Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/xvx_URL_iIWOu_kwa4kcKqXxSiw.roa
File: xvx_URL_iIWOu_kwa4kcKqXxSiw.roa (raw, json)
Hash identifier: uzt29LotiQEdFTIzPwMsgOnQ8XXc4rrzo8Lphlxq3XY=
Subject key identifier: C6:FC:7F:51:12:FF:88:85:8E:BB:F9:30:6B:89:1C:2A:A5:F1:4A:2C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019E2D699CEF08128FBF7807E4FF7A3AD3D2
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/xvx_URL_iIWOu_kwa4kcKqXxSiw.roa
Signing time: Fri 15 May 2026 20:52:36 +0000
ROA not before: Fri 15 May 2026 20:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 178.159.64.0/22 maxlen: 22
178.159.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:69:9c:ef:08:12:8f:bf:78:07:e4:ff:7a:3a:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: May 15 20:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6fc7f5112ff88858ebbf9306b891c2aa5f14a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:96:16:e5:f7:10:ef:fd:6f:c2:6b:90:de:
a8:68:e9:1a:73:0b:4e:53:6a:59:fe:22:a5:67:83:
75:e5:fb:8d:1e:be:eb:7e:8e:71:2c:cf:34:ae:4a:
8f:32:6f:b1:3b:93:cf:8d:d5:ef:c6:e8:2b:38:4f:
3f:ca:69:c2:45:c8:e0:5e:71:0d:23:96:58:d3:dd:
99:80:3f:64:ac:9f:7e:f5:a4:dd:88:f6:d4:f4:c0:
b6:99:a9:95:4a:c8:d3:20:74:91:49:e4:94:7d:61:
3a:d6:49:70:54:7f:7a:e8:80:76:59:4f:b5:3f:a8:
4e:08:d4:6f:f5:f3:88:28:f4:e0:e1:8c:73:38:b4:
9b:fb:83:b4:47:5f:64:18:f0:4d:20:9f:b7:e8:a4:
74:2e:88:f3:b7:2d:dc:45:d6:36:69:18:f9:c7:bc:
bb:8c:82:75:24:d2:6d:92:53:7a:42:d1:5b:59:b6:
b6:0b:dc:b7:e4:bc:b7:55:52:a8:66:dc:15:5d:f5:
98:aa:6d:45:e0:ad:3f:24:56:63:f6:7d:4c:47:59:
55:35:8e:79:02:2f:e0:67:1f:8b:e6:67:58:03:b0:
85:83:70:09:ba:79:1b:d5:38:10:d3:2d:c7:c4:13:
77:59:28:31:99:ae:35:94:53:a4:26:67:7b:96:a6:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:7F:51:12:FF:88:85:8E:BB:F9:30:6B:89:1C:2A:A5:F1:4A:2C
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/xvx_URL_iIWOu_kwa4kcKqXxSiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.64.0/22
178.159.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:5a:1d:ff:d7:6d:c9:21:50:a7:53:c6:0c:77:f5:83:38:28:
09:84:cd:46:85:69:cf:65:49:97:76:73:6e:77:29:f7:d1:ed:
20:0a:9e:8c:bb:65:a0:57:5a:b6:f1:4c:fd:13:91:71:bc:2b:
0d:a2:3b:82:72:18:e5:e8:03:35:47:4d:2a:74:95:c1:aa:1d:
37:b9:af:0a:c0:64:cb:74:b0:84:3b:8c:94:f0:bd:2d:9a:ab:
a2:d4:54:39:09:4b:32:9f:62:1a:bf:3c:db:dd:2f:b8:b7:2c:
bc:c3:43:0a:8f:2e:0e:d6:5f:4b:66:45:b1:b6:ef:dd:85:08:
91:2b:61:cc:1f:63:c7:12:d5:08:c1:80:6c:6b:76:d4:48:f4:
37:8c:30:ad:4d:22:1e:18:4a:f7:58:02:7d:05:5f:ed:95:0f:
46:3b:51:27:bd:d0:eb:17:38:ce:10:94:a2:fa:1c:54:96:fa:
f8:e3:06:21:62:a6:91:26:02:4e:cb:f8:9c:c7:f3:7f:4b:24:
64:96:ea:e8:41:92:3d:1f:30:f9:d0:f2:65:97:ce:ef:bc:7f:
c2:dd:2b:5a:aa:21:58:69:79:b7:4a:98:1f:14:32:06:f8:25:
64:f8:a1:19:77:8a:3e:5f:c4:69:4f:1b:31:0d:16:08:16:dd:
11:1c:8b:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4taZzvCBKPv3gH5P96OtPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjYwNTE1MjA1MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmZjN2Y1MTEyZmY4ODg1OGViYmY5MzA2Yjg5MWMyYWE1ZjE0YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6maWFuX3EO/9b8JrkN6oaOkacwtO
U2pZ/iKlZ4N15fuNHr7rfo5xLM80rkqPMm+xO5PPjdXvxugrOE8/ymnCRcjgXnEN
I5ZY092ZgD9krJ9+9aTdiPbU9MC2mamVSsjTIHSRSeSUfWE61klwVH966IB2WU+1
P6hOCNRv9fOIKPTg4YxzOLSb+4O0R19kGPBNIJ+36KR0Lojzty3cRdY2aRj5x7y7
jIJ1JNJtklN6QtFbWba2C9y35Ly3VVKoZtwVXfWYqm1F4K0/JFZj9n1MR1lVNY55
Ai/gZx+L5mdYA7CFg3AJunkb1TgQ0y3HxBN3WSgxma41lFOkJmd7lqZjgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMb8f1ES/4iFjrv5MGuJHCql8UosMB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEveHZ4X1VSTF9pSVdPdV9rd2E0a2NLcVh4U2l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsp9AAwQC
sp9IMA0GCSqGSIb3DQEBCwUAA4IBAQBLWh3/123JIVCnU8YMd/WDOCgJhM1GhWnP
ZUmXdnNudyn30e0gCp6Mu2WgV1q28Uz9E5FxvCsNojuCchjl6AM1R00qdJXBqh03
ua8KwGTLdLCEO4yU8L0tmqui1FQ5CUsyn2Iavzzb3S+4tyy8w0MKjy4O1l9LZkWx
tu/dhQiRK2HMH2PHEtUIwYBsa3bUSPQ3jDCtTSIeGEr3WAJ9BV/tlQ9GO1EnvdDr
FzjOEJSi+hxUlvr44wYhYqaRJgJOy/icx/N/SyRkluroQZI9HzD50PJll87vvH/C
3StaqiFYaXm3SpgfFDIG+CVk+KEZd4o+X8RpTxsxDRYIFt0RHIvY
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:16 2026 by rpki-client