Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XRIK_iheeysmZRsw8NH6YZIHOvw.roa
File: XRIK_iheeysmZRsw8NH6YZIHOvw.roa (raw, json)
Hash identifier: E5c5wt3RU8bDXWMF3Y/he4fLEUDj6JyHUZ+vqbQsYrc=
Subject key identifier: 5D:12:0A:FE:28:5E:7B:2B:26:65:1B:30:F0:D1:FA:61:92:07:3A:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FA802EA21D40BA4E1DD9033BEBBBD17F4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XRIK_iheeysmZRsw8NH6YZIHOvw.roa
Signing time: Tue 28 Jul 2026 09:16:31 +0000
ROA not before: Tue 28 Jul 2026 09:16:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 162.35.238.0/23 maxlen: 23
162.35.240.0/23 maxlen: 23
162.35.250.0/23 maxlen: 23
162.35.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:02:ea:21:d4:0b:a4:e1:dd:90:33:be:bb:bd:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 28 09:16:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d120afe285e7b2b26651b30f0d1fa6192073afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:d9:08:9a:b6:0a:42:98:50:31:de:1f:84:
c1:43:01:24:01:2d:31:5c:18:2a:f9:ef:11:14:1d:
c2:7d:e6:9c:00:c6:0f:52:59:82:74:5d:fc:2b:b5:
fb:ef:fd:04:ca:ad:64:f9:ae:d6:88:b6:1e:a8:44:
b0:2f:68:e7:83:c8:79:01:93:c6:b8:35:91:fe:b2:
de:d2:38:ba:d5:d6:10:29:c5:8f:0c:12:62:03:d2:
5d:fa:78:4a:7e:e7:1a:3e:6b:26:c4:ca:4d:1d:65:
a8:d8:e0:90:f1:87:ee:75:c1:5a:fd:f6:dd:af:9e:
08:2c:61:41:98:34:a2:94:94:68:bf:46:2a:f3:85:
3f:26:f0:d9:8f:69:bb:45:8e:9e:71:33:94:96:14:
10:29:7c:8b:80:6f:77:04:10:b8:8f:c1:19:a1:9c:
b3:28:c2:65:69:50:be:da:7e:04:6e:9c:3c:a5:0d:
fb:10:88:5d:da:0b:30:50:f1:ff:8b:5b:9f:91:04:
b5:41:b9:ff:a6:6d:3e:59:a6:6d:0d:31:5c:92:1b:
63:07:a5:5d:00:6f:61:8c:83:8a:8f:47:20:e4:58:
c7:dc:86:b6:05:ef:d4:f3:7c:01:be:43:43:b9:49:
8f:8a:1e:45:46:13:76:30:59:c2:23:a0:55:94:7b:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:0A:FE:28:5E:7B:2B:26:65:1B:30:F0:D1:FA:61:92:07:3A:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XRIK_iheeysmZRsw8NH6YZIHOvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.35.238.0-162.35.241.255
162.35.250.0/23
162.35.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:9c:a2:0d:9c:7c:42:35:5a:e5:32:32:41:58:ea:dc:d3:90:
b7:c1:bb:3d:cd:00:51:3c:cf:67:99:27:27:78:14:f5:ca:05:
7e:ac:c4:0e:5d:3c:78:97:ff:fd:4b:d1:e2:54:ee:ea:4a:bf:
fc:bf:e7:2b:79:44:d9:d0:c3:1a:ea:af:43:f2:ba:d5:ab:87:
4d:43:33:30:30:cc:21:3c:86:1f:d4:a4:c5:cc:4b:e1:b2:39:
4a:e0:6a:5a:5a:0d:55:7c:30:6f:54:41:b6:00:d5:77:fc:84:
69:36:99:08:69:35:62:5b:0b:4c:ac:b7:4d:cf:a8:f2:cc:42:
d2:b5:ee:7a:1c:f8:1b:0c:82:be:a3:f1:f9:88:cb:cf:9c:55:
e8:7e:b5:63:be:bf:b9:3c:09:9f:55:b9:94:6c:a7:5e:ed:34:
c5:a0:fd:63:ca:de:70:e6:d0:bd:6c:e9:52:20:ec:9a:b0:12:
65:7a:e5:d4:9e:c0:16:0f:73:ae:25:23:50:9e:5c:2f:b1:a7:
62:c9:8b:4d:c7:e8:36:ed:22:45:03:85:65:a5:e6:22:04:9c:
58:dd:03:42:40:f8:1b:3e:37:62:ed:43:f4:1f:91:1b:51:f7:
fb:e8:b9:ef:c5:07:4f:de:02:87:2e:3a:54:bd:54:89:76:3e:
0f:66:d1:ba
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ+oAuoh1Auk4d2QM767vRf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNzI4MDkxNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDEyMGFmZTI4NWU3YjJiMjY2NTFiMzBmMGQxZmE2MTkyMDczYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2bZCJq2CkKYUDHeH4TBQwEkAS0x
XBgq+e8RFB3CfeacAMYPUlmCdF38K7X77/0Eyq1k+a7WiLYeqESwL2jng8h5AZPG
uDWR/rLe0ji61dYQKcWPDBJiA9Jd+nhKfucaPmsmxMpNHWWo2OCQ8YfudcFa/fbd
r54ILGFBmDSilJRov0Yq84U/JvDZj2m7RY6ecTOUlhQQKXyLgG93BBC4j8EZoZyz
KMJlaVC+2n4Ebpw8pQ37EIhd2gswUPH/i1ufkQS1Qbn/pm0+WaZtDTFckhtjB6Vd
AG9hjIOKj0cg5FjH3Ia2Be/U83wBvkNDuUmPih5FRhN2MFnCI6BVlHsI3QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFF0SCv4oXnsrJmUbMPDR+mGSBzr8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWFJJS19paGVleXNtWlJzdzhOSDZZWklIT3Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAGiI+4D
BAGiI/ADBAGiI/oDBAGiI/4wDQYJKoZIhvcNAQELBQADggEBABucog2cfEI1WuUy
MkFY6tzTkLfBuz3NAFE8z2eZJyd4FPXKBX6sxA5dPHiX//1L0eJU7upKv/y/5yt5
RNnQwxrqr0PyutWrh01DMzAwzCE8hh/UpMXMS+GyOUrgalpaDVV8MG9UQbYA1Xf8
hGk2mQhpNWJbC0yst03PqPLMQtK17noc+BsMgr6j8fmIy8+cVeh+tWO+v7k8CZ9V
uZRsp17tNMWg/WPK3nDm0L1s6VIg7JqwEmV65dSewBYPc64lI1CeXC+xp2LJi03H
6DbtIkUDhWWl5iIEnFjdA0JA+Bs+N2LtQ/QfkRtR9/voue/FB0/eAocuOlS9VIl2
Pg9m0bo=
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:17 2026 by rpki-client