Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xCWFYaCHS1SmC6D3vKe_9B5xNtU.roa
File: xCWFYaCHS1SmC6D3vKe_9B5xNtU.roa (raw, json)
Hash identifier: VaDEX7+rHt7AB/5KA8HDgGsaeYRJWAqH4EieOHlomdE=
Subject key identifier: C4:25:85:61:A0:87:4B:54:A6:0B:A0:F7:BC:A7:BF:F4:1E:71:36:D5
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A12FCDCD781F2B15190BB74C73AD7E22AE
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xCWFYaCHS1SmC6D3vKe_9B5xNtU.roa
Signing time: Mon 12 Oct 2026 11:09:39 +0000
ROA not before: Mon 12 Oct 2026 11:09:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 5.100.230.0/24 maxlen: 24
83.98.192.0/24 maxlen: 24
83.98.194.0/24 maxlen: 24
83.98.198.0/24 maxlen: 24
85.92.140.0/24 maxlen: 24
89.30.159.0/24 maxlen: 24
89.30.172.0/24 maxlen: 24
89.30.173.0/24 maxlen: 24
213.214.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:cd:cd:78:1f:2b:15:19:0b:b7:4c:73:ad:7e:22:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 12 11:09:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4258561a0874b54a60ba0f7bca7bff41e7136d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:00:2a:7c:d4:17:83:18:13:91:d8:81:24:
34:e0:71:b6:4c:6e:ec:22:c1:f2:13:5e:a7:22:78:
5e:06:27:cb:5c:17:18:56:31:52:7d:12:4b:66:de:
ee:8f:ec:9b:73:2a:bd:6f:64:d2:2e:9b:1f:ef:cb:
7b:0f:fd:58:14:74:39:20:5c:0c:03:97:9e:56:23:
1e:1f:0e:e9:44:12:7b:7b:2b:fe:3a:75:f9:db:b8:
96:e5:e5:05:fb:e7:1f:c8:ec:0a:30:0a:49:75:92:
75:f2:e5:de:5b:37:1f:84:ae:00:0b:46:39:01:06:
6d:93:60:45:a7:46:49:31:d3:fd:74:c4:cd:9c:4f:
fd:1f:a9:94:a8:c9:d2:81:f6:91:ba:04:5a:8c:fd:
4b:37:ce:8d:ff:0e:be:2f:56:31:27:66:63:28:f2:
4e:45:06:3c:ea:2e:91:64:e5:c8:bd:29:57:1e:04:
99:94:8d:56:8e:7b:70:ee:9a:24:ec:8e:e4:fe:9e:
62:19:01:c8:f4:db:4f:78:9d:1d:0e:be:fc:bd:a0:
44:4d:22:7b:36:ef:b3:57:d2:aa:fd:6b:0f:50:b5:
9c:f9:7e:8e:ee:42:e2:26:ec:62:b8:1d:7c:72:80:
79:a5:d9:f9:78:27:99:ac:f0:93:11:0c:50:0a:3d:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:85:61:A0:87:4B:54:A6:0B:A0:F7:BC:A7:BF:F4:1E:71:36:D5
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/xCWFYaCHS1SmC6D3vKe_9B5xNtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.230.0/24
83.98.192.0/24
83.98.194.0/24
83.98.198.0/24
85.92.140.0/24
89.30.159.0/24
89.30.172.0/23
213.214.100.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:c0:93:55:f7:a9:a9:31:c9:a6:87:e9:9c:88:52:28:c3:
40:36:c0:37:63:f9:df:b5:a8:40:b9:98:3e:a1:73:6e:9f:ad:
20:f1:9a:4a:6e:04:9f:29:04:3c:3e:b2:e1:39:bd:78:17:b4:
5b:22:61:d3:04:a5:d9:cd:7f:84:0f:7f:da:08:07:78:17:2a:
7d:6c:5c:21:c3:1b:15:0a:23:3d:16:0b:82:06:8d:f5:39:78:
01:29:b8:71:12:5a:8b:76:e3:04:6b:33:14:67:6e:72:18:7f:
a6:28:8c:f2:a5:4e:95:57:f0:bd:c8:a9:27:8a:fc:8f:b3:ab:
5a:72:27:53:09:13:1d:e1:5a:2d:73:6d:75:eb:6d:4c:e6:94:
ec:31:96:1d:12:30:71:cc:b7:c4:fe:6f:68:2f:44:49:c5:1b:
69:6b:96:86:37:d1:88:19:b9:f5:00:65:1b:95:29:ba:a8:54:
d0:61:24:54:f8:80:db:38:f6:58:6f:64:a8:bd:ea:1b:f1:82:
c7:ad:87:ed:ac:bc:b9:c5:59:4e:74:2f:e8:7a:0b:b5:cd:23:
2c:9e:c0:32:9c:75:3a:00:cd:d6:a1:c8:b3:d1:67:b8:b6:e6:
00:fc:c0:f9:19:9e:c4:be:06:a5:47:6e:0e:7a:bd:2e:50:1a:
8a:16:99:65
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaEvzc14HysVGQu3THOtfiKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYxMDEyMTEwOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDI1ODU2MWEwODc0YjU0YTYwYmEwZjdiY2E3YmZmNDFlNzEzNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lgAKnzUF4MYE5HYgSQ04HG2TG7s
IsHyE16nInheBifLXBcYVjFSfRJLZt7uj+ybcyq9b2TSLpsf78t7D/1YFHQ5IFwM
A5eeViMeHw7pRBJ7eyv+OnX527iW5eUF++cfyOwKMApJdZJ18uXeWzcfhK4AC0Y5
AQZtk2BFp0ZJMdP9dMTNnE/9H6mUqMnSgfaRugRajP1LN86N/w6+L1YxJ2ZjKPJO
RQY86i6RZOXIvSlXHgSZlI1Wjntw7pok7I7k/p5iGQHI9NtPeJ0dDr78vaBETSJ7
Nu+zV9Kq/WsPULWc+X6O7kLiJuxiuB18coB5pdn5eCeZrPCTEQxQCj28bwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMQlhWGgh0tUpgug97ynv/QecTbVMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEveENXRllhQ0hTMVNtQzZEM3ZLZV85QjV4TnRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABWTmAwQA
U2LAAwQAU2LCAwQAU2LGAwQAVVyMAwQAWR6fAwQBWR6sAwQA1dZkMA0GCSqGSIb3
DQEBCwUAA4IBAQBiesCTVfepqTHJpofpnIhSKMNANsA3Y/nftahAuZg+oXNun60g
8ZpKbgSfKQQ8PrLhOb14F7RbImHTBKXZzX+ED3/aCAd4Fyp9bFwhwxsVCiM9FguC
Bo31OXgBKbhxElqLduMEazMUZ25yGH+mKIzypU6VV/C9yKknivyPs6tacidTCRMd
4Votc211621M5pTsMZYdEjBxzLfE/m9oL0RJxRtpa5aGN9GIGbn1AGUblSm6qFTQ
YSRU+IDbOPZYb2Soveob8YLHrYftrLy5xVlOdC/oegu1zSMsnsAynHU6AM3Wociz
0We4tuYA/MD5GZ7EvgalR24Oer0uUBqKFpll
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:47:41 2026 by rpki-client