Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XhPkj5uwQLO9W7v8z1ZpSityvzM.roa
File: XhPkj5uwQLO9W7v8z1ZpSityvzM.roa (raw, json)
Hash identifier: 5bzLLLENKl1NMULK1Ka2hY3sjEcYgRIgiylKSdOxRi8=
Subject key identifier: 5E:13:E4:8F:9B:B0:40:B3:BD:5B:BB:FC:CF:56:69:4A:2B:72:BF:33
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A5B21F64694B855808DE60695D4041E
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XhPkj5uwQLO9W7v8z1ZpSityvzM.roa
Signing time: Wed 14 Oct 2026 12:20:13 +0000
ROA not before: Wed 14 Oct 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a06:b3c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:5b:21:f6:46:94:b8:55:80:8d:e6:06:95:d4:04:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e13e48f9bb040b3bd5bbbfccf56694a2b72bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:28:9c:4d:51:5d:6f:32:10:cc:fd:c7:0e:
b3:2f:8f:8a:69:01:b6:5f:1b:5b:5c:40:b9:99:71:
fd:3c:2f:c9:59:34:a2:e9:d0:1a:2e:50:dd:46:9a:
3d:54:e6:27:82:72:0f:3c:7e:45:3b:4c:bf:bd:b4:
13:53:6d:22:6f:81:6a:c7:04:98:92:06:d1:6c:6c:
70:ac:2a:58:74:ba:f7:56:25:05:c5:e4:d9:12:77:
ef:7f:bc:8e:00:30:9d:25:47:c2:6e:85:7b:50:f1:
13:22:04:88:27:b9:d2:13:df:77:58:1e:ce:1e:95:
73:be:62:0c:f0:9f:66:4f:56:42:80:6a:db:87:eb:
f3:28:09:9d:66:cc:9e:b6:1b:5f:82:b6:6a:0c:98:
70:c1:80:7c:52:24:1d:f1:c4:15:b7:12:fd:4b:84:
65:0d:62:f0:1a:12:4c:3e:65:76:45:6e:30:45:8e:
6e:78:08:a6:ad:6d:04:e2:80:91:5d:5d:b3:71:19:
4e:5b:3d:e8:de:c8:de:78:09:b6:76:fe:62:a6:44:
2a:05:b4:ce:50:72:93:ff:3e:4a:87:ba:68:be:3e:
db:a6:d9:29:a9:44:94:c4:e9:33:9e:49:3f:71:44:
a4:7b:9a:a3:2f:7e:29:fb:db:e0:7d:8f:78:86:b5:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:13:E4:8F:9B:B0:40:B3:BD:5B:BB:FC:CF:56:69:4A:2B:72:BF:33
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XhPkj5uwQLO9W7v8z1ZpSityvzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:68:d6:81:47:d3:fc:f2:f8:fe:b2:c9:cb:8f:d8:a0:3d:71:
51:71:16:5f:28:ef:d3:c4:2c:8b:45:a6:0d:06:9d:95:22:37:
e3:2e:25:75:11:2f:a7:68:0c:4d:2d:45:ec:03:46:8e:12:6e:
5f:6c:83:02:a2:9d:56:67:7a:49:1d:87:cf:fd:82:a5:d5:27:
44:9f:64:a8:95:88:69:3f:a6:cc:13:dc:14:97:dd:ac:c0:41:
75:e5:cd:4c:a6:27:48:0c:8c:c3:d9:fe:c8:56:a4:88:43:98:
02:e6:0c:15:66:85:54:4c:6e:a5:49:fb:5f:48:18:3b:d4:4b:
9f:5c:60:99:75:2e:a5:71:91:84:fd:34:cc:53:fe:8d:81:3d:
d1:53:99:2c:03:f9:b3:f3:62:14:44:0d:e3:e7:18:1a:49:ae:
57:02:5d:26:79:04:78:7d:5b:cc:a8:df:7f:0c:b4:b8:ec:aa:
dc:9b:11:d8:cc:ad:c4:08:61:96:d1:24:fd:e3:bd:f5:9b:db:
a4:a7:5a:f3:31:65:16:0e:b6:8b:9d:da:a8:0f:9b:bf:e6:88:
9b:2e:7b:8d:b6:f8:1f:03:99:03:11:45:bf:0e:37:61:6a:79:
21:01:59:67:37:d9:71:8a:5a:90:9d:98:6b:a7:51:a3:2f:80:
82:ca:4d:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE6WyH2RpS4VYCN5gaV1AQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjYxMDE0MTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTEzZTQ4ZjliYjA0MGIzYmQ1YmJiZmNjZjU2Njk0YTJiNzJiZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26AonE1RXW8yEMz9xw6zL4+KaQG2
XxtbXEC5mXH9PC/JWTSi6dAaLlDdRpo9VOYngnIPPH5FO0y/vbQTU20ib4FqxwSY
kgbRbGxwrCpYdLr3ViUFxeTZEnfvf7yOADCdJUfCboV7UPETIgSIJ7nSE993WB7O
HpVzvmIM8J9mT1ZCgGrbh+vzKAmdZsyethtfgrZqDJhwwYB8UiQd8cQVtxL9S4Rl
DWLwGhJMPmV2RW4wRY5ueAimrW0E4oCRXV2zcRlOWz3o3sjeeAm2dv5ipkQqBbTO
UHKT/z5Kh7povj7bptkpqUSUxOkznkk/cUSke5qjL34p+9vgfY94hrWZtwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFF4T5I+bsECzvVu7/M9WaUorcr8zMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvWGhQa2o1dXdRTE85Vzd2OHoxWnBTaXR5dnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgazwDAN
BgkqhkiG9w0BAQsFAAOCAQEACWjWgUfT/PL4/rLJy4/YoD1xUXEWXyjv08Qsi0Wm
DQadlSI34y4ldREvp2gMTS1F7ANGjhJuX2yDAqKdVmd6SR2Hz/2CpdUnRJ9kqJWI
aT+mzBPcFJfdrMBBdeXNTKYnSAyMw9n+yFakiEOYAuYMFWaFVExupUn7X0gYO9RL
n1xgmXUupXGRhP00zFP+jYE90VOZLAP5s/NiFEQN4+cYGkmuVwJdJnkEeH1bzKjf
fwy0uOyq3JsR2MytxAhhltEk/eO99ZvbpKda8zFlFg62i53aqA+bv+aImy57jbb4
HwOZAxFFvw43YWp5IQFZZzfZcYpakJ2Ya6dRoy+AgspNMA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:06:41 2026 by rpki-client