Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Xwtva-5JS24pgtPa6RiyB6jgWs8.roa
File: Xwtva-5JS24pgtPa6RiyB6jgWs8.roa (raw, json)
Hash identifier: 4crKYMPlObMDOjEeTCvMoGko6l7Xz46lTNJ2hPww31s=
Subject key identifier: 5F:0B:6F:6B:EE:49:4B:6E:29:82:D3:DA:E9:18:B2:07:A8:E0:5A:CF
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FD26189F38E8A287FF6E8E547FF22ECBF
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Xwtva-5JS24pgtPa6RiyB6jgWs8.roa
Signing time: Wed 05 Aug 2026 14:43:55 +0000
ROA not before: Wed 05 Aug 2026 14:43:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207185
IP address blocks: 185.157.4.0/22 maxlen: 24
193.108.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:61:89:f3:8e:8a:28:7f:f6:e8:e5:47:ff:22:ec:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 5 14:43:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f0b6f6bee494b6e2982d3dae918b207a8e05acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:4c:e5:4e:f0:df:bf:31:96:e9:7e:1e:e0:
8e:64:1c:e7:df:9b:38:e2:36:fe:2a:09:12:b1:8b:
67:8e:42:0d:80:28:c5:36:d5:dd:27:5a:d7:c7:b3:
cb:77:79:a6:b3:c2:d0:fb:f5:0c:ef:04:c0:9f:2a:
5d:24:3c:13:be:7b:f0:48:ab:ee:e2:da:7d:40:6d:
58:4d:ef:d7:ee:ed:86:4b:7e:68:9b:bf:9b:d9:48:
49:95:80:fc:17:12:90:76:ea:3a:7c:a8:1a:10:f5:
db:42:15:ee:8d:01:7d:0f:b1:73:99:1d:5b:e6:b6:
6d:87:b9:43:d3:28:2d:b9:8c:38:84:37:44:38:0f:
1e:d4:20:7e:de:21:47:b3:ba:ca:df:f8:25:70:89:
8b:b6:ff:f8:c9:cf:5a:86:c0:da:7a:18:d1:96:82:
4f:3e:5d:5e:06:98:88:86:fd:ab:2d:91:2b:dd:e8:
ca:d5:60:c1:05:da:0e:57:8b:51:13:0e:47:b8:70:
8f:2b:54:1b:d4:94:8e:c5:8f:4b:a5:de:89:6c:bb:
d8:dc:ab:ab:94:c6:1b:6f:58:4b:b4:a1:4d:fd:79:
70:71:bd:0a:96:a0:3f:e5:9e:e7:6b:6a:a1:b0:61:
7f:3a:71:44:ad:17:c4:a4:e9:10:9a:4d:90:1e:f3:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:6F:6B:EE:49:4B:6E:29:82:D3:DA:E9:18:B2:07:A8:E0:5A:CF
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Xwtva-5JS24pgtPa6RiyB6jgWs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.4.0/22
193.108.206.0/23
Signature Algorithm: sha256WithRSAEncryption
04:78:4f:ed:ec:1f:7f:e9:0e:d3:96:80:1c:ba:15:52:37:42:
6e:ba:08:9e:43:0a:ac:69:22:67:da:a6:cb:d2:fe:32:4e:d7:
27:39:e4:e2:c0:06:bd:3b:0c:e9:23:d5:81:74:d9:8a:26:1c:
72:0e:34:bd:16:43:5a:af:f3:9c:65:fc:c2:ae:39:a8:b7:72:
5f:03:49:a7:6a:4b:82:63:87:db:68:24:3c:0f:ea:39:cd:3f:
db:6d:dc:4e:82:81:b4:14:1d:76:40:4d:b0:b5:0f:53:fe:48:
ac:01:52:24:10:91:9d:e6:2c:7e:d7:46:5c:b0:d0:58:32:f7:
4d:b1:39:86:9d:86:8e:bd:ef:d1:a1:d9:22:02:4e:36:c5:dd:
ad:34:5b:99:6c:09:02:cd:7e:2c:14:1c:b0:6a:e8:04:81:3b:
ee:a6:03:38:1a:d0:77:8c:f6:a5:34:6c:e8:3c:d7:e5:90:43:
cf:b3:a0:a8:69:45:45:47:b3:66:2b:9d:e7:69:b0:f9:13:5c:
2b:f7:e6:47:c4:8a:6e:55:f9:fb:92:da:99:49:b2:10:e2:be:
2e:1a:dc:27:53:d1:bd:47:95:55:c4:8b:b4:b1:42:dc:fb:5d:
2f:f5:c6:5c:f0:5a:31:45:7a:10:72:b6:23:93:fd:ee:d7:13:
bc:6a:9b:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/SYYnzjooof/bo5Uf/Iuy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwODA1MTQ0MzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjBiNmY2YmVlNDk0YjZlMjk4MmQzZGFlOTE4YjIwN2E4ZTA1YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo9M5U7w378xlul+HuCOZBzn35s4
4jb+KgkSsYtnjkINgCjFNtXdJ1rXx7PLd3mms8LQ+/UM7wTAnypdJDwTvnvwSKvu
4tp9QG1YTe/X7u2GS35om7+b2UhJlYD8FxKQduo6fKgaEPXbQhXujQF9D7FzmR1b
5rZth7lD0ygtuYw4hDdEOA8e1CB+3iFHs7rK3/glcImLtv/4yc9ahsDaehjRloJP
Pl1eBpiIhv2rLZEr3ejK1WDBBdoOV4tREw5HuHCPK1Qb1JSOxY9Lpd6JbLvY3Kur
lMYbb1hLtKFN/Xlwcb0KlqA/5Z7na2qhsGF/OnFErRfEpOkQmk2QHvP4CQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF8Lb2vuSUtuKYLT2ukYsgeo4FrPMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvWHd0dmEtNUpTMjRwZ3RQYTZSaXlCNmpnV3M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZ0EAwQB
wWzOMA0GCSqGSIb3DQEBCwUAA4IBAQAEeE/t7B9/6Q7TloAcuhVSN0JuugieQwqs
aSJn2qbL0v4yTtcnOeTiwAa9OwzpI9WBdNmKJhxyDjS9FkNar/OcZfzCrjmot3Jf
A0mnakuCY4fbaCQ8D+o5zT/bbdxOgoG0FB12QE2wtQ9T/kisAVIkEJGd5ix+10Zc
sNBYMvdNsTmGnYaOve/RodkiAk42xd2tNFuZbAkCzX4sFBywaugEgTvupgM4GtB3
jPalNGzoPNflkEPPs6CoaUVFR7NmK53nabD5E1wr9+ZHxIpuVfn7ktqZSbIQ4r4u
GtwnU9G9R5VVxIu0sULc+10v9cZc8FoxRXoQcrYjk/3u1xO8apsl
-----END CERTIFICATE-----
Generated at Sat Aug 15 14:42:03 2026 by rpki-client