Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/xc0me2KbQgULMNxKZvuhScRUfCs.roa
File: xc0me2KbQgULMNxKZvuhScRUfCs.roa (raw, json)
Hash identifier: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=
Subject key identifier: C5:CD:26:7B:62:9B:42:05:0B:30:DC:4A:66:FB:A1:49:C4:54:7C:2B
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019C8A85C091F9C4B8147757C9E6A4A829A0
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/xc0me2KbQgULMNxKZvuhScRUfCs.roa
Signing time: Mon 23 Feb 2026 12:42:27 +0000
ROA not before: Mon 23 Feb 2026 12:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206091
IP address blocks: 185.196.176.0/22 maxlen: 22
185.222.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:85:c0:91:f9:c4:b8:14:77:57:c9:e6:a4:a8:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Feb 23 12:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5cd267b629b42050b30dc4a66fba149c4547c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:21:1a:36:db:89:5d:9e:48:f0:37:e2:19:
3c:ab:23:54:4d:78:28:7f:1d:5c:33:a3:a2:75:61:
e3:50:b0:4d:24:1e:1e:5a:6a:14:97:27:69:5c:4e:
ed:38:aa:f2:bc:9a:97:1a:b8:a3:b8:0f:75:83:38:
95:b6:63:5b:ad:6a:8b:c8:60:9c:69:76:3f:47:89:
fd:00:73:87:e4:e1:7c:be:11:3b:22:33:ab:a9:60:
e0:7e:d4:ff:fe:d1:02:b1:ef:77:93:ac:04:98:5a:
18:87:91:24:18:60:0c:32:d0:0a:3e:ad:ff:40:50:
9c:2c:f6:5b:85:c1:77:98:33:c8:12:78:1d:a1:15:
e0:8f:03:2c:f7:2f:de:94:1d:01:a2:3f:a1:f9:b9:
03:af:5c:b0:4c:fe:58:1e:f8:d3:81:5d:d4:9f:92:
bf:09:d1:93:a4:c2:44:bb:06:18:26:72:ad:a0:55:
50:50:8f:29:93:5a:4a:da:3a:1c:3a:9e:8c:91:f2:
f8:6b:32:59:46:7b:27:92:ba:cc:9b:5a:28:46:06:
f7:e7:be:9a:c3:07:5a:b0:f6:9f:ed:80:0a:51:f0:
ac:cd:16:29:de:41:e1:b5:28:37:36:16:5d:ea:f1:
a9:38:40:79:1a:6f:a9:12:5d:c9:8b:0f:e6:9c:48:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:26:7B:62:9B:42:05:0B:30:DC:4A:66:FB:A1:49:C4:54:7C:2B
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/xc0me2KbQgULMNxKZvuhScRUfCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.176.0/22
185.222.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:f3:91:5f:98:76:95:cf:d8:02:0f:68:1f:39:ba:3d:4f:27:
f5:99:b7:8c:52:c7:20:97:f1:88:bc:e4:e8:8f:39:31:07:ed:
77:80:b4:56:c9:d8:39:4e:ad:d5:34:d5:43:f7:19:b1:be:87:
78:e8:a1:c9:03:dd:e0:c0:55:6e:72:38:7f:66:35:4f:ff:d1:
66:5c:bf:5d:1d:a4:a3:35:5f:61:60:e7:15:7f:5c:96:6b:55:
ef:46:4a:23:9e:a2:3d:87:9e:d9:d5:bd:3d:f4:da:9f:0d:11:
8e:cc:f3:0f:b5:d5:b2:35:34:b0:0a:19:95:2e:d9:cb:4a:01:
49:c3:90:c9:20:1e:2a:dd:c0:76:37:10:d8:6b:75:5a:4f:2f:
99:70:37:9a:d2:ea:88:29:27:4a:05:b0:47:9e:45:98:fa:45:
0c:9b:40:a0:6a:db:fb:90:85:e2:98:4a:00:8b:22:ee:0d:2e:
ac:51:82:f8:8a:e3:36:63:a0:c1:d0:4f:b1:bb:57:fe:70:79:
08:03:1c:82:1f:4f:e8:77:0c:21:36:5d:d8:68:63:66:a3:1e:
25:b7:5d:2f:4a:81:e9:13:51:e1:07:0f:50:b1:f4:c0:d4:86:
c0:97:a4:f5:73:e5:71:70:11:55:37:93:b0:e0:9e:de:e0:9b:
ac:16:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:58 2026 by rpki-client