Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/xbqzgM_8rHGdCCmC3aCtALvC9X0.roa
File: xbqzgM_8rHGdCCmC3aCtALvC9X0.roa (raw, json)
Hash identifier: VW3xB5SDLk/NU1uYM5YTvIiCQTrRqBzy1+ZJLHmDAiQ=
Subject key identifier: C5:BA:B3:80:CF:FC:AC:71:9D:08:29:82:DD:A0:AD:00:BB:C2:F5:7D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01A169089A6EA88895E97F4B1710D8BE1591
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/xbqzgM_8rHGdCCmC3aCtALvC9X0.roa
Signing time: Fri 23 Oct 2026 13:52:13 +0000
ROA not before: Fri 23 Oct 2026 13:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30860
IP address blocks: 91.234.4.0/22 maxlen: 24
213.111.148.0/24 maxlen: 24
213.111.149.0/24 maxlen: 24
213.111.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:08:9a:6e:a8:88:95:e9:7f:4b:17:10:d8:be:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Oct 23 13:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5bab380cffcac719d082982dda0ad00bbc2f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:fb:19:24:6b:0a:59:43:4a:99:dd:99:11:
c3:f6:e5:29:28:cf:10:22:2f:10:03:56:25:4d:4b:
10:16:5f:28:78:93:22:37:be:ba:8b:77:38:6c:e2:
5a:d6:d6:d8:c5:05:7e:46:6c:55:64:06:1c:2a:6b:
a8:a7:7e:c5:36:99:32:8d:0e:de:d5:3f:47:eb:b6:
9e:f4:f8:cf:99:a8:de:f4:14:12:18:fb:19:4e:ef:
c1:82:19:55:10:ec:85:e7:b9:d6:b6:64:9d:bc:bb:
b9:b5:0a:1f:26:ae:d0:57:31:a3:7a:e1:09:29:78:
cd:60:d7:26:06:49:b5:a1:98:1e:25:3b:8b:2e:2f:
c0:03:5f:98:5c:47:2f:55:3d:5c:1e:3b:1a:9d:65:
f9:74:97:62:8b:cc:12:e9:69:71:e4:6c:c5:4e:7d:
7c:fb:18:10:d2:9a:59:a9:5b:a8:fe:d7:55:ba:d7:
5b:5f:93:37:7f:2e:44:a0:f8:19:50:01:5a:cf:6d:
95:0b:e7:e3:23:cb:fe:36:34:27:f3:77:39:87:ec:
4a:3f:7b:9d:43:4a:87:dd:f5:50:be:6e:e4:27:f1:
5f:3f:76:c7:53:86:4f:a8:33:c4:13:e3:31:82:04:
57:a3:7e:72:5f:b0:4e:f8:57:f7:83:ac:83:66:23:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:B3:80:CF:FC:AC:71:9D:08:29:82:DD:A0:AD:00:BB:C2:F5:7D
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/xbqzgM_8rHGdCCmC3aCtALvC9X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.4.0/22
213.111.148.0-213.111.150.255
Signature Algorithm: sha256WithRSAEncryption
75:a2:9a:59:03:a5:d1:1e:a9:26:87:7e:66:99:b8:a3:8a:a9:
ce:8e:9d:0a:cf:fa:1a:7f:3b:e6:33:11:9a:89:68:a7:d4:f2:
b3:ca:38:ec:6e:9e:ea:6c:06:07:ca:63:58:df:b2:e5:79:45:
34:91:39:97:13:65:bf:27:90:6c:d3:1c:8b:07:9f:d3:e4:c7:
d4:bb:0c:37:0e:c7:c1:c3:de:8e:12:01:94:5c:c0:8f:91:32:
8b:69:6f:49:fe:70:10:16:94:88:70:6e:89:af:67:1c:13:09:
77:d3:26:50:59:92:bf:b7:78:35:79:6c:de:e5:91:5c:16:4f:
3c:51:9c:b5:17:78:87:44:e3:5f:dd:65:96:fe:c1:8b:7d:a3:
f6:4e:1e:5e:29:65:e7:e2:a8:21:6f:2b:2f:77:28:c8:2b:fc:
14:1f:91:9a:52:4e:cc:12:63:b7:ae:15:74:59:49:49:81:d0:
ee:5a:51:5c:44:ea:af:8b:72:c8:a2:e4:aa:f9:ff:ae:fc:2e:
6e:46:9a:7a:3a:0a:a4:04:e7:75:c6:a1:ae:2c:34:42:9b:ca:
1a:9b:04:61:2f:09:4e:4f:07:2e:ba:75:51:19:ea:24:3d:56:
7c:28:75:68:d5:d8:c0:cf:b3:15:38:0a:50:54:9c:43:08:00:
15:47:db:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:00 2026 by rpki-client