Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa
File: XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa (raw, json)
Hash identifier: wwjL59OW3UC7V7CAOSmVDLYL1/AFybNZY6xPPQkXT94=
Subject key identifier: 5E:A2:4C:6D:6D:AF:93:85:B5:86:81:94:13:E8:A3:DE:69:96:69:4F
Certificate issuer: /CN=6b4f530c46166351350a5725a700fbc5d71c8680
Certificate serial: 019FF58747EB890BD0FBC689DF474CB8A5B5
Authority key identifier: 6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa
Signing time: Wed 12 Aug 2026 10:31:51 +0000
ROA not before: Wed 12 Aug 2026 10:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207856
IP address blocks: 193.72.79.0/24 maxlen: 24
194.28.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:87:47:eb:89:0b:d0:fb:c6:89:df:47:4c:b8:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f530c46166351350a5725a700fbc5d71c8680
Validity
Not Before: Aug 12 10:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ea24c6d6daf9385b586819413e8a3de6996694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:28:c4:ab:5f:62:50:99:1c:39:16:b7:b8:
34:50:c1:d7:53:21:5d:0e:cd:0c:38:6c:62:5e:3f:
51:44:5f:23:8b:58:f4:93:8b:8b:c7:aa:bd:6a:99:
63:8c:5d:d5:62:bf:85:0b:d0:01:77:bf:6c:6e:1b:
20:99:fd:b8:6f:1c:aa:dd:14:97:d7:16:cb:6a:dc:
29:c0:89:9a:2a:31:5f:5a:3b:69:d2:ac:56:61:44:
cb:d8:be:62:16:ff:25:85:ba:61:08:95:23:57:05:
5d:ac:d8:4a:04:60:ff:06:ad:64:7b:e8:33:4f:f6:
5c:c1:62:5a:d5:c9:a1:e8:51:54:4a:cc:6c:7c:bb:
56:f7:98:e8:62:d4:ab:c8:ef:65:e3:5f:15:15:80:
87:0f:4d:f0:08:74:42:8e:f7:f6:f7:22:e3:13:de:
f5:78:55:9a:e3:27:c4:f5:95:20:c4:e3:c2:dd:d4:
fa:61:a7:cd:a5:0d:3d:e8:10:db:60:94:7f:cb:e2:
ff:f8:a4:84:2b:ce:0c:36:13:a7:51:14:4e:5e:64:
b1:03:5a:c3:e8:d3:b8:b5:c7:c6:9d:0a:c1:23:4e:
17:09:b7:5c:e9:6b:7f:13:04:ad:e2:f3:d0:a3:c1:
4e:93:4a:dc:82:d2:06:a3:92:46:06:ea:18:53:78:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:4C:6D:6D:AF:93:85:B5:86:81:94:13:E8:A3:DE:69:96:69:4F
X509v3 Authority Key Identifier:
keyid:6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.79.0/24
194.28.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:53:9c:76:6c:f7:e6:c7:18:5b:94:a8:9f:e7:25:eb:ac:90:
38:18:17:90:aa:16:6d:3f:0e:65:34:ad:cd:42:64:4b:2b:eb:
c5:82:39:df:8d:5d:2e:58:0c:f0:cb:1a:c0:09:af:17:79:03:
68:92:49:61:f4:c8:fb:ea:8b:74:db:fd:68:2a:95:92:81:3e:
4e:06:f9:bf:61:42:49:b7:12:14:11:f0:78:a5:0d:ad:e0:90:
fc:2b:14:11:c4:8b:50:e9:d7:5a:37:f8:b2:63:ba:d5:d1:6c:
17:59:c0:e7:ef:e1:5e:02:98:1a:ce:24:4c:47:17:a9:b6:e7:
2e:48:a9:7a:8f:53:e5:fd:d7:f1:f6:52:72:b8:13:ed:40:76:
1f:10:97:87:92:db:58:2c:72:f7:c9:a6:e8:de:ec:0e:18:2a:
42:05:3f:b2:0b:dd:b1:7f:3c:ae:e8:b9:6c:a9:81:9f:b5:4e:
e6:93:4d:19:70:45:e9:0c:ee:2a:bc:6b:d1:81:d3:e0:f7:ff:
6d:a6:30:9c:a6:0d:53:08:d4:95:a8:04:df:0c:b2:d5:bf:4f:
f4:51:51:18:09:88:07:be:1a:96:6b:12:dd:b7:a5:ff:93:dc:
3c:68:b8:9c:23:40:b7:76:c4:eb:9e:87:6a:f7:36:51:e6:e1:
b2:42:9d:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/1h0friQvQ+8aJ30dMuKW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGY1MzBjNDYxNjYzNTEzNTBhNTcyNWE3MDBmYmM1ZDcx
Yzg2ODAwHhcNMjYwODEyMTAzMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWEyNGM2ZDZkYWY5Mzg1YjU4NjgxOTQxM2U4YTNkZTY5OTY2OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBooxKtfYlCZHDkWt7g0UMHXUyFd
Ds0MOGxiXj9RRF8ji1j0k4uLx6q9apljjF3VYr+FC9ABd79sbhsgmf24bxyq3RSX
1xbLatwpwImaKjFfWjtp0qxWYUTL2L5iFv8lhbphCJUjVwVdrNhKBGD/Bq1ke+gz
T/ZcwWJa1cmh6FFUSsxsfLtW95joYtSryO9l418VFYCHD03wCHRCjvf29yLjE971
eFWa4yfE9ZUgxOPC3dT6YafNpQ096BDbYJR/y+L/+KSEK84MNhOnURROXmSxA1rD
6NO4tcfGnQrBI04XCbdc6Wt/EwSt4vPQo8FOk0rcgtIGo5JGBuoYU3gilQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF6iTG1tr5OFtYaBlBPoo95plmlPMB8GA1UdIwQY
MBaAFGtPUwxGFmNRNQpXJacA+8XXHIaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jNGQ5MDQtY2FhMC00OGRiLTgzMjkt
Yjg3MGI5ZWY4ZGQxLzEvWHFKTWJXMnZrNFcxaG9HVUUtaWozbW1XYVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jNGQ5MDQtY2FhMC00OGRiLTgzMjktYjg3MGI5ZWY4ZGQx
LzEvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwUhPAwQA
whwtMA0GCSqGSIb3DQEBCwUAA4IBAQDBU5x2bPfmxxhblKif5yXrrJA4GBeQqhZt
Pw5lNK3NQmRLK+vFgjnfjV0uWAzwyxrACa8XeQNokklh9Mj76ot02/1oKpWSgT5O
Bvm/YUJJtxIUEfB4pQ2t4JD8KxQRxItQ6ddaN/iyY7rV0WwXWcDn7+FeApgaziRM
RxeptucuSKl6j1Pl/dfx9lJyuBPtQHYfEJeHkttYLHL3yabo3uwOGCpCBT+yC92x
fzyu6LlsqYGftU7mk00ZcEXpDO4qvGvRgdPg9/9tpjCcpg1TCNSVqATfDLLVv0/0
UVEYCYgHvhqWaxLdt6X/k9w8aLicI0C3dsTrnodq9zZR5uGyQp10
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:51 2026 by rpki-client