d:87:
49:bc:f0:75:e0:fa:68:59:b0:cd:f7:0f:9d:b4:25:e3:c0:15:
06:35:3e:ee:73:6b:03:0c:09:33:d0:2c:74:f3:ec:b2:f7:ab:
b5:3a:de:10:df:df:da:1b:1d:ba:a3:19:6e:97:76:72:6f:ce:
d2:b1:90:c3:8c:35:9d:af:50:0e:56:c9:01:92:80:1f:5e:fd:
07:ec:c7:6f:29:6f:75:0a:85:96:4f:f2:70:50:55:74:4b:4e:
0d:b0:0a:31:5e:f0:b3:f8:40:c6:1f:ba:c6:70:59:04:21:d6:
d5:ab:54:5e:c5:da:55:56:36:35:60:97:d0:18:f6:9a:6c:12:
84:62:0e:55:95:9e:17:be:cd:6d:e6:33:ee:05:f5:30:f6:b0:
e5:a6:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:20:26 2026 by rpki-client