Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/xaE6oEHihOrtjkvRK_1V4azZswY.roa
File: xaE6oEHihOrtjkvRK_1V4azZswY.roa (raw, json)
Hash identifier: cn44PQLYN/GxRxe5m3e/DrX5cktQj1McqzgwUvrZa28=
Subject key identifier: C5:A1:3A:A0:41:E2:84:EA:ED:8E:4B:D1:2B:FD:55:E1:AC:D9:B3:06
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019EB205E6773E3548F6B308941394FFF42B
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/xaE6oEHihOrtjkvRK_1V4azZswY.roa
Signing time: Wed 10 Jun 2026 14:53:11 +0000
ROA not before: Wed 10 Jun 2026 14:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 87.58.202.0/24 maxlen: 24
87.58.217.0/24 maxlen: 24
150.251.139.0/24 maxlen: 24
150.251.146.0/23 maxlen: 24
150.251.153.0/24 maxlen: 24
150.251.154.0/24 maxlen: 24
150.251.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:05:e6:77:3e:35:48:f6:b3:08:94:13:94:ff:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jun 10 14:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5a13aa041e284eaed8e4bd12bfd55e1acd9b306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:35:eb:ed:ed:44:ed:ad:3a:db:3b:fc:79:
b7:06:49:4c:fb:eb:7d:3c:89:16:bb:9e:88:86:39:
82:2a:da:e1:4a:c4:e5:bf:86:de:79:1f:b2:de:cb:
bc:3b:dc:e4:58:34:89:fe:a8:bc:29:38:d7:1d:2b:
93:35:d3:8f:fc:3f:e7:f2:8c:82:4c:db:e1:3a:b9:
8e:6d:76:da:e4:9d:8b:37:c2:a3:dc:77:21:28:fa:
b2:3e:c1:60:cf:94:67:81:4b:3e:8b:11:18:26:36:
9d:5b:9d:8a:7c:14:17:3c:8f:c6:d2:ec:9a:e8:2e:
71:33:40:3e:49:ce:d4:58:9b:4b:06:98:1b:7b:ac:
7e:82:45:ec:ed:df:64:94:08:0d:1f:4d:d8:a7:55:
e0:f9:75:d9:e5:c3:a3:c1:2f:dc:fe:c3:02:50:f8:
ce:3b:c5:5a:ee:c9:f2:ba:da:4d:44:d4:78:5f:84:
91:cf:c1:9f:7e:55:6c:11:ca:53:00:dc:7a:df:16:
46:12:61:c8:fe:f9:59:41:15:17:c8:e1:6d:ec:46:
12:c4:14:dd:95:5c:16:30:e1:17:23:69:d1:9e:ed:
06:aa:ea:7c:4f:b4:25:d6:0d:4c:57:ec:f7:c8:02:
34:ef:59:3d:87:ae:b1:cf:86:aa:a5:8d:95:14:24:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:3A:A0:41:E2:84:EA:ED:8E:4B:D1:2B:FD:55:E1:AC:D9:B3:06
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/xaE6oEHihOrtjkvRK_1V4azZswY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.202.0/24
87.58.217.0/24
150.251.139.0/24
150.251.146.0/23
150.251.153.0-150.251.154.255
150.251.158.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9a:93:88:fc:de:eb:c5:68:71:51:17:4c:91:ef:97:f7:8a:
87:9e:ea:fc:d8:cc:79:91:a1:29:59:89:ae:e1:56:cb:c4:df:
34:11:bc:2b:a3:dd:9b:23:27:f4:47:d3:fa:75:4f:f6:b9:ee:
b8:e2:8f:76:a2:31:03:67:ec:d6:f1:63:77:d5:c5:32:17:cd:
31:51:f7:1c:3f:41:ac:e0:ab:16:b8:4b:9d:d6:bf:1c:9f:e3:
2a:b4:2b:60:dd:b0:0f:51:c2:eb:10:90:94:e6:24:eb:af:9f:
e2:30:bf:47:4a:6c:9e:9a:f5:6e:15:ee:5d:52:a9:c1:da:2d:
40:1e:4d:57:06:af:c5:4c:78:ff:9e:6f:0c:75:75:f7:b5:c6:
aa:dd:43:ef:c1:03:75:30:0e:9b:b5:ca:44:04:49:19:14:93:
14:db:8b:bc:27:76:fc:e6:d6:fa:3b:fb:e8:c4:7d:36:65:a7:
d3:7e:f7:5a:24:7d:4e:f6:05:a6:57:6f:2f:fa:13:e1:71:0b:
44:df:37:fd:6d:72:29:25:7b:e7:4d:6a:f7:24:3b:94:e8:62:
3d:3b:49:00:76:cf:54:f1:0b:c5:f1:38:9e:8a:0f:94:71:58:
8d:68:40:67:86:0c:39:b0:05:ac:62:ef:13:6f:08:13:7a:e4:
a3:94:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:38:28 2026 by rpki-client