Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/x3WmRf0Md0k8R3KmWEUPm6QIHk0.roa
File: x3WmRf0Md0k8R3KmWEUPm6QIHk0.roa (raw, json)
Hash identifier: A0TksUeR1WaGrl4BD+O45qSGasWdey6T/TGmVp9nZLc=
Subject key identifier: C7:75:A6:45:FD:0C:77:49:3C:47:72:A6:58:45:0F:9B:A4:08:1E:4D
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A055E651A67C91706B2175161556177ED7
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/x3WmRf0Md0k8R3KmWEUPm6QIHk0.roa
Signing time: Mon 31 Aug 2026 03:39:12 +0000
ROA not before: Mon 31 Aug 2026 03:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 5.44.255.0/24 maxlen: 24
185.196.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:e6:51:a6:7c:91:70:6b:21:75:16:15:56:17:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 31 03:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c775a645fd0c77493c4772a658450f9ba4081e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:b7:cf:95:a0:0c:66:4c:53:45:61:d7:d0:
97:04:27:3e:8b:a9:d9:d4:34:ad:81:a0:b5:34:4a:
1d:76:ae:b6:28:97:5f:ef:0f:7d:e2:f3:34:7c:43:
88:ef:87:cd:f9:27:03:b4:ea:97:e3:6d:f0:93:b3:
25:59:82:dd:f6:6c:a8:dd:ad:26:f0:63:1e:b3:da:
73:99:55:60:84:62:74:a1:48:fe:67:1f:eb:69:32:
b0:15:ca:7d:80:d9:5b:c9:1d:15:c6:f5:6f:58:64:
ca:9f:c0:d7:ef:72:aa:0d:bb:de:ee:29:c3:d4:2c:
7f:54:74:7e:b3:3f:a4:90:6d:14:c1:d3:d4:a1:a1:
cd:ba:0e:9e:79:7c:38:2c:22:0e:91:c2:87:be:b5:
4b:35:32:6d:a8:5f:4b:ae:26:fc:52:41:09:f4:56:
19:63:1a:64:c7:6a:4d:30:0a:da:10:bd:e3:b5:1f:
f0:76:66:18:c8:49:a5:1c:29:e2:61:03:f6:0b:14:
dc:76:7e:c2:14:73:44:73:de:a3:3d:25:24:de:a9:
d2:50:dc:ff:e0:d2:4b:e4:ea:77:71:cc:9a:99:85:
92:2c:ba:f7:28:05:9c:d7:47:08:02:ec:5b:a4:b8:
bc:68:32:dc:4e:bf:c8:42:a8:6a:b5:88:04:38:50:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:A6:45:FD:0C:77:49:3C:47:72:A6:58:45:0F:9B:A4:08:1E:4D
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/x3WmRf0Md0k8R3KmWEUPm6QIHk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.255.0/24
185.196.27.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f2:6c:0d:9e:33:7d:cd:b9:77:97:fd:c8:2f:59:e2:b1:99:
7f:f4:0e:77:c3:35:3d:88:0a:a8:70:0a:f1:02:22:96:10:6b:
a8:bf:00:36:20:5e:98:cf:3f:b6:48:64:98:3d:40:9d:c2:76:
c6:ce:e9:77:9d:58:50:1b:ee:8a:53:b7:69:f7:f5:99:9a:38:
9a:82:dd:84:b8:ce:9c:fc:97:21:12:72:a4:d9:38:df:ba:4e:
f0:a0:d1:6c:be:59:85:48:26:07:65:0c:5a:c8:cf:25:ac:7e:
d3:b1:7b:5d:cd:df:09:89:a4:0e:d9:be:23:74:c9:59:c9:57:
3b:8d:db:d3:90:02:fa:34:d8:5d:9d:24:f1:f4:2b:68:04:f1:
97:d6:5f:42:25:72:76:56:59:ba:ca:8a:a2:7a:85:71:f4:fe:
2e:ac:ce:64:42:2d:ec:ac:86:ae:1e:d6:49:01:76:21:51:59:
a7:1a:81:f1:e1:74:3d:c7:5e:a9:98:ee:7d:6e:90:af:69:9f:
78:98:f8:20:a9:d9:78:4e:00:23:74:a2:dd:6e:b7:59:0a:f0:
92:2f:40:62:56:e9:f0:c0:e1:b6:44:d3:3c:53:e6:30:9f:62:
4c:57:b2:fa:1b:19:51:8b:0e:92:23:b9:55:82:a1:a1:1b:f9:
38:fe:f6:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBV5lGmfJFwayF1FhVWF37XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwODMxMDMzOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzc1YTY0NWZkMGM3NzQ5M2M0NzcyYTY1ODQ1MGY5YmE0MDgxZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm23z5WgDGZMU0Vh19CXBCc+i6nZ
1DStgaC1NEoddq62KJdf7w994vM0fEOI74fN+ScDtOqX423wk7MlWYLd9myo3a0m
8GMes9pzmVVghGJ0oUj+Zx/raTKwFcp9gNlbyR0VxvVvWGTKn8DX73KqDbve7inD
1Cx/VHR+sz+kkG0UwdPUoaHNug6eeXw4LCIOkcKHvrVLNTJtqF9Lrib8UkEJ9FYZ
Yxpkx2pNMAraEL3jtR/wdmYYyEmlHCniYQP2CxTcdn7CFHNEc96jPSUk3qnSUNz/
4NJL5Op3ccyamYWSLLr3KAWc10cIAuxbpLi8aDLcTr/IQqhqtYgEOFAISwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMd1pkX9DHdJPEdyplhFD5ukCB5NMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEveDNXbVJmME1kMGs4UjNLbVdFVVBtNlFJSGswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSz/AwQA
ucQbMA0GCSqGSIb3DQEBCwUAA4IBAQBy8mwNnjN9zbl3l/3IL1nisZl/9A53wzU9
iAqocArxAiKWEGuovwA2IF6Yzz+2SGSYPUCdwnbGzul3nVhQG+6KU7dp9/WZmjia
gt2EuM6c/JchEnKk2Tjfuk7woNFsvlmFSCYHZQxayM8lrH7TsXtdzd8JiaQO2b4j
dMlZyVc7jdvTkAL6NNhdnSTx9CtoBPGX1l9CJXJ2Vlm6yoqieoVx9P4urM5kQi3s
rIauHtZJAXYhUVmnGoHx4XQ9x16pmO59bpCvaZ94mPggqdl4TgAjdKLdbrdZCvCS
L0BiVunwwOG2RNM8U+Ywn2JMV7L6GxlRiw6SI7lVgqGhG/k4/vYz
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:26 2026 by rpki-client