Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/xA8Gv9nGuQXZRKWCamE0Lq2gIig.roa
File: xA8Gv9nGuQXZRKWCamE0Lq2gIig.roa (raw, json)
Hash identifier: Xvo8QlxQ8XgQ+PkvF5xwzMwO5hiYx9iQ03ZAoehmKDA=
Subject key identifier: C4:0F:06:BF:D9:C6:B9:05:D9:44:A5:82:6A:61:34:2E:AD:A0:22:28
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A106B8678F957209667ED5E3D27FDA4117
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/xA8Gv9nGuQXZRKWCamE0Lq2gIig.roa
Signing time: Sun 04 Oct 2026 11:41:50 +0000
ROA not before: Sun 04 Oct 2026 11:41:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56466
IP address blocks: 31.24.200.0/21 maxlen: 21
87.247.179.0/24 maxlen: 24
89.235.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:b8:67:8f:95:72:09:66:7e:d5:e3:d2:7f:da:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 4 11:41:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c40f06bfd9c6b905d944a5826a61342eada02228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:57:46:3e:df:ad:f2:14:22:6e:79:97:5f:
76:09:7c:e7:e1:81:bc:96:8e:d9:91:67:2d:f4:4d:
a8:d6:bc:91:26:f7:dc:6e:65:a3:2e:b4:52:49:9c:
17:5e:79:7e:06:63:04:4a:45:c5:e6:92:eb:b3:76:
ba:2b:5f:22:bd:df:d7:37:1b:74:f6:45:3f:72:64:
2d:be:ff:81:be:07:c8:df:ca:79:27:21:59:0e:7d:
84:b2:b7:2e:fd:3d:b7:2b:de:82:01:02:c5:bd:a4:
e3:c6:7a:1d:1f:af:ca:9f:0b:5e:f9:4f:9f:91:de:
4b:64:7f:04:85:36:d5:71:0a:25:6a:fa:14:ff:cb:
16:57:6f:58:ba:e9:19:95:33:e1:7a:39:42:25:fc:
a1:65:39:8a:45:ca:80:b2:5d:f2:8b:b3:08:c3:95:
5c:52:a0:11:ef:28:ce:24:f0:90:4d:55:55:67:7a:
f3:ed:bf:55:b8:84:2e:ed:da:ad:3d:92:f7:80:91:
70:6f:35:1b:26:90:76:57:11:38:13:29:0e:09:dc:
82:13:53:b0:2f:61:32:9b:a9:d4:15:c8:ba:59:46:
f4:7e:c0:a5:e9:04:51:3f:a8:6e:b4:8f:44:31:16:
c0:dc:9c:2f:01:12:e0:ee:f3:16:87:37:a1:22:a1:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:06:BF:D9:C6:B9:05:D9:44:A5:82:6A:61:34:2E:AD:A0:22:28
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/xA8Gv9nGuQXZRKWCamE0Lq2gIig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.200.0/21
87.247.179.0/24
89.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0c:7e:10:26:fe:30:4d:0a:66:6c:b5:88:e7:fa:20:ff:19:
12:b0:c3:2c:f5:6f:c3:0c:9d:9c:63:03:4f:73:b1:37:d0:36:
02:6d:c9:4f:a9:c4:e1:03:60:4a:37:76:ff:35:17:40:d3:60:
22:3d:a3:c8:a4:92:4f:c7:26:e4:ea:9a:a1:54:df:ef:12:24:
35:ad:35:e3:7d:6f:8e:fb:5b:54:ac:0d:70:9f:bc:2b:22:35:
2c:c7:f0:a1:d5:20:53:61:c8:09:30:8c:7e:87:37:37:ae:fd:
96:53:40:9b:65:29:e9:ad:33:a3:87:30:64:9a:61:04:d0:16:
2b:b4:91:f7:60:9e:8e:f6:50:d3:84:5c:2e:79:39:2b:7d:e5:
57:1f:88:0a:47:17:60:79:21:c8:75:65:36:06:69:39:d3:a6:
9a:4b:08:5a:97:27:2d:26:a9:b8:21:0a:e5:75:a1:41:17:c2:
07:69:d1:f0:a2:38:5c:05:bc:63:3f:5e:54:5c:ab:6c:fd:89:
c7:c1:72:87:01:65:da:50:6a:d4:bb:9e:09:6d:76:96:c7:5a:
de:27:f7:fe:51:7f:a7:7b:9e:d9:48:ce:f8:19:12:e8:87:33:
83:89:26:d9:97:f7:c2:e3:e5:13:38:c2:78:ad:de:de:03:13:
f8:df:7f:e2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEGuGePlXIJZn7V49J/2kEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYxMDA0MTE0MTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDBmMDZiZmQ5YzZiOTA1ZDk0NGE1ODI2YTYxMzQyZWFkYTAyMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptNXRj7frfIUIm55l192CXzn4YG8
lo7ZkWct9E2o1ryRJvfcbmWjLrRSSZwXXnl+BmMESkXF5pLrs3a6K18ivd/XNxt0
9kU/cmQtvv+BvgfI38p5JyFZDn2Esrcu/T23K96CAQLFvaTjxnodH6/Knwte+U+f
kd5LZH8EhTbVcQolavoU/8sWV29YuukZlTPhejlCJfyhZTmKRcqAsl3yi7MIw5Vc
UqAR7yjOJPCQTVVVZ3rz7b9VuIQu7dqtPZL3gJFwbzUbJpB2VxE4EykOCdyCE1Ow
L2Eym6nUFci6WUb0fsCl6QRRP6hutI9EMRbA3JwvARLg7vMWhzehIqGkYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMQPBr/ZxrkF2USlgmphNC6toCIoMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEveEE4R3Y5bkd1UVhaUktXQ2FtRTBMcTJnSWlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDHxjIAwQA
V/ezAwQAWetNMA0GCSqGSIb3DQEBCwUAA4IBAQCcDH4QJv4wTQpmbLWI5/og/xkS
sMMs9W/DDJ2cYwNPc7E30DYCbclPqcThA2BKN3b/NRdA02AiPaPIpJJPxybk6pqh
VN/vEiQ1rTXjfW+O+1tUrA1wn7wrIjUsx/Ch1SBTYcgJMIx+hzc3rv2WU0CbZSnp
rTOjhzBkmmEE0BYrtJH3YJ6O9lDThFwueTkrfeVXH4gKRxdgeSHIdWU2Bmk506aa
SwhalyctJqm4IQrldaFBF8IHadHwojhcBbxjP15UXKts/YnHwXKHAWXaUGrUu54J
bXaWx1reJ/f+UX+ne57ZSM74GRLohzODiSbZl/fC4+UTOMJ4rd7eAxP433/i
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:34 2026 by rpki-client