Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/XJya-NN--kVHLC8Eeq45UT2PGho.roa
File: XJya-NN--kVHLC8Eeq45UT2PGho.roa (raw, json)
Hash identifier: u0qg1SxkbakG4KokOoISrPOk++v8JDawI8U08mxXhpk=
Subject key identifier: 5C:9C:9A:F8:D3:7E:FA:45:47:2C:2F:04:7A:AE:39:51:3D:8F:1A:1A
Certificate issuer: /CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Certificate serial: 019F236888228C71D298BFAE7D0921EAB3FF
Authority key identifier: 8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/XJya-NN--kVHLC8Eeq45UT2PGho.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197190
IP address blocks: 185.209.216.0/24 maxlen: 24
185.209.217.0/24 maxlen: 24
185.209.218.0/24 maxlen: 24
185.209.219.0/24 maxlen: 24
2a0b:5240::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:22:8c:71:d2:98:bf:ae:7d:09:21:ea:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c9c9af8d37efa45472c2f047aae39513d8f1a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:25:5d:46:3b:0d:9a:57:24:dc:33:2d:ed:
d9:36:17:b5:4a:15:64:cf:ca:29:b9:8a:e7:e0:e2:
9a:b4:81:da:a9:b2:15:5b:8c:fe:d7:4d:d1:cd:73:
76:34:85:b3:fa:0e:cd:85:e0:6e:48:9b:44:1a:6e:
11:f3:86:8f:32:e3:b6:59:e5:2c:9e:e2:b2:9a:09:
2a:17:4d:56:a0:33:1a:2a:96:3a:30:0d:38:96:5a:
6c:7b:35:85:74:c1:5b:62:81:f7:24:bc:e1:b8:d5:
2b:26:2c:a6:a5:3d:92:df:8c:0b:6a:ea:20:e0:a7:
70:2a:e6:58:91:e9:f5:5c:78:b8:aa:21:f5:a2:d2:
b9:ae:82:7c:89:18:8d:8f:e7:ed:04:d6:46:e5:4e:
ce:c3:5a:18:2e:ea:7e:1a:5e:a7:a6:b2:a6:f9:89:
52:73:9f:d6:36:6e:6f:2a:35:3f:86:a6:87:b4:e8:
79:9d:e6:43:3c:83:77:c2:1e:8e:15:79:6a:6a:11:
30:08:64:2d:f6:9a:f8:99:ca:e4:f8:88:c0:23:76:
a2:4b:42:69:c8:17:23:28:b7:80:2f:58:99:77:d1:
53:5c:c0:28:8e:6b:b9:ce:a4:7a:8b:73:4d:9d:2c:
2c:32:21:8c:c7:b4:2c:28:66:0b:bd:d2:f1:40:e1:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9C:9A:F8:D3:7E:FA:45:47:2C:2F:04:7A:AE:39:51:3D:8F:1A:1A
X509v3 Authority Key Identifier:
keyid:8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/XJya-NN--kVHLC8Eeq45UT2PGho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.216.0/22
IPv6:
2a0b:5240::/29
Signature Algorithm: sha256WithRSAEncryption
42:c0:8f:3b:8d:c0:b3:20:ba:f1:a3:12:f5:92:14:4a:91:e6:
64:6c:7c:2f:81:ac:6a:dd:26:c3:9d:61:d6:51:05:1e:74:fb:
d8:9d:4f:af:1f:db:8a:54:eb:cc:8e:a2:a7:eb:bc:34:f9:a2:
ef:70:25:35:9c:8c:59:4d:56:14:fd:d8:b3:ed:3e:4a:be:f0:
ec:52:af:27:46:9f:fc:a8:9a:64:bc:38:33:57:89:2c:e9:37:
14:12:d5:37:cf:2a:e3:97:ec:0b:8c:6c:37:8d:9b:6f:2f:cd:
4c:3a:82:0a:26:70:54:12:76:a5:c8:2b:0b:9e:86:74:04:73:
cc:31:24:7b:4f:b0:8d:f5:75:0a:af:18:8a:ad:c1:77:49:b0:
ec:11:83:53:7c:ee:35:9a:17:d4:67:65:f3:49:68:57:a5:51:
72:33:ce:64:e5:ee:cb:23:0e:e9:3a:98:19:15:53:ec:88:8d:
11:d7:5d:b5:ee:c4:b6:da:cf:10:99:de:3e:e4:de:5e:10:be:
40:00:98:c3:bb:03:0f:e0:d8:02:67:b3:8e:d9:80:2f:b7:7b:
7d:dd:0e:71:00:c4:1f:1b:69:72:72:ba:27:10:2b:99:6f:6d:
ba:48:59:5d:c2:9f:ad:90:6e:7a:62:85:15:c6:6b:d7:3d:1d:
24:f3:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:36 2026 by rpki-client