Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xW-D6dx_O-0VDraoBQJ4mPa1qeo.roa
File: xW-D6dx_O-0VDraoBQJ4mPa1qeo.roa (raw, json)
Hash identifier: H522eKtQnjHMEGCHEeEOZ1hx+rP07Q6eWxs4E+qgZaI=
Subject key identifier: C5:6F:83:E9:DC:7F:3B:ED:15:0E:B6:A8:05:02:78:98:F6:B5:A9:EA
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A0573CB96E6AF6B8039DAECF326D676161
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xW-D6dx_O-0VDraoBQJ4mPa1qeo.roa
Signing time: Mon 31 Aug 2026 09:53:12 +0000
ROA not before: Mon 31 Aug 2026 09:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62048
IP address blocks: 94.182.163.0/24 maxlen: 24
94.182.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:3c:b9:6e:6a:f6:b8:03:9d:ae:cf:32:6d:67:61:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 31 09:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c56f83e9dc7f3bed150eb6a805027898f6b5a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:e7:b5:f6:bc:d5:1e:50:69:3d:33:13:84:
e9:0c:fd:7e:a1:1f:74:59:a1:90:f7:25:fb:2d:ba:
b8:88:63:44:c7:5a:ac:3d:d9:3f:23:65:40:ba:19:
2a:b8:c7:f7:0d:09:28:7c:f4:68:cc:61:bd:cc:c6:
a5:82:4f:85:b2:dc:a9:8c:72:cf:3d:cc:d1:4a:6d:
99:2e:6b:51:01:fa:64:32:c1:11:54:47:4f:49:e9:
8e:e5:bd:38:ac:18:6f:54:c9:b8:31:de:34:db:c8:
df:01:51:c8:07:d0:7e:44:88:6b:01:ce:8a:6d:73:
97:28:78:1a:0d:23:c7:71:07:39:ac:67:78:d8:4f:
26:fc:5d:13:c6:c5:4b:fd:6d:ac:0f:48:f7:2f:70:
95:da:39:87:24:ab:21:43:98:92:fb:30:45:58:1b:
d9:94:d0:06:6e:4a:a8:47:ec:3d:c1:2b:fc:7a:37:
53:2e:42:e0:d0:96:8a:75:43:67:10:fd:fb:aa:b2:
7e:3d:ad:81:d8:98:d1:07:4b:da:48:10:95:7c:65:
91:f3:49:8b:01:e2:95:c1:53:01:7a:08:ba:10:35:
09:85:f9:86:f8:69:14:c1:d0:66:55:e5:93:3b:f5:
21:1d:c2:5a:d2:c1:78:fa:4d:de:57:30:e5:17:9a:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6F:83:E9:DC:7F:3B:ED:15:0E:B6:A8:05:02:78:98:F6:B5:A9:EA
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xW-D6dx_O-0VDraoBQJ4mPa1qeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.163.0-94.182.164.255
Signature Algorithm: sha256WithRSAEncryption
0f:03:5d:b7:05:95:18:9d:ef:01:72:68:3a:d3:3a:bd:77:90:
4e:3d:1e:2f:50:6b:4b:9e:ff:7b:90:12:5f:3f:79:99:e1:ae:
dd:59:11:9b:2d:1b:43:76:86:ab:6c:90:4e:52:93:bc:a8:73:
e6:f4:8c:89:3f:3f:53:67:da:35:57:9c:23:90:dc:a2:c7:e6:
9b:d4:ab:b7:b6:80:1d:1a:59:4c:35:6c:68:48:c9:d4:ee:b5:
d6:f4:43:3b:00:b8:67:0c:63:3d:b0:44:8b:e5:7e:94:0d:1c:
98:18:60:d2:80:0f:65:3c:71:fc:d9:eb:a2:e5:dd:30:d2:c3:
44:93:e8:15:c3:80:d8:66:b9:7f:42:d2:97:8c:0b:97:b7:a4:
bc:d1:6b:ba:8d:bf:c1:05:71:99:68:9c:ae:fd:b4:f6:1b:d2:
be:cd:47:9a:4b:9b:9a:97:55:44:c8:ae:c8:46:cf:6a:72:22:
d0:91:97:61:7e:6c:ba:80:63:e0:20:8b:20:03:f6:d3:ce:1c:
6a:06:b4:25:3d:35:13:00:3f:14:9c:b4:f1:4d:d9:61:e8:54:
e2:de:66:6a:e2:9d:a1:9e:8e:51:ea:f2:c9:a1:7b:77:4c:3f:
6c:86:e0:8c:d5:66:27:63:78:02:df:ed:ca:7e:15:b4:bc:ce:
63:e3:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:01:45 2026 by rpki-client