Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XvCHE0xd4B4wi6rVc1Mkcz9MpCQ.roa
File: XvCHE0xd4B4wi6rVc1Mkcz9MpCQ.roa (raw, json)
Hash identifier: c3Q5aTbO1GSDklSzLSQWnwuWbvdtXl6W+n/anNI+zLM=
Subject key identifier: 5E:F0:87:13:4C:5D:E0:1E:30:8B:AA:D5:73:53:24:73:3F:4C:A4:24
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1A833389678B07848FB7E2D5C72798916
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XvCHE0xd4B4wi6rVc1Mkcz9MpCQ.roa
Signing time: Wed 04 Nov 2026 20:14:51 +0000
ROA not before: Wed 04 Nov 2026 20:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.183.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:33:38:96:78:b0:78:48:fb:7e:2d:5c:72:79:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 4 20:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ef087134c5de01e308baad5735324733f4ca424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:24:7e:d9:af:df:6c:9c:e5:6d:8d:75:37:
21:6d:87:7a:16:54:f6:8e:4f:51:50:fb:d2:ac:86:
3b:b0:56:c0:9f:a1:9c:21:4e:12:24:a4:85:2f:7c:
ff:d1:56:89:23:fd:ff:3e:85:4b:16:c9:44:96:04:
c3:57:a0:38:a6:a8:df:e2:82:52:a3:01:9a:2b:f8:
a8:0f:99:5d:c0:36:be:d9:89:a3:44:bc:c0:b1:c0:
f8:b7:1c:11:eb:34:e5:20:6f:5d:57:67:5d:75:d4:
8f:4d:6b:8c:46:1c:87:b9:26:5c:37:bf:50:ee:a1:
97:bc:9f:13:a9:f4:b0:9d:44:6e:d6:6c:51:3b:ff:
a1:b6:ac:98:94:6e:c4:ba:82:be:f5:b0:ca:9d:50:
6e:d4:ce:f6:f9:78:e5:42:4b:4a:a6:1c:0e:83:e0:
fd:d7:e3:16:b6:74:b0:a7:94:2a:16:48:12:16:70:
42:cc:40:bb:b9:da:da:d8:73:62:48:ff:ec:21:5e:
eb:13:d7:68:38:2d:e4:67:ab:0c:47:e0:5b:e8:6c:
f5:19:0f:55:98:8f:bd:91:f9:aa:db:66:19:c9:f2:
94:ff:cd:7c:f3:9c:d4:c3:f4:cc:a2:14:2e:f1:22:
56:37:75:12:ae:b4:20:99:e2:09:14:7f:b1:71:07:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:87:13:4C:5D:E0:1E:30:8B:AA:D5:73:53:24:73:3F:4C:A4:24
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XvCHE0xd4B4wi6rVc1Mkcz9MpCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
45.132.183.0/24
45.151.2.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ca:3f:82:18:e0:fa:f1:d8:4f:4d:6b:9f:6f:0e:d1:38:61:
12:bb:e8:6e:25:6a:0a:cc:66:b3:2b:7e:bd:af:26:45:38:28:
41:5d:69:74:6a:34:64:33:42:a3:89:51:df:ad:65:89:95:e3:
d3:a0:0b:1b:e5:19:d3:55:d8:75:d5:54:30:4e:25:5f:4a:27:
d4:bc:f0:76:1a:9b:02:f3:7a:31:96:6a:2a:4f:27:36:6b:9b:
75:29:9e:5f:f7:c3:3e:2c:fa:9e:bc:a2:2f:60:a0:7e:f3:e7:
4f:59:85:92:81:7e:9f:fe:29:1e:9e:1d:74:88:7c:37:8e:bb:
67:e9:a7:e2:a1:66:bd:f3:09:b7:92:96:36:7e:93:71:1c:3b:
2b:41:24:9f:91:86:17:3f:18:5e:f6:12:fc:bf:6e:5d:fc:38:
45:d2:e4:fe:bf:a3:20:90:64:fb:8b:3b:ed:76:05:b3:8e:99:
e6:c6:f9:ca:f0:5e:8b:37:3b:6c:eb:84:23:ae:ce:22:d4:b1:
d6:8e:1b:2a:aa:b8:74:49:63:72:92:05:8d:60:1a:97:d7:90:
45:25:a1:b7:68:c4:15:79:76:ec:fd:9b:f3:bc:bf:b1:64:e6:
c6:d4:38:10:6c:1e:19:38:59:9e:e5:fc:ab:b3:87:f0:9e:4c:
14:36:e3:73
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaGoMziWeLB4SPt+LVxyeYkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYxMTA0MjAxNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWYwODcxMzRjNWRlMDFlMzA4YmFhZDU3MzUzMjQ3MzNmNGNhNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Ikftmv32yc5W2NdTchbYd6FlT2
jk9RUPvSrIY7sFbAn6GcIU4SJKSFL3z/0VaJI/3/PoVLFslElgTDV6A4pqjf4oJS
owGaK/ioD5ldwDa+2YmjRLzAscD4txwR6zTlIG9dV2ddddSPTWuMRhyHuSZcN79Q
7qGXvJ8TqfSwnURu1mxRO/+htqyYlG7EuoK+9bDKnVBu1M72+XjlQktKphwOg+D9
1+MWtnSwp5QqFkgSFnBCzEC7udra2HNiSP/sIV7rE9doOC3kZ6sMR+Bb6Gz1GQ9V
mI+9kfmq22YZyfKU/81885zUw/TMohQu8SJWN3USrrQgmeIJFH+xcQejzQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFF7whxNMXeAeMIuq1XNTJHM/TKQkMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvWHZDSEUweGQ0QjR3aTZyVmMxTWtjejlNcENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBAjhsAwQA
LVFxAwQALVFzAwQALViLAwQALYS1AwQALYS3AwQALZcCAwQAVdF4AwQAwTkpAwQA
wg80MA0GCSqGSIb3DQEBCwUAA4IBAQBqyj+CGOD68dhPTWufbw7ROGESu+huJWoK
zGazK369ryZFOChBXWl0ajRkM0KjiVHfrWWJlePToAsb5RnTVdh11VQwTiVfSifU
vPB2GpsC83oxlmoqTyc2a5t1KZ5f98M+LPqevKIvYKB+8+dPWYWSgX6f/ikenh10
iHw3jrtn6afioWa98wm3kpY2fpNxHDsrQSSfkYYXPxhe9hL8v25d/DhF0uT+v6Mg
kGT7izvtdgWzjpnmxvnK8F6LNzts64Qjrs4i1LHWjhsqqrh0SWNykgWNYBqX15BF
JaG3aMQVeXbs/ZvzvL+xZObG1DgQbB4ZOFme5fyrs4fwnkwUNuNz
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:35 2026 by rpki-client