Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/XbyXTy2eUaONfFWw8BChIBWa36M.roa
File: XbyXTy2eUaONfFWw8BChIBWa36M.roa (raw, json)
Hash identifier: xn0X7nDb94H6uKDvSt+XEo1r5ooPCWsDBnVyrR9GWjM=
Subject key identifier: 5D:BC:97:4F:2D:9E:51:A3:8D:7C:55:B0:F0:10:A1:20:15:9A:DF:A3
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01A09F11514EEA74AC87646A2C161B96F702
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/XbyXTy2eUaONfFWw8BChIBWa36M.roa
Signing time: Mon 14 Sep 2026 08:38:27 +0000
ROA not before: Mon 14 Sep 2026 08:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.254.177.0/24 maxlen: 24
46.254.178.0/24 maxlen: 24
185.34.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:11:51:4e:ea:74:ac:87:64:6a:2c:16:1b:96:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Sep 14 08:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dbc974f2d9e51a38d7c55b0f010a120159adfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:33:9e:c9:10:e7:6e:46:61:85:33:44:f7:
a6:65:4c:7f:62:8a:85:75:5c:a6:e2:48:ec:78:a9:
dc:21:1e:58:b8:f5:b4:71:c0:c9:5b:58:29:7d:46:
6a:68:ae:53:f1:5e:f3:e1:9e:a3:63:e4:39:b9:06:
b4:6a:a9:5a:00:d7:74:f4:5d:8e:84:c0:23:12:c0:
ee:23:17:ee:d9:38:15:73:62:d8:35:3f:a6:15:cf:
6d:0e:32:d6:67:3e:4c:65:c5:4b:95:80:bc:f3:b7:
03:a6:c0:07:25:1f:23:d8:0d:d1:b5:d2:ae:7b:bf:
ad:9e:ad:0e:79:8c:5b:55:f5:d3:68:52:26:8b:6a:
b6:f5:0f:c7:ec:7e:b7:1a:0b:ab:31:19:46:ad:55:
6d:0b:1a:ff:c8:df:14:17:75:31:70:9c:e0:54:6e:
27:aa:d7:26:d7:58:db:79:07:ef:ff:ff:b6:66:b4:
e0:85:64:82:89:92:00:97:f0:06:79:2d:fa:1a:5f:
88:ab:9b:b5:d8:84:24:9a:77:2e:4e:57:00:b2:f6:
52:25:57:fe:cf:48:24:72:2f:6a:0f:c3:5f:70:6b:
2b:6c:59:b0:4a:d3:69:d1:a6:07:27:35:1d:39:09:
76:c6:fa:34:0f:ed:b3:f4:9e:57:30:ef:78:c9:0f:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:97:4F:2D:9E:51:A3:8D:7C:55:B0:F0:10:A1:20:15:9A:DF:A3
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/XbyXTy2eUaONfFWw8BChIBWa36M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.177.0-46.254.178.255
185.34.85.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b8:cf:c6:29:39:99:c5:51:3b:49:ee:13:8d:69:72:35:52:
9c:21:1b:fb:58:20:87:c2:7b:f3:02:be:7d:43:a7:0e:51:a2:
0a:69:c5:76:89:b1:7d:b0:03:ab:54:df:73:2b:c0:d9:5d:03:
23:d3:79:6c:97:d8:8a:a9:4e:36:b5:f0:38:53:ed:0b:02:ef:
61:9b:f9:eb:e6:99:cc:44:bd:b4:ad:62:f3:e6:5b:72:69:d1:
b6:24:de:e3:14:9a:c0:89:2a:4f:0c:55:b4:cd:2c:54:12:27:
40:8d:59:da:7e:54:35:e5:51:c2:3f:2b:81:cd:56:f2:71:15:
af:2b:74:7f:a3:7f:c0:a4:9e:07:f2:22:c1:0d:93:25:76:9c:
27:d3:28:52:a9:03:8b:51:d4:ef:eb:e0:80:ca:3f:24:9f:92:
30:c0:ea:5f:99:f5:5b:50:c8:c9:d0:fc:52:9d:d9:2f:24:5a:
ea:82:e2:b8:1c:92:25:ff:fc:de:be:20:6b:b5:e9:cf:86:f9:
b9:f7:39:05:8c:de:bb:a3:97:78:f9:f3:d2:5a:30:78:5c:f9:
71:4d:bd:e3:40:3d:54:af:9f:41:9e:6b:f7:5e:be:36:cd:f8:
f9:2d:99:dc:18:f6:ab:60:68:2f:7e:c4:b9:e8:c7:30:bd:ae:
ca:3b:a7:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:32 2026 by rpki-client