Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa
File: XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa (raw, json)
Hash identifier: e15uaNhvcCYBGRuKUIfJisu17/id98Z3TDf9Lo+NzRM=
Subject key identifier: 5D:27:DB:3E:4B:C0:16:7D:DB:87:02:6B:05:BD:CD:81:F2:6B:59:61
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C6EC328FD3B13B6A9E8D113A47ED
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa
Signing time: Sat 29 Aug 2026 21:58:13 +0000
ROA not before: Sat 29 Aug 2026 21:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 77.91.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c6:ec:32:8f:d3:b1:3b:6a:9e:8d:11:3a:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d27db3e4bc0167ddb87026b05bdcd81f26b5961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:f7:05:47:51:45:d0:56:62:88:f8:20:6b:
d3:04:8b:2b:02:ff:55:54:b8:08:cc:89:7d:e6:6b:
17:52:da:07:c0:22:63:c8:91:2d:d3:51:72:e6:4d:
0b:dd:b3:50:fe:9a:cd:6a:22:c0:c4:63:ba:4f:db:
22:c9:2e:17:d8:82:11:ac:5b:89:80:bc:4d:be:c1:
f8:db:4f:c8:dc:6b:c6:08:45:8a:41:b5:62:e8:19:
ba:43:1d:92:51:60:d5:63:1e:c5:e9:0b:32:90:c5:
d7:c2:61:25:19:f6:36:cf:1b:6a:2e:74:09:f0:58:
2d:ba:ba:b0:cf:04:b9:5d:23:f2:bf:98:99:60:14:
e5:c6:20:d9:6c:a6:d7:89:f8:7e:78:29:bd:8f:f3:
7d:2e:7b:50:5c:68:e1:21:a1:8b:50:09:33:95:41:
d3:bb:af:02:de:51:d8:54:bc:11:48:52:06:40:e3:
c3:82:dd:e0:74:62:ea:09:43:3c:fe:c1:a7:cd:76:
94:0a:02:b2:5a:0f:ee:39:ab:6d:d9:28:1a:db:7c:
3b:f5:41:d1:40:8a:90:aa:7c:05:79:01:b6:1f:1c:
b0:cc:75:71:df:b2:27:48:a1:46:c0:af:06:da:0e:
8c:71:5b:c8:ad:09:b9:9e:ea:09:09:01:27:4f:a0:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:DB:3E:4B:C0:16:7D:DB:87:02:6B:05:BD:CD:81:F2:6B:59:61
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.69.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7d:99:dc:1e:9b:79:88:5e:c7:33:e9:02:bb:15:fb:90:e6:
1d:6c:e9:c6:f6:bb:78:e7:2d:dc:b5:01:af:d8:a3:24:92:47:
24:6f:77:28:37:a7:63:49:86:c9:8d:ea:6d:72:35:76:cf:4d:
92:a3:25:b7:a0:78:9f:79:95:cf:6a:a0:af:72:0c:eb:47:42:
ec:42:35:bd:5a:57:5e:c8:11:97:36:64:7c:42:ed:9d:f1:40:
9d:98:f1:d5:55:6d:03:35:bc:e7:ae:bf:94:24:77:f4:0c:d4:
20:73:79:c3:0d:78:c3:60:f5:69:21:0b:d4:b1:fb:47:34:b8:
b4:0c:19:07:60:57:e5:d9:04:a0:97:54:f0:19:03:47:98:75:
67:4d:59:da:31:3d:85:ee:ec:f3:d9:0e:17:6b:ca:4b:f3:0a:
3e:73:04:8d:28:31:5b:13:c3:d6:28:66:0b:ba:47:c9:17:e7:
38:ba:d6:01:07:72:c8:df:a5:66:c9:6c:c0:1e:67:71:c2:cd:
03:4f:e3:70:c9:72:af:2a:db:e5:f3:87:4e:88:cc:81:e3:ba:
52:44:9b:89:84:f4:98:c5:83:65:ad:1a:74:f8:fa:61:33:41:
35:4f:ee:05:80:b0:7e:6c:64:18:4d:41:27:64:2b:d8:99:d4:
ad:e8:c9:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBPh8bsMo/TsTtqno0ROkftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk
ZmYxNTMwHhcNMjYwODI5MjE1ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDI3ZGIzZTRiYzAxNjdkZGI4NzAyNmIwNWJkY2Q4MWYyNmI1OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yn3BUdRRdBWYoj4IGvTBIsrAv9V
VLgIzIl95msXUtoHwCJjyJEt01Fy5k0L3bNQ/prNaiLAxGO6T9siyS4X2IIRrFuJ
gLxNvsH420/I3GvGCEWKQbVi6Bm6Qx2SUWDVYx7F6QsykMXXwmElGfY2zxtqLnQJ
8FgturqwzwS5XSPyv5iZYBTlxiDZbKbXifh+eCm9j/N9LntQXGjhIaGLUAkzlUHT
u68C3lHYVLwRSFIGQOPDgt3gdGLqCUM8/sGnzXaUCgKyWg/uOatt2Sga23w79UHR
QIqQqnwFeQG2HxywzHVx37InSKFGwK8G2g6McVvIrQm5nuoJCQEnT6B4vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF0n2z5LwBZ924cCawW9zYHya1lhMB8GA1UdIwQY
MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt
MzM3MTMzYWJiM2UwLzEvWFNmYlBrdkFGbjNiaHdKckJiM05nZkpyV1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw
LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVtFMA0G
CSqGSIb3DQEBCwUAA4IBAQCEfZncHpt5iF7HM+kCuxX7kOYdbOnG9rt45y3ctQGv
2KMkkkckb3coN6djSYbJjeptcjV2z02SoyW3oHifeZXPaqCvcgzrR0LsQjW9Wlde
yBGXNmR8Qu2d8UCdmPHVVW0DNbznrr+UJHf0DNQgc3nDDXjDYPVpIQvUsftHNLi0
DBkHYFfl2QSgl1TwGQNHmHVnTVnaMT2F7uzz2Q4Xa8pL8wo+cwSNKDFbE8PWKGYL
ukfJF+c4utYBB3LI36VmyWzAHmdxws0DT+NwyXKvKtvl84dOiMyB47pSRJuJhPSY
xYNlrRp0+PphM0E1T+4FgLB+bGQYTUEnZCvYmdSt6MnR
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:37 2026 by rpki-client