Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/xxw4g7IqAMokWvpsEpsZbBAYs0I.roa
File: xxw4g7IqAMokWvpsEpsZbBAYs0I.roa (raw, json)
Hash identifier: /LwhAx0DNt5cAADOZVhtgoYOlUHNGAj6EwLSIPsc/p0=
Subject key identifier: C7:1C:38:83:B2:2A:00:CA:24:5A:FA:6C:12:9B:19:6C:10:18:B3:42
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 019B7F82F284D0EA5A2239AC8E45677781DC
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/xxw4g7IqAMokWvpsEpsZbBAYs0I.roa
Signing time: Fri 02 Jan 2026 16:20:46 +0000
ROA not before: Fri 02 Jan 2026 16:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204175
IP address blocks: 185.219.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:f2:84:d0:ea:5a:22:39:ac:8e:45:67:77:81:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 16:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c71c3883b22a00ca245afa6c129b196c1018b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:30:9c:b8:47:1c:8f:2c:94:ab:0f:43:5a:
4e:1a:6e:74:1a:74:c6:f2:39:e0:e6:98:b4:7c:26:
bb:c4:3a:e2:32:2e:00:5f:2d:16:b5:b2:f7:42:aa:
47:25:22:e9:2c:8f:be:5a:30:56:aa:88:d3:69:31:
30:02:a2:f5:97:3f:58:d5:de:77:c4:93:ef:1f:e6:
24:4d:37:aa:fd:b8:85:1d:06:28:2a:61:94:82:34:
63:36:3a:63:7b:ab:28:cf:07:1b:0e:1c:a6:99:1f:
56:f3:ec:fe:50:31:8e:4a:3c:2f:30:87:f7:ff:50:
de:ae:7f:49:1e:a5:73:d7:d5:72:d2:d5:be:7f:30:
99:bc:78:f9:ec:70:51:a4:14:8a:ee:77:4b:a6:17:
3c:a9:de:25:40:0d:ec:5d:8d:aa:ce:c2:1a:de:bd:
2e:f8:3e:d9:b4:07:42:97:b3:d3:74:ab:98:36:31:
11:63:5a:0b:00:c3:ee:a9:35:5d:f9:c8:65:c5:e2:
a9:98:78:36:ff:a5:0c:bc:9d:82:66:9d:1c:4e:c6:
dd:84:01:83:d4:eb:a6:ed:21:01:6e:50:a6:1b:40:
0a:70:b3:4c:3a:8d:45:db:cb:fd:32:8b:88:d4:01:
ad:be:f6:6b:3e:fb:ca:8e:f7:82:51:9c:4b:d3:9c:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1C:38:83:B2:2A:00:CA:24:5A:FA:6C:12:9B:19:6C:10:18:B3:42
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/xxw4g7IqAMokWvpsEpsZbBAYs0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:21:cf:8f:79:29:0a:de:c9:84:f6:87:01:85:b9:53:c2:95:
10:ac:11:55:38:15:c1:57:96:da:ca:31:2e:a7:4e:1c:b5:0f:
6c:d1:94:fd:4d:9f:6e:3b:f6:85:c2:22:0b:76:83:30:5a:0d:
18:d6:4d:c4:5a:d2:4d:f7:20:8d:a1:64:a7:e1:90:1f:a8:2f:
ef:77:43:43:00:7f:b3:2a:8e:43:4d:85:15:0d:91:c1:25:0c:
b3:d3:b2:18:a1:b4:61:d1:ef:45:e6:cb:f2:79:d4:f1:e4:d6:
d5:e3:fe:c8:d8:a2:fe:88:df:ea:47:df:7c:f5:25:6f:f4:23:
c6:53:fa:15:27:c7:8d:70:d5:b7:2e:71:29:21:cd:6b:85:48:
1d:8c:ce:1d:be:81:29:2b:6a:62:18:c3:21:51:67:32:44:f0:
97:f1:eb:ab:ca:a9:bb:9d:00:d9:30:43:d7:9a:51:03:05:94:
3c:44:a3:04:67:e0:64:0c:38:81:02:18:33:fe:30:45:0c:81:
47:62:18:1e:d5:11:81:aa:6d:fc:db:3d:bb:a6:61:07:bc:63:
36:e4:43:fe:06:4b:f8:e0:83:01:41:44:6c:a6:76:96:d6:5d:
6c:ed:9b:e8:e5:de:21:b8:4f:33:e9:37:12:36:38:7b:ea:1b:
70:03:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:09 2026 by rpki-client