Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/XAGpKEV32Cm2Yy8n_REzmFHDowE.roa
File: XAGpKEV32Cm2Yy8n_REzmFHDowE.roa (raw, json)
Hash identifier: FVAbRleojxFC4XCPN595rRA6B83tbC/+TJlTuvp4/68=
Subject key identifier: 5C:01:A9:28:45:77:D8:29:B6:63:2F:27:FD:11:33:98:51:C3:A3:01
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01A10B2D8AAFBA887F58CEB35356AB597E98
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/XAGpKEV32Cm2Yy8n_REzmFHDowE.roa
Signing time: Mon 05 Oct 2026 08:28:16 +0000
ROA not before: Mon 05 Oct 2026 08:28:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.103.5.0/24 maxlen: 24
185.103.6.0/24 maxlen: 24
185.103.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:2d:8a:af:ba:88:7f:58:ce:b3:53:56:ab:59:7e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Oct 5 08:28:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c01a9284577d829b6632f27fd11339851c3a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:59:51:e9:ff:9b:e1:fb:4e:51:ba:89:1e:
9c:27:80:ca:e7:18:0a:10:1a:40:f8:d3:f6:98:fa:
ad:e8:ab:b5:ea:55:44:20:d9:3b:b1:26:b2:c7:82:
b9:33:09:08:16:43:82:de:f6:dc:e7:22:e8:99:8e:
c1:8f:56:f5:d1:e5:ae:a6:d6:02:88:2f:23:6f:1d:
71:44:b1:07:41:01:32:84:a3:77:61:f5:80:06:d1:
fb:d0:b9:f0:ce:b2:32:25:24:f9:2c:86:1c:2a:ea:
50:56:d8:10:9e:3f:2d:ec:b7:23:bd:dc:a8:c8:bd:
c7:7b:48:45:1e:90:71:63:59:20:b3:d5:23:ac:3c:
88:fc:1c:6c:71:d8:7d:33:65:26:54:b6:11:73:db:
46:24:6d:1b:36:4e:2a:d1:29:b6:64:5f:f5:20:df:
16:f3:bc:d1:54:79:66:2b:77:c6:e9:84:d0:a7:bb:
c0:d6:d2:f4:5d:eb:c6:a9:95:19:8a:06:58:c5:b9:
e2:b7:36:be:df:1f:e9:d4:cd:8c:b5:dc:50:d6:59:
35:f3:a0:47:49:b2:01:fa:f9:72:c0:fd:3a:2e:f8:
c8:38:9b:f3:15:49:49:c8:ca:df:67:66:d5:98:e9:
5d:aa:4b:30:48:ad:b2:91:b6:ad:d1:7f:8a:e5:07:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:A9:28:45:77:D8:29:B6:63:2F:27:FD:11:33:98:51:C3:A3:01
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/XAGpKEV32Cm2Yy8n_REzmFHDowE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.5.0-185.103.7.255
Signature Algorithm: sha256WithRSAEncryption
37:f7:d0:89:04:47:a6:98:6c:7b:20:f6:b7:7d:9c:7e:99:8a:
b8:0b:24:5e:e5:0d:70:5b:a5:88:85:99:85:cc:ae:21:eb:06:
ec:81:42:47:2e:df:24:10:89:39:a0:ae:6d:cc:b2:16:9a:a3:
e0:21:ec:7f:5e:7f:40:17:ba:00:97:08:c3:1e:58:48:ef:95:
69:2f:cc:01:b1:f5:d2:dc:0d:03:2d:58:ac:25:f4:b4:35:b7:
d8:12:b4:34:e8:8e:e6:bb:a6:6f:7b:4d:7c:66:94:91:5e:b2:
4d:59:18:b8:78:76:4f:2d:1b:e2:d3:97:c6:93:84:a1:f5:11:
68:30:e3:42:ff:9f:e5:67:c3:98:eb:8b:75:d3:13:8e:1c:87:
c7:89:4c:b9:f3:3b:d2:fa:f6:f1:ed:d4:61:33:7d:bb:f7:ca:
52:2a:b7:52:e6:77:ab:59:a9:be:85:93:7e:c4:02:54:08:92:
fe:1c:7a:75:88:10:38:8c:b0:24:6d:1d:78:fe:0f:ca:42:47:
32:c6:1e:2d:10:a0:96:3f:f4:6d:74:55:37:ee:58:18:a3:35:
07:65:12:50:2d:ed:98:c2:4d:eb:f6:08:b6:90:91:c5:d7:1e:
b2:9f:d4:6e:e4:ef:bd:44:24:3a:25:a3:1b:a6:18:e4:2e:05:
11:a6:93:8c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaELLYqvuoh/WM6zU1arWX6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw
Y2Q1NmYwHhcNMjYxMDA1MDgyODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzAxYTkyODQ1NzdkODI5YjY2MzJmMjdmZDExMzM5ODUxYzNhMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37ZZUen/m+H7TlG6iR6cJ4DK5xgK
EBpA+NP2mPqt6Ku16lVEINk7sSayx4K5MwkIFkOC3vbc5yLomY7Bj1b10eWuptYC
iC8jbx1xRLEHQQEyhKN3YfWABtH70LnwzrIyJST5LIYcKupQVtgQnj8t7Lcjvdyo
yL3He0hFHpBxY1kgs9UjrDyI/Bxscdh9M2UmVLYRc9tGJG0bNk4q0Sm2ZF/1IN8W
87zRVHlmK3fG6YTQp7vA1tL0XevGqZUZigZYxbnitza+3x/p1M2MtdxQ1lk186BH
SbIB+vlywP06LvjIOJvzFUlJyMrfZ2bVmOldqkswSK2ykbat0X+K5QdQnwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFwBqShFd9gptmMvJ/0RM5hRw6MBMB8GA1UdIwQY
MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct
ZDBjODJhM2NmNGI2LzEvWEFHcEtFVjMyQ20yWXk4bl9SRXptRkhEb3dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2
LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ZwUD
BAO5ZwAwDQYJKoZIhvcNAQELBQADggEBADf30IkER6aYbHsg9rd9nH6ZirgLJF7l
DXBbpYiFmYXMriHrBuyBQkcu3yQQiTmgrm3Mshaao+Ah7H9ef0AXugCXCMMeWEjv
lWkvzAGx9dLcDQMtWKwl9LQ1t9gStDTojua7pm97TXxmlJFesk1ZGLh4dk8tG+LT
l8aThKH1EWgw40L/n+Vnw5jri3XTE44ch8eJTLnzO9L69vHt1GEzfbv3ylIqt1Lm
d6tZqb6Fk37EAlQIkv4cenWIEDiMsCRtHXj+D8pCRzLGHi0QoJY/9G10VTfuWBij
NQdlElAt7ZjCTev2CLaQkcXXHrKf1G7k771EJDoloxumGOQuBRGmk4w=
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:23:35 2026 by rpki-client