Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa
File: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (raw, json)
Hash identifier: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=
Subject key identifier: 5F:74:CE:5F:13:D6:5F:39:41:68:46:7A:C7:9C:55:25:5D:06:37:68
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A01AFC29337AB9511B159FAD0A5C4D10A0
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa
Signing time: Wed 19 Aug 2026 17:05:28 +0000
ROA not before: Wed 19 Aug 2026 17:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 5.252.22.0/24 maxlen: 24
5.252.23.0/24 maxlen: 24
2a0b:ec82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:fc:29:33:7a:b9:51:1b:15:9f:ad:0a:5c:4d:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 19 17:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f74ce5f13d65f394168467ac79c55255d063768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:1d:86:e2:70:f0:30:52:4a:3b:98:07:8d:
b2:cc:5c:1b:da:ee:12:cb:f9:0e:5b:46:da:b8:ca:
d2:3e:9a:51:70:eb:af:49:75:9a:76:4b:50:35:b6:
47:68:34:3f:1b:ba:1b:6e:62:21:ab:55:f8:67:18:
4b:c4:53:a1:ac:04:5d:93:f5:af:aa:49:4c:98:73:
ee:3b:9d:8b:c5:66:78:08:90:32:a1:b0:d1:00:fd:
a4:94:66:9a:bb:dd:df:b8:61:59:23:10:c1:52:fd:
6e:e8:f0:1b:ee:48:25:18:a7:a0:dd:ba:c8:f0:16:
f7:da:a6:c8:05:eb:4a:ea:d7:a2:cf:99:6a:ce:3b:
88:e8:87:70:8e:ad:46:c9:91:7f:57:71:04:b6:76:
0b:a7:4c:fd:48:d1:77:d1:a6:1c:38:0c:cc:e8:0e:
3a:82:4b:9d:b6:e2:fb:2f:51:f9:23:a3:8e:c3:c4:
05:32:df:46:c9:57:5e:d2:8a:33:73:7c:9f:d1:4c:
18:fd:4d:0f:bc:2b:35:d1:83:60:1a:42:7c:fd:1b:
ef:df:d5:89:c2:94:74:80:ad:a4:02:cc:0f:e8:2d:
59:2a:78:f3:3e:70:09:e4:1f:a8:28:ae:7d:14:04:
e4:83:b9:3b:4c:6f:43:9e:94:e0:35:02:83:68:9e:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:CE:5F:13:D6:5F:39:41:68:46:7A:C7:9C:55:25:5D:06:37:68
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.22.0/23
IPv6:
2a0b:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
88:b9:76:d6:01:16:e0:f0:52:88:41:b0:6a:48:88:11:46:06:
de:f4:a5:38:b1:31:c2:7c:73:ea:ef:4d:d8:0d:00:0e:df:b1:
88:08:65:d7:cc:e7:b4:d2:a4:d4:be:f2:8b:2f:d6:7b:37:7e:
69:e5:3a:6f:62:2e:27:7f:58:dc:60:f1:5c:52:cb:44:e9:9e:
43:8a:a8:c3:88:2e:37:9c:16:72:80:53:60:15:05:82:60:4d:
de:a6:52:78:40:d3:2f:e8:59:1f:6a:59:bf:f3:f9:63:01:8b:
62:72:d4:c4:75:25:f3:b4:f7:5d:26:ab:74:a3:75:41:e8:fe:
d3:c5:b9:70:24:ef:31:5b:6e:01:5a:86:b2:77:e9:95:cc:a4:
fb:de:f0:63:30:79:98:ee:ed:7a:ca:ae:93:a5:dd:21:7a:37:
7c:d1:15:d9:d5:38:4b:a3:bc:a2:cc:06:05:b5:aa:63:3c:fa:
01:3a:6e:70:64:35:28:14:b1:63:e5:8c:e2:59:29:cb:2d:74:
59:19:1c:95:fb:5c:73:9f:af:87:a9:22:3f:f1:f8:f3:24:54:
c0:c4:73:ef:ca:78:01:a2:18:dd:aa:43:a0:04:88:63:42:79:
69:4c:a8:19:92:05:52:08:e9:5e:8e:4f:6e:bd:49:5d:4e:80:
c0:09:dc:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaAa/CkzerlRGxWfrQpcTRCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjYwODE5MTcwNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjc0Y2U1ZjEzZDY1ZjM5NDE2ODQ2N2FjNzljNTUyNTVkMDYzNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNUdhuJw8DBSSjuYB42yzFwb2u4S
y/kOW0bauMrSPppRcOuvSXWadktQNbZHaDQ/G7obbmIhq1X4ZxhLxFOhrARdk/Wv
qklMmHPuO52LxWZ4CJAyobDRAP2klGaau93fuGFZIxDBUv1u6PAb7kglGKeg3brI
8Bb32qbIBetK6teiz5lqzjuI6Idwjq1GyZF/V3EEtnYLp0z9SNF30aYcOAzM6A46
gkudtuL7L1H5I6OOw8QFMt9GyVde0oozc3yf0UwY/U0PvCs10YNgGkJ8/Rvv39WJ
wpR0gK2kAswP6C1ZKnjzPnAJ5B+oKK59FATkg7k7TG9DnpTgNQKDaJ4+7QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF90zl8T1l85QWhGesecVSVdBjdoMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvWDNUT1h4UFdYemxCYUVaNng1eFZKVjBHTjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBBfwWMA0E
AgACMAcDBQAqC+yCMA0GCSqGSIb3DQEBCwUAA4IBAQCIuXbWARbg8FKIQbBqSIgR
Rgbe9KU4sTHCfHPq703YDQAO37GICGXXzOe00qTUvvKLL9Z7N35p5TpvYi4nf1jc
YPFcUstE6Z5DiqjDiC43nBZygFNgFQWCYE3eplJ4QNMv6Fkfalm/8/ljAYtictTE
dSXztPddJqt0o3VB6P7TxblwJO8xW24BWoayd+mVzKT73vBjMHmY7u16yq6Tpd0h
ejd80RXZ1ThLo7yizAYFtapjPPoBOm5wZDUoFLFj5YziWSnLLXRZGRyV+1xzn6+H
qSI/8fjzJFTAxHPvyngBohjdqkOgBIhjQnlpTKgZkgVSCOlejk9uvUldToDACdx5
-----END CERTIFICATE-----
Generated at Mon Aug 24 20:55:55 2026 by rpki-client