Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/xOFyqAK0wn6F8YQS81vCKex4biY.roa
File: xOFyqAK0wn6F8YQS81vCKex4biY.roa (raw, json)
Hash identifier: acG2LAqOo9EfVrfS6J8PiwZRQt4oRpGi0BsoPKrUMDM=
Subject key identifier: C4:E1:72:A8:02:B4:C2:7E:85:F1:84:12:F3:5B:C2:29:EC:78:6E:26
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 01A0B4871678B3FA3314D7DF6D4ECACAC7F7
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/xOFyqAK0wn6F8YQS81vCKex4biY.roa
Signing time: Fri 18 Sep 2026 12:39:07 +0000
ROA not before: Fri 18 Sep 2026 12:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210070
IP address blocks: 185.238.218.0/24 maxlen: 24
185.238.219.0/24 maxlen: 24
2a0f:f7c0::/32 maxlen: 32
2a0f:f7c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:87:16:78:b3:fa:33:14:d7:df:6d:4e:ca:ca:c7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Sep 18 12:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4e172a802b4c27e85f18412f35bc229ec786e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:79:dc:37:a3:3d:f2:59:f0:12:70:6d:cd:
48:17:50:93:70:91:bc:50:ae:e8:bb:90:3c:2c:e4:
22:ed:17:1c:3d:b3:c9:39:bc:39:1a:16:aa:d2:53:
aa:6a:d9:5d:fe:d1:d8:07:2d:87:bb:6b:2a:6b:2b:
38:2d:d4:d0:a3:de:7c:0c:17:48:dc:0a:1b:f3:43:
63:e4:61:e3:b3:be:c1:e0:5b:e6:c2:0f:ba:2e:b8:
37:1c:40:5c:c6:7e:63:48:57:a4:9e:d3:1f:6c:d5:
1a:f0:2a:19:39:ca:f2:e3:6e:ab:a8:d3:c4:39:fd:
50:8b:a5:83:51:d3:84:85:89:76:9f:06:cc:87:bd:
a5:46:96:8e:ba:1d:dc:92:df:4c:f2:ee:1e:65:62:
c2:bb:89:9c:25:bb:28:8f:f5:a5:20:49:b5:9e:c5:
63:c8:21:73:f0:b7:4b:37:bf:ee:27:05:0a:e0:06:
a1:8a:47:b7:a6:ff:0f:b0:05:c0:9f:b2:69:92:55:
13:d8:ca:1f:8c:4f:25:f4:0e:be:32:34:e9:1d:8b:
37:d3:cd:a0:c4:a5:7c:57:3b:d0:e4:11:83:9a:ac:
2d:16:e9:13:32:e1:d4:40:5b:e0:a4:f8:49:51:6a:
f2:d1:c3:44:b8:88:51:10:e9:d6:65:af:06:bb:f4:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:72:A8:02:B4:C2:7E:85:F1:84:12:F3:5B:C2:29:EC:78:6E:26
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/xOFyqAK0wn6F8YQS81vCKex4biY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.218.0/23
IPv6:
2a0f:f7c0::/31
Signature Algorithm: sha256WithRSAEncryption
21:8d:cc:f2:6a:f2:27:32:a3:d2:b6:00:b5:5a:7e:ea:cc:9b:
63:c5:60:de:9c:4e:a9:f9:50:70:ef:6b:94:18:ab:a4:37:e5:
a4:32:ee:af:d4:96:e3:39:1b:bd:db:c7:0d:56:51:c9:fa:db:
95:53:a0:e4:9a:da:0d:c0:8e:b1:46:cc:79:6d:b6:2b:0d:58:
ba:7a:da:9f:b4:98:37:2c:ab:8d:b8:d4:d4:c2:b1:3f:ff:60:
f0:ee:f1:02:07:de:a4:04:56:32:75:21:55:84:e3:16:1f:ca:
d7:aa:d6:65:1b:a0:44:b8:01:70:36:f8:9d:33:42:e0:79:7e:
88:b6:1e:6e:40:62:f2:cc:5e:36:a7:b3:9b:59:f6:09:f4:79:
b6:85:fd:b4:09:08:7a:7b:4d:01:03:15:10:87:94:68:ed:87:
21:5f:e3:42:91:49:68:ed:2e:e6:5e:89:be:27:ea:8f:52:55:
d9:ea:12:23:c3:6e:0f:18:ff:cc:b2:1f:e2:ab:bf:74:8d:de:
d6:bf:4c:36:93:2f:ab:00:dc:13:cf:bb:8a:df:ba:f8:a9:cf:
9b:5e:15:79:c1:d8:34:c9:89:fd:e4:eb:23:ea:49:4e:ed:d8:
01:30:a2:b7:5c:55:ae:72:2d:d5:e0:06:17:64:5c:4b:5e:23:
b2:29:33:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaC0hxZ4s/ozFNffbU7Kysf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjYwOTE4MTIzOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGUxNzJhODAyYjRjMjdlODVmMTg0MTJmMzViYzIyOWVjNzg2ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pF53DejPfJZ8BJwbc1IF1CTcJG8
UK7ou5A8LOQi7RccPbPJObw5Ghaq0lOqatld/tHYBy2Hu2sqays4LdTQo958DBdI
3Aob80Nj5GHjs77B4Fvmwg+6Lrg3HEBcxn5jSFekntMfbNUa8CoZOcry426rqNPE
Of1Qi6WDUdOEhYl2nwbMh72lRpaOuh3ckt9M8u4eZWLCu4mcJbsoj/WlIEm1nsVj
yCFz8LdLN7/uJwUK4Aahike3pv8PsAXAn7JpklUT2MofjE8l9A6+MjTpHYs3082g
xKV8VzvQ5BGDmqwtFukTMuHUQFvgpPhJUWry0cNEuIhREOnWZa8Gu/RlewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMThcqgCtMJ+hfGEEvNbwinseG4mMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEveE9GeXFBSzB3bjZGOFlRUzgxdkNLZXg0YmlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBue7aMA0E
AgACMAcDBQEqD/fAMA0GCSqGSIb3DQEBCwUAA4IBAQAhjczyavInMqPStgC1Wn7q
zJtjxWDenE6p+VBw72uUGKukN+WkMu6v1JbjORu928cNVlHJ+tuVU6DkmtoNwI6x
Rsx5bbYrDVi6etqftJg3LKuNuNTUwrE//2Dw7vECB96kBFYydSFVhOMWH8rXqtZl
G6BEuAFwNvidM0LgeX6Ith5uQGLyzF42p7ObWfYJ9Hm2hf20CQh6e00BAxUQh5Ro
7YchX+NCkUlo7S7mXom+J+qPUlXZ6hIjw24PGP/Msh/iq790jd7Wv0w2ky+rANwT
z7uK37r4qc+bXhV5wdg0yYn95Osj6klO7dgBMKK3XFWuci3V4AYXZFxLXiOyKTMI
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:53 2026 by rpki-client