Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/xYWkAifKgbzMwHPH9ChNEY9e4iM.roa
File: xYWkAifKgbzMwHPH9ChNEY9e4iM.roa (raw, json)
Hash identifier: Bz4T95O1mfOExGB93chx5fz5CwKmhmSQkr8xG9olHYA=
Subject key identifier: C5:85:A4:02:27:CA:81:BC:CC:C0:73:C7:F4:28:4D:11:8F:5E:E2:23
Certificate issuer: /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Certificate serial: 019B7835470A574156566010F30507332EC7
Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/xYWkAifKgbzMwHPH9ChNEY9e4iM.roa
Signing time: Thu 01 Jan 2026 06:18:35 +0000
ROA not before: Thu 01 Jan 2026 06:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44869
IP address blocks: 5.103.0.0/16 maxlen: 16
5.186.0.0/16 maxlen: 16
37.122.240.0/21 maxlen: 21
46.21.32.0/20 maxlen: 20
77.33.0.0/16 maxlen: 16
78.143.64.0/18 maxlen: 18
80.71.64.0/19 maxlen: 19
80.208.0.0/17 maxlen: 17
80.209.0.0/17 maxlen: 17
87.104.0.0/18 maxlen: 18
89.239.192.0/18 maxlen: 18
185.202.8.0/22 maxlen: 22
212.178.160.0/19 maxlen: 19
2a02:17c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:47:0a:57:41:56:56:60:10:f3:05:07:33:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Validity
Not Before: Jan 1 06:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c585a40227ca81bcccc073c7f4284d118f5ee223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:6c:3e:9b:82:b6:38:a1:b4:2b:bb:e7:b7:
28:c4:b1:89:27:28:24:79:74:0f:52:93:e8:a3:d6:
9e:79:73:c5:64:ab:50:f5:d8:1c:a6:46:1f:fd:58:
30:d2:d9:df:ee:67:64:aa:29:7a:9e:cd:95:ef:f2:
4b:42:16:2a:0e:70:38:0b:4f:98:a9:7c:d8:52:69:
9e:a6:de:43:ed:06:fc:e7:b5:f7:04:8b:66:1a:8c:
07:63:b8:58:a1:d1:d6:da:6b:4f:c1:f9:66:81:4c:
ff:cb:b0:61:db:44:f6:6f:32:41:76:a8:13:ff:11:
cb:0a:11:51:fd:9f:3e:c3:b6:97:a2:5f:2c:2c:31:
9e:1e:59:41:52:f8:16:ab:86:82:26:fb:31:e3:f3:
fd:34:dd:76:aa:bd:7f:3f:6d:cb:49:da:d3:5b:8c:
53:20:be:d3:7f:9a:2f:45:72:b5:ae:30:d5:ba:e5:
c5:58:0b:27:73:bc:90:e8:ee:9d:86:61:4d:1b:2a:
74:c0:e9:f7:38:f6:f2:c4:85:3d:47:04:93:c0:74:
54:0e:7b:0e:7d:6d:0b:73:02:74:62:b5:09:2b:30:
6d:f9:48:86:48:ac:0f:3a:75:7a:98:5c:6e:a6:32:
67:e9:4a:13:43:6c:b3:12:cb:d7:a4:1b:e8:a9:56:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:A4:02:27:CA:81:BC:CC:C0:73:C7:F4:28:4D:11:8F:5E:E2:23
X509v3 Authority Key Identifier:
keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/xYWkAifKgbzMwHPH9ChNEY9e4iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.103.0.0/16
5.186.0.0/16
37.122.240.0/21
46.21.32.0/20
77.33.0.0/16
78.143.64.0/18
80.71.64.0/19
80.208.0.0/17
80.209.0.0/17
87.104.0.0/18
89.239.192.0/18
185.202.8.0/22
212.178.160.0/19
IPv6:
2a02:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
18:12:cf:bc:06:4d:f4:ce:56:55:96:64:ef:69:01:9d:f2:3e:
1e:0e:4e:ce:70:25:2e:b2:df:59:bf:ce:64:bd:fc:63:64:a6:
1f:dd:6d:d6:73:d1:16:da:7d:8b:d0:91:5a:e2:52:10:75:54:
3e:46:4c:ec:c2:2d:1f:57:a8:70:c0:cc:dc:7d:e0:3d:b8:39:
ad:f7:2a:2f:1c:09:ee:ce:42:41:4d:9d:30:b3:44:7d:0a:b5:
bb:1f:fa:73:2d:7f:0c:dc:ac:6a:fd:56:ec:ce:61:39:26:2f:
9e:5b:ff:f8:d7:63:c6:b1:f0:6a:89:96:83:1c:24:76:59:78:
ee:14:40:0f:e5:d5:cd:36:d9:a7:22:d8:96:7a:1f:ee:b0:20:
d3:5b:61:1f:bb:af:b5:00:f3:1e:c2:20:85:c4:6d:42:20:5c:
70:78:69:57:31:8e:35:f0:e2:70:56:33:4c:7b:98:71:79:66:
a0:6e:2b:41:87:31:ea:aa:8c:25:6f:a9:d5:c3:ef:16:b5:97:
ea:35:a0:8b:d9:11:6a:2e:7d:aa:bc:2f:7b:10:94:d5:75:f4:
a5:94:50:fc:33:3c:26:33:cf:10:4a:97:6b:b8:5e:99:32:ca:
2f:f4:0c:14:54:52:e9:0f:70:aa:89:f5:6b:c8:ae:32:b1:28:
e9:a2:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:46 2026 by rpki-client