Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/xkglo0MgpXeki5u8G7Zx40WueBw.roa
File: xkglo0MgpXeki5u8G7Zx40WueBw.roa (raw, json)
Hash identifier: P+lJK2YdwGnO2Q6H6+1l2oB4XSkWxXFQgilewZp5utI=
Subject key identifier: C6:48:25:A3:43:20:A5:77:A4:8B:9B:BC:1B:B6:71:E3:45:AE:78:1C
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019C763297F02F9C370ACCE21041EDA4BD67
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/xkglo0MgpXeki5u8G7Zx40WueBw.roa
Signing time: Thu 19 Feb 2026 13:59:13 +0000
ROA not before: Thu 19 Feb 2026 13:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 85.137.248.0/23 maxlen: 24
91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f45::/32 maxlen: 32
2a0f:5f46::/32 maxlen: 32
2a0f:5f46:700::/40 maxlen: 40
2a0f:5f46:800::/40 maxlen: 40
2a0f:5f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:32:97:f0:2f:9c:37:0a:cc:e2:10:41:ed:a4:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Feb 19 13:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c64825a34320a577a48b9bbc1bb671e345ae781c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:d5:c4:9a:40:0c:ce:09:11:a8:87:17:d5:
5b:14:b4:a5:79:4e:1a:72:3e:7d:a4:00:3a:d8:21:
92:ee:ea:00:8f:53:f1:40:cb:4e:af:4d:a0:b1:c1:
49:8e:c7:b1:3b:e2:7d:93:78:43:73:cc:45:f5:7f:
26:e5:36:2f:f3:5a:f5:77:c0:ac:8d:3e:5d:86:ae:
93:d9:3d:51:9d:79:c1:b9:4d:ec:df:b1:77:90:18:
c0:b3:2a:e9:b6:92:e8:03:87:8b:81:13:23:e9:7b:
a9:27:39:bd:f5:28:40:c6:6d:3f:16:ce:1a:6e:b5:
1a:bd:6a:f3:d1:14:5b:94:39:53:c1:40:e7:d6:dd:
0b:c0:e8:8a:c1:2c:e1:cf:fc:7e:63:41:64:6c:8a:
e1:7c:be:65:15:b7:41:6a:50:78:eb:37:26:35:54:
4e:0c:2f:5e:e3:78:23:a7:94:e7:43:8a:82:ea:ea:
b1:c8:85:7c:9f:74:b4:4c:79:35:cd:1e:7f:4c:d3:
92:c3:c6:51:0f:28:c6:71:ba:2a:df:33:91:22:dd:
63:63:04:cb:78:dc:8b:af:ca:90:f6:f2:4a:cf:6a:
c0:6b:a9:88:8b:a5:ff:4d:e7:50:50:d6:ee:ff:dc:
4d:71:54:66:5f:5e:6e:44:90:ba:5a:d4:1d:db:f0:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:25:A3:43:20:A5:77:A4:8B:9B:BC:1B:B6:71:E3:45:AE:78:1C
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/xkglo0MgpXeki5u8G7Zx40WueBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.248.0/23
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
5b:b6:a6:c7:a8:05:20:db:6d:27:43:28:9d:06:0e:49:12:77:
cc:cb:ad:06:65:3d:80:8b:47:18:6c:8f:6b:3e:6e:db:c9:c2:
88:10:c3:46:10:4f:4c:00:1c:9b:07:3a:bb:c3:a9:c2:4f:cc:
df:23:cb:34:3e:25:e1:e7:10:46:84:06:8b:f6:c8:fa:dc:a6:
e8:db:9d:91:9e:68:dd:85:78:b1:bb:3c:fe:f2:48:28:b2:72:
5e:95:fd:e3:fa:ed:52:f3:4e:b6:23:6b:91:a4:b5:61:98:8f:
ee:c8:9d:f6:87:5d:be:8c:52:bf:e8:df:2f:d2:86:1d:b2:56:
7f:5c:5f:21:e6:47:b5:80:fc:d1:db:1c:93:8b:24:4d:7a:86:
a9:49:56:4f:ef:a3:4d:70:c8:18:c0:0f:15:01:5d:87:84:8d:
72:3b:e6:8a:a6:5c:e0:a7:34:40:02:dd:c0:a3:c7:cd:c2:58:
03:69:46:8c:45:64:40:9a:c0:18:47:d1:b7:b1:8c:62:aa:eb:
75:f2:44:ab:ca:74:77:a3:e0:86:02:f3:8a:24:73:61:f4:4f:
0f:73:23:11:37:bc:7a:48:51:09:8b:bf:11:b0:19:cc:29:fd:
97:37:97:6e:db:18:40:91:b1:23:fa:73:15:b7:bf:12:42:ee:
23:c7:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:36 2026 by rpki-client