Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/xbuO7BsG7LbkSSQWawkvzIhK7y0.roa
File: xbuO7BsG7LbkSSQWawkvzIhK7y0.roa (raw, json)
Hash identifier: rlJz6+DJBLMlRi3myws4jEcOw9pVWqZGLHBQLp+0Ork=
Subject key identifier: C5:BB:8E:EC:1B:06:EC:B6:E4:49:24:16:6B:09:2F:CC:88:4A:EF:2D
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019D4D3B9E7E727CEEAA086BC3243296FE5A
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/xbuO7BsG7LbkSSQWawkvzIhK7y0.roa
Signing time: Thu 02 Apr 2026 08:07:25 +0000
ROA not before: Thu 02 Apr 2026 08:07:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204732
IP address blocks: 185.63.72.0/22 maxlen: 24
185.242.68.0/22 maxlen: 22
185.242.68.0/23 maxlen: 23
185.242.68.0/24 maxlen: 24
185.242.69.0/24 maxlen: 24
185.242.70.0/23 maxlen: 23
185.242.70.0/24 maxlen: 24
185.242.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:3b:9e:7e:72:7c:ee:aa:08:6b:c3:24:32:96:fe:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Apr 2 08:07:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5bb8eec1b06ecb6e44924166b092fcc884aef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:c3:66:28:84:38:5d:b2:08:84:6f:5f:b9:
53:cc:e1:e0:25:70:91:0d:3b:46:26:89:c3:13:fa:
a7:e3:a9:d8:3d:d0:f6:90:08:a5:38:5e:46:a9:d8:
b0:ec:d9:b4:11:cf:63:07:84:42:19:1d:e8:e5:e3:
b4:22:3c:7d:91:e5:17:aa:07:bc:fe:e0:4e:e2:a1:
c6:b6:d3:fe:f5:b3:5d:28:9c:6c:7d:98:c5:c5:f6:
12:fe:bb:b6:1e:89:19:10:3a:c5:5f:64:32:c4:c0:
0a:6e:45:d2:88:80:ac:1f:0e:c1:f4:bb:49:94:03:
2e:bc:8a:f9:87:54:9e:3c:31:33:25:27:ac:77:7e:
50:f2:bf:53:44:b9:16:8f:37:a0:8e:c0:d2:3d:7c:
f2:69:05:98:e1:f4:24:3a:57:ec:95:d4:22:c9:ee:
44:f9:ec:60:80:87:36:d5:d5:bb:00:78:80:c1:c1:
e3:87:21:7c:7a:91:fc:62:5b:62:e5:a6:f8:04:29:
c0:77:af:0b:d6:ed:a9:1b:e5:58:0c:9c:01:8d:8a:
a1:c6:1a:a5:06:39:c2:b5:2d:92:aa:31:86:00:ab:
a4:9c:27:15:26:a7:f9:eb:c5:94:13:a4:ab:6e:b1:
98:c4:ec:7d:6d:72:76:7b:47:96:78:fa:f1:63:08:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:8E:EC:1B:06:EC:B6:E4:49:24:16:6B:09:2F:CC:88:4A:EF:2D
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/xbuO7BsG7LbkSSQWawkvzIhK7y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.72.0/22
185.242.68.0/22
Signature Algorithm: sha256WithRSAEncryption
83:af:ea:0f:74:68:19:d4:62:30:37:8c:1e:3d:75:f0:d5:52:
cb:0a:d5:04:07:12:4c:a1:84:60:62:37:a0:2c:f6:ef:7f:3e:
b8:0e:17:3d:77:18:b2:84:47:26:06:37:29:96:77:76:3e:48:
38:4d:9d:27:34:36:3e:6f:97:94:e0:a5:dd:03:92:c3:2d:f7:
e5:7a:5f:21:b3:f5:5f:5b:c7:56:32:e3:0d:d4:61:d6:0c:5c:
94:f9:94:77:b4:d0:fe:07:31:26:1c:f9:53:b1:25:bd:2e:b0:
f5:30:91:09:6a:97:27:9a:9c:c4:82:25:53:7d:63:2f:66:fa:
02:79:be:0e:b7:0b:9d:d0:d0:9f:02:c5:59:86:07:f8:7a:00:
ad:b0:de:e2:14:99:da:93:c3:6a:1d:f0:60:e9:8e:be:66:cb:
63:5c:3b:e9:63:7a:22:bb:af:9d:bc:75:56:f7:7f:49:c7:b9:
22:11:7c:e9:73:94:d9:20:2c:58:08:18:ff:9f:04:b3:e7:69:
82:a9:70:52:f9:3a:91:4a:df:13:44:34:42:f3:52:08:63:b7:
c0:84:a8:f6:c0:69:ad:f6:00:e7:ac:34:ae:43:f2:16:e7:a2:
60:57:a7:ce:11:9b:aa:60:4d:96:8a:d5:0b:5d:a8:c2:79:94:
c7:b8:50:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1NO55+cnzuqghrwyQylv5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm
MDhiMjEwHhcNMjYwNDAyMDgwNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWJiOGVlYzFiMDZlY2I2ZTQ0OTI0MTY2YjA5MmZjYzg4NGFlZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF7DZiiEOF2yCIRvX7lTzOHgJXCR
DTtGJonDE/qn46nYPdD2kAilOF5Gqdiw7Nm0Ec9jB4RCGR3o5eO0Ijx9keUXqge8
/uBO4qHGttP+9bNdKJxsfZjFxfYS/ru2HokZEDrFX2QyxMAKbkXSiICsHw7B9LtJ
lAMuvIr5h1SePDEzJSesd35Q8r9TRLkWjzegjsDSPXzyaQWY4fQkOlfsldQiye5E
+exggIc21dW7AHiAwcHjhyF8epH8Ylti5ab4BCnAd68L1u2pG+VYDJwBjYqhxhql
BjnCtS2SqjGGAKuknCcVJqf568WUE6SrbrGYxOx9bXJ2e0eWePrxYwjD/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMW7juwbBuy25EkkFmsJL8yISu8tMB8GA1UdIwQY
MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct
N2U3NGE2YTk4ZWNkLzEveGJ1TzdCc0c3TGJrU1NRV2F3a3Z6SWhLN3kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk
LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuT9IAwQC
ufJEMA0GCSqGSIb3DQEBCwUAA4IBAQCDr+oPdGgZ1GIwN4wePXXw1VLLCtUEBxJM
oYRgYjegLPbvfz64Dhc9dxiyhEcmBjcplnd2Pkg4TZ0nNDY+b5eU4KXdA5LDLffl
el8hs/VfW8dWMuMN1GHWDFyU+ZR3tND+BzEmHPlTsSW9LrD1MJEJapcnmpzEgiVT
fWMvZvoCeb4Otwud0NCfAsVZhgf4egCtsN7iFJnak8NqHfBg6Y6+ZstjXDvpY3oi
u6+dvHVW939Jx7kiEXzpc5TZICxYCBj/nwSz52mCqXBS+TqRSt8TRDRC81IIY7fA
hKj2wGmt9gDnrDSuQ/IW56JgV6fOEZuqYE2WitULXajCeZTHuFDc
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:12 2026 by rpki-client