Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Xh2eVCLOmh-b7dzcqXzhFXQY0XE.roa
File: Xh2eVCLOmh-b7dzcqXzhFXQY0XE.roa (raw, json)
Hash identifier: rT3BoHAE/71jjEpABQI+u7InkXN1Mn9nKrrh+Z9B8m8=
Subject key identifier: 5E:1D:9E:54:22:CE:9A:1F:9B:ED:DC:DC:A9:7C:E1:15:74:18:D1:71
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 019B7F82F15A27BC9982D42771ADCC342F2D
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Xh2eVCLOmh-b7dzcqXzhFXQY0XE.roa
Signing time: Fri 02 Jan 2026 16:20:46 +0000
ROA not before: Fri 02 Jan 2026 16:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3262
IP address blocks: 185.192.183.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
185.224.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:f1:5a:27:bc:99:82:d4:27:71:ad:cc:34:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 16:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e1d9e5422ce9a1f9beddcdca97ce1157418d171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:aa:b3:d7:20:8f:fd:22:d3:b7:88:64:ee:
8b:bf:01:89:ef:d8:c9:23:7a:76:11:2a:22:7e:3c:
a2:bf:15:7b:e4:7c:ac:28:b5:a0:3d:c3:e6:0f:6c:
0a:a8:64:b1:c4:f9:05:0e:d5:d5:88:ca:55:e5:c1:
e2:d8:f7:0b:e7:86:1e:d5:35:b6:8f:fb:a3:73:80:
18:21:5d:f7:1c:01:89:ff:7c:b2:07:a8:3f:33:92:
2a:a3:16:0e:3d:bc:ff:18:c6:48:9b:92:9e:8d:63:
ff:ee:dc:09:f7:16:b6:ad:4c:59:e9:f9:5e:2c:c6:
e5:fb:06:98:2c:7b:92:b3:cb:f1:69:93:1b:27:ab:
f0:9c:95:ff:47:8d:06:ec:68:12:df:88:34:2e:88:
20:19:8a:32:62:40:ac:35:15:79:f5:1a:34:e3:f6:
78:67:1e:73:cd:7e:19:92:13:e1:f5:a7:8b:2e:f8:
88:67:68:a6:eb:83:5d:94:41:6b:24:33:65:5c:e0:
2b:25:d8:12:6a:57:fe:1d:fc:c0:ff:31:0e:db:c1:
ba:5e:03:f4:96:12:5d:f9:d7:65:b8:4f:0e:98:5b:
e8:c3:6f:82:81:6f:dc:f1:8e:04:cd:d7:98:d8:14:
78:83:0c:b8:f2:c6:1f:c1:3c:fc:fc:44:aa:3f:62:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:9E:54:22:CE:9A:1F:9B:ED:DC:DC:A9:7C:E1:15:74:18:D1:71
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/Xh2eVCLOmh-b7dzcqXzhFXQY0XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.183.0/24
185.194.24.0/24
185.219.216.0/23
185.219.219.0/24
185.224.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1c:29:fc:8c:be:aa:84:49:55:c0:8d:a1:50:78:a0:e6:18:
2e:a5:b4:8b:22:b3:3b:8e:6d:cf:c6:8a:72:bb:5b:72:68:e3:
2b:eb:cc:3c:28:60:7f:dc:eb:73:26:4b:f2:3a:54:b1:92:18:
9b:80:47:10:bc:15:8a:d7:d8:a6:84:22:a4:c5:7c:05:d3:6f:
dd:3f:f0:0e:98:97:fb:ac:cb:47:6c:a6:f8:9c:0d:51:0a:89:
08:ac:b4:53:ee:fb:54:09:55:2c:9c:bc:35:e0:71:cc:01:24:
c1:76:79:76:e3:8d:d8:57:45:37:5e:2d:f7:32:b6:23:03:ec:
c6:25:7a:00:47:60:4d:6a:dc:84:13:a8:09:b0:ca:3b:b1:4b:
03:2f:ae:09:d3:27:9c:00:9d:6a:4e:78:31:f8:ac:e5:49:55:
d1:e8:79:15:74:ab:34:cf:55:65:ed:bb:8b:f6:c0:aa:8d:31:
5d:6a:78:1e:08:bf:d7:cb:23:3f:20:7d:a2:3c:8e:c4:f8:88:
88:a7:5c:06:d7:db:69:7f:dc:53:2c:7c:91:3b:cf:ae:7b:40:
05:e3:f5:f1:67:1b:18:09:50:b4:44:52:8b:d5:b5:19:96:5f:
a3:65:97:f2:19:9b:ca:57:97:62:09:4c:a6:a5:28:54:db:23:
36:a7:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:44 2026 by rpki-client