Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/xKhlmwkhpDMTNKSIizqisLWT3AQ.roa
File: xKhlmwkhpDMTNKSIizqisLWT3AQ.roa (raw, json)
Hash identifier: wyhLYIBDdO6iFhviIArhJTJRsCWrDx4vYq5+pNBPzEE=
Subject key identifier: C4:A8:65:9B:09:21:A4:33:13:34:A4:88:8B:3A:A2:B0:B5:93:DC:04
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019A728BD3C648F4EE8D5453BC8ECB69D760
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/xKhlmwkhpDMTNKSIizqisLWT3AQ.roa
Signing time: Tue 11 Nov 2025 10:52:37 +0000
ROA not before: Tue 11 Nov 2025 10:52:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208795
IP address blocks: 5.35.104.0/21 maxlen: 24
94.131.80.0/20 maxlen: 24
94.131.176.0/20 maxlen: 24
194.116.140.0/24 maxlen: 24
2a07:aa40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:8b:d3:c6:48:f4:ee:8d:54:53:bc:8e:cb:69:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Nov 11 10:52:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4a8659b0921a4331334a4888b3aa2b0b593dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:6e:e3:99:38:1c:83:67:e6:d1:4d:c6:ff:
44:8f:71:7c:55:16:4d:37:f9:5a:eb:a6:f6:b9:22:
be:86:f5:c7:12:70:90:5c:c3:bb:b5:1c:43:3b:d1:
05:1d:22:54:e2:37:be:1d:d5:5c:f8:de:59:76:af:
7b:21:40:f0:e8:39:96:ba:02:47:47:27:20:ab:f2:
7f:fb:b6:50:da:f8:0b:cd:a7:96:12:85:b0:be:4b:
12:82:1f:e8:d4:7e:04:cf:77:56:e2:08:8d:5c:cc:
07:bb:91:fc:e8:12:f2:30:53:33:23:34:4c:49:9e:
32:1c:ab:74:23:36:72:b4:92:2a:0d:d8:e6:1a:ee:
1a:90:ba:3a:dd:d3:19:d2:1e:ae:b5:da:cd:05:ed:
67:ac:00:a7:19:0b:55:fc:93:e8:7b:06:1e:61:95:
ec:63:bd:63:5f:a4:b5:b5:d9:f9:7e:33:f8:d0:8b:
69:17:1e:41:de:74:bf:a2:55:7d:a6:04:f0:20:dd:
8d:d7:0f:b4:e1:de:2f:87:d0:eb:82:0a:47:e4:f7:
f1:ed:2b:b3:16:4b:f4:79:9b:54:54:20:c2:b4:5d:
b9:c3:5d:fe:b0:17:0d:ad:f0:f4:cf:24:26:11:ef:
63:e9:10:ab:45:f6:e0:45:2b:19:45:70:ed:d4:11:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:65:9B:09:21:A4:33:13:34:A4:88:8B:3A:A2:B0:B5:93:DC:04
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/xKhlmwkhpDMTNKSIizqisLWT3AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.104.0/21
94.131.80.0/20
94.131.176.0/20
194.116.140.0/24
IPv6:
2a07:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
32:c8:fd:3f:b5:00:c5:67:38:2c:aa:3d:bf:c3:37:83:5c:dd:
35:23:33:fc:8e:8a:6f:3c:f8:e9:2a:c3:67:45:02:af:1c:ac:
6f:3b:b1:59:29:3e:cd:36:64:4d:99:21:46:5a:48:46:b9:2d:
40:05:34:75:2d:f2:cf:3b:39:26:16:1f:59:f8:58:6a:d9:86:
66:bb:a4:a2:16:a4:5a:cc:5f:1c:64:9f:ff:72:5c:8b:4a:10:
94:fd:26:cd:8f:dc:73:ea:6f:cf:14:f6:94:5e:98:d9:18:6b:
04:78:15:bf:c1:30:62:2d:e8:89:f8:33:43:66:7c:2b:c5:dd:
8f:4c:fe:dd:1d:a7:d8:50:0d:f9:42:62:bd:81:40:92:29:07:
ec:80:c2:5e:d2:33:35:9b:5c:06:7c:1a:6d:15:c5:63:c9:47:
e8:2a:03:c2:cf:41:b9:cc:fe:9e:b6:9f:96:49:30:4c:30:f5:
27:bc:ba:40:c4:d2:aa:14:57:3c:ff:65:8a:59:02:0c:54:28:
cf:3b:86:49:84:72:89:a7:5a:79:a2:34:6a:29:84:af:b2:c3:
b6:59:d7:0b:ed:c8:c4:48:fc:e1:82:e0:e8:fd:7d:87:a2:c9:
fa:cb:44:aa:b6:b7:e7:6e:d9:eb:dc:63:06:22:17:18:d6:35:
8d:e7:f7:ba
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZpyi9PGSPTujVRTvI7LaddgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjA0ZmYzNWEyOWM5MTE1NmJlNGJkMjI5YjNiYWY3N2M4
Mzk3YmQwHhcNMjUxMTExMTA1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGE4NjU5YjA5MjFhNDMzMTMzNGE0ODg4YjNhYTJiMGI1OTNkYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HVu45k4HINn5tFNxv9Ej3F8VRZN
N/la66b2uSK+hvXHEnCQXMO7tRxDO9EFHSJU4je+HdVc+N5Zdq97IUDw6DmWugJH
Rycgq/J/+7ZQ2vgLzaeWEoWwvksSgh/o1H4Ez3dW4giNXMwHu5H86BLyMFMzIzRM
SZ4yHKt0IzZytJIqDdjmGu4akLo63dMZ0h6utdrNBe1nrACnGQtV/JPoewYeYZXs
Y71jX6S1tdn5fjP40ItpFx5B3nS/olV9pgTwIN2N1w+04d4vh9DrggpH5Pfx7Suz
Fkv0eZtUVCDCtF25w13+sBcNrfD0zyQmEe9j6RCrRfbgRSsZRXDt1BGz4QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMSoZZsJIaQzEzSkiIs6orC1k9wEMB8GA1UdIwQY
MBaAFL5gT/NaKckRVr5L0imzuvd8g5e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYt
MWEzOWMzZDM0ZjA4LzEveEtobG13a2hwRE1UTktTSWl6cWlzTFdUM0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYtMWEzOWMzZDM0ZjA4
LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBSNoAwQE
XoNQAwQEXoOwAwQAwnSMMA0EAgACMAcDBQMqB6pAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyyP0/tQDFZzgsqj2/wzeDXN01IzP8jopvPPjpKsNnRQKvHKxvO7FZKT7NNmRN
mSFGWkhGuS1ABTR1LfLPOzkmFh9Z+Fhq2YZmu6SiFqRazF8cZJ//clyLShCU/SbN
j9xz6m/PFPaUXpjZGGsEeBW/wTBiLeiJ+DNDZnwrxd2PTP7dHafYUA35QmK9gUCS
KQfsgMJe0jM1m1wGfBptFcVjyUfoKgPCz0G5zP6etp+WSTBMMPUnvLpAxNKqFFc8
/2WKWQIMVCjPO4ZJhHKJp1p5ojRqKYSvssO2WdcL7cjESPzhguDo/X2Hosn6y0Sq
trfnbtnr3GMGIhcY1jWN5/e6
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:34:52 2025 by rpki-client