Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XdWEhWGs3RQyuH8nBgZXkGc5Ko8.roa
File: XdWEhWGs3RQyuH8nBgZXkGc5Ko8.roa (raw, json)
Hash identifier: lphDDyN9wALkOjiNaASEquS3rDJDtSh8kR5tPt8sFx8=
Subject key identifier: 5D:D5:84:85:61:AC:DD:14:32:B8:7F:27:06:06:57:90:67:39:2A:8F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A136C08E0DBB4EFE2FCB545938CCDCB517
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XdWEhWGs3RQyuH8nBgZXkGc5Ko8.roa
Signing time: Tue 13 Oct 2026 19:32:31 +0000
ROA not before: Tue 13 Oct 2026 19:32:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219121
IP address blocks: 191.44.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:c0:8e:0d:bb:4e:fe:2f:cb:54:59:38:cc:dc:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 13 19:32:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dd5848561acdd1432b87f270606579067392a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:36:eb:bd:97:9a:eb:8a:2a:8b:3f:3d:9a:82:
14:9d:d6:60:d7:a1:cc:2a:c2:c7:02:d3:b3:95:f2:
e7:b1:aa:6e:d8:e3:92:04:f2:2b:a1:fc:91:b6:0b:
9f:a5:c1:95:e4:bc:61:e7:ec:53:08:0e:53:d0:ef:
ef:66:3f:cd:8b:28:e5:bd:6e:52:9b:ce:bc:da:e9:
d3:37:af:5f:4f:9f:4e:8d:0a:ea:ee:67:47:38:a2:
4f:be:1d:8c:75:d1:76:22:ef:bf:ea:31:aa:39:20:
cd:6d:a7:63:de:59:a7:6b:8a:56:1b:24:70:e4:88:
e9:c2:3a:ff:fd:b2:b5:ea:f8:f3:b1:e0:6a:92:07:
c5:ca:49:27:f6:10:db:dc:12:c9:a2:11:a4:83:bc:
87:5e:fe:73:8c:66:d4:25:8a:b2:fb:6f:db:4b:5c:
71:a2:5c:b4:d0:c6:64:32:7e:fc:d0:15:e0:a9:88:
f4:a3:43:7f:2c:5d:ce:a7:ad:b4:91:13:47:99:92:
ed:20:65:31:4d:12:11:bc:42:d2:e6:f1:9c:e5:62:
20:a1:cf:7a:1a:d9:a0:7f:88:db:55:c6:13:c0:f9:
92:b9:d9:e2:a3:53:ab:46:01:80:78:f2:bf:72:1e:
a7:35:48:0d:72:05:4d:08:ad:76:c0:91:dd:11:18:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D5:84:85:61:AC:DD:14:32:B8:7F:27:06:06:57:90:67:39:2A:8F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XdWEhWGs3RQyuH8nBgZXkGc5Ko8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7c:56:64:46:19:72:da:54:03:4f:82:96:9e:3e:d9:67:c3:
5f:4e:fe:cf:35:25:0b:22:3a:ec:9f:53:e1:04:23:ef:ef:f5:
3e:fa:2e:cf:b2:21:ec:47:85:c7:aa:6f:9e:99:de:b8:d4:2f:
1e:f5:1a:ff:2f:65:d5:b4:c1:80:42:33:d2:6d:15:39:0e:90:
5f:cd:62:d5:1a:76:94:9e:a8:25:c8:a3:39:85:ba:f7:15:cc:
3d:0f:e0:96:41:4d:00:dc:8b:a2:0b:d1:51:5e:6a:f3:92:f9:
10:1c:b9:d8:83:fb:52:70:f8:a8:08:80:69:d3:18:3e:86:be:
f9:da:29:b0:5e:e7:eb:39:c4:4c:f8:7a:1b:6c:a0:29:98:44:
db:08:00:09:a2:f8:6d:23:ba:71:9d:fa:30:74:8b:5c:f5:91:
14:a5:60:4a:e9:7f:61:44:1d:7e:4f:fe:ed:85:6e:58:d7:7a:
50:e4:ac:a3:8f:f2:42:6c:67:aa:a7:fd:5f:6e:7b:d1:e9:80:
27:2b:de:97:45:35:13:dc:a4:af:96:c4:72:ea:af:56:ac:52:
83:d5:78:b1:85:3e:f4:4d:7c:24:ab:a3:8a:46:82:df:fb:10:
2b:71:20:7b:9f:99:ae:e8:8a:be:e2:bf:47:bc:5f:87:ac:d3:
d4:d6:57:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE2wI4Nu07+L8tUWTjM3LUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYxMDEzMTkzMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGQ1ODQ4NTYxYWNkZDE0MzJiODdmMjcwNjA2NTc5MDY3MzkyYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jbrvZea64oqiz89moIUndZg16HM
KsLHAtOzlfLnsapu2OOSBPIrofyRtgufpcGV5Lxh5+xTCA5T0O/vZj/NiyjlvW5S
m8682unTN69fT59OjQrq7mdHOKJPvh2MddF2Iu+/6jGqOSDNbadj3lmna4pWGyRw
5Ijpwjr//bK16vjzseBqkgfFykkn9hDb3BLJohGkg7yHXv5zjGbUJYqy+2/bS1xx
oly00MZkMn780BXgqYj0o0N/LF3Op620kRNHmZLtIGUxTRIRvELS5vGc5WIgoc96
Gtmgf4jbVcYTwPmSudnio1OrRgGAePK/ch6nNUgNcgVNCK12wJHdERjN8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF3VhIVhrN0UMrh/JwYGV5BnOSqPMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvWGRXRWhXR3MzUlF5dUg4bkJnWlhrR2M1S284LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxVMA0G
CSqGSIb3DQEBCwUAA4IBAQBTfFZkRhly2lQDT4KWnj7ZZ8NfTv7PNSULIjrsn1Ph
BCPv7/U++i7PsiHsR4XHqm+emd641C8e9Rr/L2XVtMGAQjPSbRU5DpBfzWLVGnaU
nqglyKM5hbr3Fcw9D+CWQU0A3IuiC9FRXmrzkvkQHLnYg/tScPioCIBp0xg+hr75
2imwXufrOcRM+HobbKApmETbCAAJovhtI7pxnfowdItc9ZEUpWBK6X9hRB1+T/7t
hW5Y13pQ5Kyjj/JCbGeqp/1fbnvR6YAnK96XRTUT3KSvlsRy6q9WrFKD1XixhT70
TXwkq6OKRoLf+xArcSB7n5mu6Iq+4r9HvF+HrNPU1ldo
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:54:59 2026 by rpki-client