Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/xh93hkfxe8bgt6fbWeG1Fsm6w2s.roa
File: xh93hkfxe8bgt6fbWeG1Fsm6w2s.roa (raw, json)
Hash identifier: sVyiO7XwHi1k0DQv4Q+V/bJvWNE6Q1wbk5l2LYkLoP4=
Subject key identifier: C6:1F:77:86:47:F1:7B:C6:E0:B7:A7:DB:59:E1:B5:16:C9:BA:C3:6B
Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial: 019B7B35D429EF96E7C6A879C29438F668B7
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/xh93hkfxe8bgt6fbWeG1Fsm6w2s.roa
Signing time: Thu 01 Jan 2026 20:18:03 +0000
ROA not before: Thu 01 Jan 2026 20:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51355
IP address blocks: 185.88.252.0/23 maxlen: 23
185.88.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:d4:29:ef:96:e7:c6:a8:79:c2:94:38:f6:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
Validity
Not Before: Jan 1 20:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c61f778647f17bc6e0b7a7db59e1b516c9bac36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:19:53:0f:80:98:2c:e4:af:49:db:56:d8:
c0:db:8f:20:6a:2e:22:66:ec:a8:77:13:b2:6d:d4:
8f:60:f9:d0:eb:1d:f4:e3:19:e9:f5:e2:9a:9b:47:
b6:f0:4c:88:21:54:c6:f3:98:8f:53:70:68:ce:46:
9a:00:e9:ff:10:d8:7a:26:76:b7:61:c1:cc:0b:b6:
d5:15:60:44:02:5a:89:7a:56:af:74:75:d3:33:cf:
33:98:57:22:1e:fc:04:15:41:cf:61:9a:24:bc:a3:
0a:95:e2:0d:f5:05:5b:a1:bf:14:92:19:52:b1:c9:
c1:9c:53:0e:97:a9:92:81:d4:50:84:ff:b8:f8:67:
a1:c2:0d:74:48:be:02:46:29:ca:ef:41:c5:0a:71:
17:a1:f5:e2:71:25:2c:a2:4b:25:e2:08:82:6d:8f:
c5:9e:26:22:80:9a:10:85:b9:47:a0:93:e3:00:1f:
9c:14:4a:cb:90:63:3f:de:79:9d:e5:f7:9c:6d:db:
4f:9d:1e:21:4b:4d:55:ba:ca:67:ea:12:28:81:8d:
17:d8:96:83:76:d9:85:f5:21:3f:bc:34:11:c1:ab:
c3:9b:78:a1:a6:c1:a0:ae:2a:66:14:ed:14:b1:85:
86:87:ce:84:86:9a:98:35:d0:4c:6b:d8:a3:6e:52:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:77:86:47:F1:7B:C6:E0:B7:A7:DB:59:E1:B5:16:C9:BA:C3:6B
X509v3 Authority Key Identifier:
keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/xh93hkfxe8bgt6fbWeG1Fsm6w2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:14:d1:8d:a3:c1:1c:b1:2c:f1:9c:98:59:e9:ed:63:0e:b8:
88:8e:2a:47:72:16:33:5f:f9:98:55:17:4a:6e:77:89:8e:35:
99:24:a8:0c:5b:de:08:a2:ae:6d:0a:45:e9:d9:9e:dd:fa:65:
fd:d0:cd:a4:82:b1:38:4e:44:66:6f:be:1d:65:f7:09:d9:b5:
2f:1d:e9:1f:15:55:32:a5:7c:12:2b:fc:ae:0f:03:83:5e:d3:
2d:9c:1d:de:d1:d7:dd:74:d6:7b:57:a0:50:bb:5c:0f:d0:23:
36:6d:05:fa:90:40:21:ec:7f:bd:99:c8:50:8a:6d:c2:ad:37:
9a:86:cb:ef:29:f4:17:3c:01:dc:d2:29:0f:4e:98:c7:fa:ff:
0a:a8:d0:2d:5d:95:f2:77:b2:0f:46:6e:e0:50:b5:63:f6:68:
26:29:d7:5a:13:98:c0:41:73:e7:1f:c0:8c:29:f9:f6:7e:29:
01:ba:21:7c:c5:0a:91:ad:8a:40:d6:a9:cd:0c:1c:3d:94:e3:
28:bc:f7:a7:11:a4:bf:99:c0:ca:1e:c1:64:3e:5f:8a:b5:f0:
b6:e3:df:df:db:48:23:f5:12:f5:8d:5c:3c:29:08:cb:61:90:
93:e9:34:e0:70:a0:4d:cd:22:f4:72:74:47:4b:69:09:f0:82:
f5:c4:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:05 2026 by rpki-client