Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/pXoM_ZvT2GIdC09rBn-aygbRiIw.roa
File: pXoM_ZvT2GIdC09rBn-aygbRiIw.roa (raw, json)
Hash identifier: BG4UFOJpjdfRuKyVZq8WAK1+byMi54L2+Lp5SiXtTOA=
Subject key identifier: A5:7A:0C:FD:9B:D3:D8:62:1D:0B:4F:6B:06:7F:9A:CA:06:D1:88:8C
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E9BCD1B552D8F29B9CCC1DAB7990
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/pXoM_ZvT2GIdC09rBn-aygbRiIw.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35238
IP address blocks: 86.63.224.0/19 maxlen: 19
91.91.0.0/16 maxlen: 16
2a00:a580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e9:bc:d1:b5:52:d8:f2:9b:9c:cc:1d:ab:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a57a0cfd9bd3d8621d0b4f6b067f9aca06d1888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:a9:47:df:a6:da:32:50:6d:f7:ee:11:0b:
71:e9:c0:03:39:84:24:67:8f:7c:c5:84:98:18:89:
78:b4:d4:04:84:3c:60:50:13:9b:c8:bb:e9:13:5e:
af:6e:0b:b0:da:c3:08:00:1e:1c:1a:cf:96:f4:f2:
78:d7:bf:03:e3:27:22:37:bf:02:e3:f4:f1:f5:cc:
0b:26:ce:f6:73:6c:61:4d:78:17:7d:c9:70:cf:c2:
ba:b9:48:7d:b8:60:5c:65:ac:2d:ea:07:22:4e:83:
bd:0c:64:91:85:1a:80:b4:cd:c6:bf:81:e7:29:8b:
b3:45:49:2b:ae:4b:4c:fa:4e:d9:e4:57:1f:30:ac:
7e:11:84:47:6d:23:17:53:75:e4:9c:34:ca:41:31:
94:22:9e:d3:25:01:ec:05:8f:37:80:6a:80:96:8b:
13:b6:05:03:23:68:56:e8:54:8a:94:79:19:a4:d4:
6e:00:55:57:a4:06:3f:42:f7:0b:73:6e:ff:9f:d9:
c8:36:59:4d:87:31:06:eb:7d:a3:ed:0c:1f:2b:f7:
82:c5:bc:c8:e6:83:f6:94:38:2d:a0:29:bf:f8:af:
c6:0a:81:2e:a9:1f:45:ae:e9:fe:7b:24:27:99:3e:
4a:3e:e6:82:66:22:d3:d9:98:43:92:a3:cd:74:27:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:0C:FD:9B:D3:D8:62:1D:0B:4F:6B:06:7F:9A:CA:06:D1:88:8C
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/pXoM_ZvT2GIdC09rBn-aygbRiIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.63.224.0/19
91.91.0.0/16
IPv6:
2a00:a580::/32
Signature Algorithm: sha256WithRSAEncryption
65:21:98:34:13:00:72:e7:9e:1d:37:d4:87:92:26:11:5a:9d:
4e:d5:7b:46:a5:eb:6b:14:4e:fa:03:4d:49:5b:53:7b:22:3c:
d4:f8:d4:12:2c:a0:7d:82:83:1a:ee:15:32:dd:d1:e8:0d:6d:
7e:82:86:e8:23:24:77:9f:7a:dd:20:56:b2:ef:7c:da:a5:56:
56:8a:69:9e:fa:cb:6c:17:c6:ff:31:1c:1a:20:8a:9c:f2:61:
b6:17:46:6b:4c:26:f3:7f:0b:81:f0:1f:01:ed:ac:74:79:2b:
91:ab:ff:45:8c:62:1e:bc:1a:ca:61:86:d1:fe:c2:f6:41:71:
b0:b7:e9:d5:85:70:81:46:55:50:7d:0a:85:0c:b9:58:97:f2:
ed:b6:9d:61:1b:ca:a5:5d:5e:5a:6f:41:72:70:df:73:32:fa:
2a:66:11:ff:b2:d4:f9:32:c6:c6:f5:9f:c4:4f:5b:50:99:1c:
c5:4f:2c:d3:aa:bc:7b:9c:2b:a0:53:3c:cf:f0:7b:97:7f:20:
35:c9:be:ac:c7:dc:bd:63:a3:49:fb:1d:fb:24:78:e5:a2:ac:
b5:a9:d6:05:e9:e6:f4:22:43:4f:f5:ff:4f:ff:d4:86:ae:79:
ed:9b:9e:78:d6:46:f8:13:62:c7:fd:ae:42:fa:5a:49:fd:9f:
c3:a8:1a:0a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ8jaOm80bVS2PKbnMwdq3mQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWQzOTZlNWFkNWI3MjhjZTk2Y2ZiY2VmNzVmNThmNTBl
NjEwMDcwHhcNMjYwNzAyMTUxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTdhMGNmZDliZDNkODYyMWQwYjRmNmIwNjdmOWFjYTA2ZDE4ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5SpR9+m2jJQbffuEQtx6cADOYQk
Z498xYSYGIl4tNQEhDxgUBObyLvpE16vbguw2sMIAB4cGs+W9PJ4178D4yciN78C
4/Tx9cwLJs72c2xhTXgXfclwz8K6uUh9uGBcZawt6gciToO9DGSRhRqAtM3Gv4Hn
KYuzRUkrrktM+k7Z5FcfMKx+EYRHbSMXU3XknDTKQTGUIp7TJQHsBY83gGqAlosT
tgUDI2hW6FSKlHkZpNRuAFVXpAY/QvcLc27/n9nINllNhzEG632j7QwfK/eCxbzI
5oP2lDgtoCm/+K/GCoEuqR9Frun+eyQnmT5KPuaCZiLT2ZhDkqPNdCfqSwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKV6DP2b09hiHQtPawZ/msoG0YiMMB8GA1UdIwQY
MBaAFPGdOW5a1bcozpbPvO919Y9Q5hAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvcFhvTV9adlQyR0lkQzA5ckJuLWF5Z2JSaUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQFVj/gAwMA
W1swDQQCAAIwBwMFACoApYAwDQYJKoZIhvcNAQELBQADggEBAGUhmDQTAHLnnh03
1IeSJhFanU7Ve0al62sUTvoDTUlbU3siPNT41BIsoH2CgxruFTLd0egNbX6Chugj
JHefet0gVrLvfNqlVlaKaZ76y2wXxv8xHBogipzyYbYXRmtMJvN/C4HwHwHtrHR5
K5Gr/0WMYh68GsphhtH+wvZBcbC36dWFcIFGVVB9CoUMuViX8u22nWEbyqVdXlpv
QXJw33My+ipmEf+y1Pkyxsb1n8RPW1CZHMVPLNOqvHucK6BTPM/we5d/IDXJvqzH
3L1jo0n7HfskeOWirLWp1gXp5vQiQ0/1/0//1Iauee2bnnjWRvgTYsf9rkL6Wkn9
n8OoGgo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:02 2026 by rpki-client