Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/xwx1cB59vUQWpmxWbaUWnKBZiOs.roa
File: xwx1cB59vUQWpmxWbaUWnKBZiOs.roa (raw, json)
Hash identifier: P04O8zOV+Ggg1l7AjbAYzoIFCC0yUbTBSJWaWlrxr/s=
Subject key identifier: C7:0C:75:70:1E:7D:BD:44:16:A6:6C:56:6D:A5:16:9C:A0:59:88:EB
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1A0FBAB96D7EFB2A37AC7105B17C438A7
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/xwx1cB59vUQWpmxWbaUWnKBZiOs.roa
Signing time: Tue 03 Nov 2026 10:36:50 +0000
ROA not before: Tue 03 Nov 2026 10:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218900
IP address blocks: 91.192.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:fb:ab:96:d7:ef:b2:a3:7a:c7:10:5b:17:c4:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 3 10:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c70c75701e7dbd4416a66c566da5169ca05988eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:00:86:33:d3:9c:74:62:ea:37:12:c7:85:
11:35:51:55:e1:18:e1:aa:27:11:b3:a1:6e:d4:93:
3a:dc:36:f4:2a:df:57:34:d2:0f:8a:bb:03:89:78:
31:0d:7f:c3:7e:78:c7:56:94:26:2b:74:ab:0f:55:
a8:84:a2:16:0a:7c:31:85:10:6a:56:0d:51:f0:01:
28:02:2e:86:21:11:55:41:82:7e:49:08:61:03:62:
0d:60:05:a7:c6:42:bd:83:91:4c:a4:f7:f2:ac:ec:
fc:2d:1b:88:42:22:e7:14:d1:0c:f7:ee:f6:84:f7:
a4:c0:0b:a1:0b:67:da:00:d3:9d:a6:70:67:26:8f:
82:1e:e4:98:61:27:c4:e2:fd:05:cd:e1:30:de:31:
73:2f:a0:bf:18:ad:b7:34:be:cc:39:c6:ca:d5:c1:
61:44:b4:2a:fa:c0:12:af:ef:1f:a4:01:a9:a9:a9:
b2:9e:44:cf:68:c7:d6:66:87:a0:1b:d6:91:71:52:
a7:84:5e:c2:67:43:0e:cf:af:2b:27:f6:4d:b5:c1:
03:5c:dc:32:c8:3a:78:a6:81:94:c1:13:aa:9b:0c:
e0:2f:a8:38:7c:84:1c:42:b4:c5:58:90:74:63:ab:
ef:fe:69:8a:ed:4d:5b:2b:25:7a:6b:31:dd:8e:95:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:75:70:1E:7D:BD:44:16:A6:6C:56:6D:A5:16:9C:A0:59:88:EB
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/xwx1cB59vUQWpmxWbaUWnKBZiOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.94.0/24
Signature Algorithm: sha256WithRSAEncryption
83:44:9d:7f:b4:c8:93:6f:76:17:b2:d0:0b:ae:39:7a:00:b5:
12:94:80:a2:c6:e2:62:1c:ca:28:e6:a9:3b:a8:2e:f6:97:68:
f0:bf:21:d7:8b:2c:6a:f4:a2:0f:68:b7:64:48:c2:00:b6:ed:
2f:6a:08:33:6f:f4:aa:8b:56:e3:32:b6:8a:f2:cf:3c:05:a2:
09:04:95:74:46:f0:84:91:90:4e:b6:e5:03:91:1a:70:fb:d6:
a7:26:f3:c9:21:18:7c:6b:bb:0e:ee:01:a3:3f:69:36:4b:c9:
87:09:73:04:ef:4f:bf:48:23:31:fc:69:3f:0c:5d:40:cb:94:
de:7d:58:45:89:27:70:ea:f7:be:a8:a1:f4:5d:25:09:06:97:
0a:ff:4a:df:8a:70:db:4f:c1:93:a5:22:61:ba:17:90:12:0d:
9e:af:86:52:cf:25:d0:8a:d9:0f:4d:e8:bf:7d:d1:20:7d:f6:
7b:6c:5b:84:4b:cc:25:ca:f3:26:7d:58:fd:b3:a5:00:7a:42:
09:81:c1:78:de:01:85:93:4e:84:2a:ef:a7:1a:42:a5:60:e5:
23:6d:b5:ae:ad:b1:ae:f2:97:25:d1:7b:e6:73:44:25:45:08:
50:65:9a:73:09:ec:db:ac:6d:d0:ae:f1:a8:0b:f5:76:b7:60:
1f:0b:cf:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGg+6uW1++yo3rHEFsXxDinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYxMTAzMTAzNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzBjNzU3MDFlN2RiZDQ0MTZhNjZjNTY2ZGE1MTY5Y2EwNTk4OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTUAhjPTnHRi6jcSx4URNVFV4Rjh
qicRs6Fu1JM63Db0Kt9XNNIPirsDiXgxDX/DfnjHVpQmK3SrD1WohKIWCnwxhRBq
Vg1R8AEoAi6GIRFVQYJ+SQhhA2INYAWnxkK9g5FMpPfyrOz8LRuIQiLnFNEM9+72
hPekwAuhC2faANOdpnBnJo+CHuSYYSfE4v0FzeEw3jFzL6C/GK23NL7MOcbK1cFh
RLQq+sASr+8fpAGpqamynkTPaMfWZoegG9aRcVKnhF7CZ0MOz68rJ/ZNtcEDXNwy
yDp4poGUwROqmwzgL6g4fIQcQrTFWJB0Y6vv/mmK7U1bKyV6azHdjpW2FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMcMdXAefb1EFqZsVm2lFpygWYjrMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEveHd4MWNCNTl2VVFXcG14V2JhVVduS0JaaU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8BeMA0G
CSqGSIb3DQEBCwUAA4IBAQCDRJ1/tMiTb3YXstALrjl6ALUSlICixuJiHMoo5qk7
qC72l2jwvyHXiyxq9KIPaLdkSMIAtu0vaggzb/Sqi1bjMraK8s88BaIJBJV0RvCE
kZBOtuUDkRpw+9anJvPJIRh8a7sO7gGjP2k2S8mHCXME70+/SCMx/Gk/DF1Ay5Te
fVhFiSdw6ve+qKH0XSUJBpcK/0rfinDbT8GTpSJhuheQEg2er4ZSzyXQitkPTei/
fdEgffZ7bFuES8wlyvMmfVj9s6UAekIJgcF43gGFk06EKu+nGkKlYOUjbbWurbGu
8pcl0Xvmc0QlRQhQZZpzCezbrG3QrvGoC/V2t2AfC89I
-----END CERTIFICATE-----
Generated at Mon Nov 9 07:53:44 2026 by rpki-client