Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1-XykcXcgQUH7oWgFpBlpQpYzERE.roa
File: 1-XykcXcgQUH7oWgFpBlpQpYzERE.roa (raw, json)
Hash identifier: 6Pl/4c9cPU179mwsZQj+5eaoRUGnFFUeBYoDTEosDGs=
Subject key identifier: F9:7C:A4:71:77:20:41:41:FB:A1:68:05:A4:19:69:42:96:33:11:11
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0DEFC0978BBF0695876F38E152731792D
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1-XykcXcgQUH7oWgFpBlpQpYzERE.roa
Signing time: Sat 26 Sep 2026 18:30:54 +0000
ROA not before: Sat 26 Sep 2026 18:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 94.184.33.0/24 maxlen: 24
94.184.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:fc:09:78:bb:f0:69:58:76:f3:8e:15:27:31:79:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 26 18:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f97ca47177204141fba16805a419694296331111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:33:78:4c:0f:2f:0c:33:4d:b2:34:f8:2f:
d0:b7:56:48:d7:01:6d:e5:00:cc:e4:9e:2d:c9:0d:
01:fb:1b:b0:ff:c1:5d:71:56:0f:c7:c4:bc:de:5a:
d7:85:5f:d4:27:7f:81:d3:28:f6:82:f9:bb:ed:fb:
2c:83:d9:c7:e5:a3:83:56:b7:c9:76:93:70:92:d6:
ba:61:fd:f3:69:d5:30:ac:7d:b8:51:e2:b6:f9:3c:
df:fb:e7:60:58:1b:56:41:4c:3e:92:e7:31:40:0a:
72:87:64:f7:1e:c8:8d:82:40:8b:5f:6e:a2:4e:cd:
fb:81:8f:4f:0f:76:0c:36:65:35:2a:63:30:dc:d5:
c4:30:8f:c0:54:92:65:5d:30:be:6f:48:2a:cd:e8:
d1:3a:9a:4f:39:18:4f:54:66:0d:8a:03:64:82:db:
3f:c4:c5:64:e2:69:b1:89:d5:79:16:e8:99:82:2a:
df:35:3c:ce:71:be:57:17:0f:1f:71:e6:de:c1:36:
a1:cc:0a:7f:b0:93:ca:38:b5:7b:35:9b:3f:94:44:
cf:69:7f:42:db:31:56:25:28:2a:84:09:e5:5a:35:
68:de:21:14:7b:43:a3:68:92:cb:4a:f0:a9:03:34:
02:8a:57:bd:bf:6e:ac:66:6f:c9:08:b8:e9:60:b5:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:A4:71:77:20:41:41:FB:A1:68:05:A4:19:69:42:96:33:11:11
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1-XykcXcgQUH7oWgFpBlpQpYzERE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.33.0/24
94.184.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:29:1d:d2:a9:1d:99:97:c0:e2:77:53:02:15:8f:e6:f0:86:
ba:75:aa:8b:94:ea:eb:07:e5:14:79:a4:2d:3e:d3:08:a5:4f:
9a:f2:33:52:95:f0:e6:57:b7:0e:dd:44:4c:c1:1f:ad:ab:91:
45:34:f4:5a:fd:81:54:8a:62:eb:4e:4b:96:f4:bc:63:2f:f8:
d8:ce:12:eb:a0:6a:61:7a:9a:08:e3:9a:e3:26:bc:44:02:bc:
ce:a7:20:24:bd:5b:cf:d2:71:17:67:11:3d:07:69:87:b4:d3:
19:a9:be:1e:86:0d:10:2c:65:28:36:e0:e8:0a:f8:f5:0d:05:
b1:1b:8d:6c:9d:49:02:d8:d7:cd:86:32:f5:fa:3e:f2:81:d9:
a7:6f:aa:78:3c:e3:f9:d4:b5:28:cc:e6:c2:3b:57:7b:2f:45:
71:f3:82:eb:db:3b:93:c4:b0:71:14:8d:ce:10:ce:98:9f:40:
d6:44:fa:27:6b:f4:8c:0f:0e:a1:13:52:b9:18:93:3a:fc:ca:
2d:b7:16:4c:da:87:fd:66:57:63:f2:74:5e:32:3d:62:d4:69:
0a:38:c2:8e:d9:3e:22:44:e5:d7:41:59:26:af:eb:fb:8d:37:
fb:9f:0c:ef:1d:db:48:08:ec:60:a6:aa:30:76:23:66:34:db:
2d:e2:18:19
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAaDe/Al4u/BpWHbzjhUnMXktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwOTI2MTgzMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTdjYTQ3MTc3MjA0MTQxZmJhMTY4MDVhNDE5Njk0Mjk2MzMxMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfozeEwPLwwzTbI0+C/Qt1ZI1wFt
5QDM5J4tyQ0B+xuw/8FdcVYPx8S83lrXhV/UJ3+B0yj2gvm77fssg9nH5aODVrfJ
dpNwkta6Yf3zadUwrH24UeK2+Tzf++dgWBtWQUw+kucxQApyh2T3HsiNgkCLX26i
Ts37gY9PD3YMNmU1KmMw3NXEMI/AVJJlXTC+b0gqzejROppPORhPVGYNigNkgts/
xMVk4mmxidV5FuiZgirfNTzOcb5XFw8fcebewTahzAp/sJPKOLV7NZs/lETPaX9C
2zFWJSgqhAnlWjVo3iEUe0OjaJLLSvCpAzQCile9v26sZm/JCLjpYLV8qwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPl8pHF3IEFB+6FoBaQZaUKWMxERMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvMS1YeWtjWGNnUVVIN29XZ0ZwQmxwUXBZekVSRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODQvNGYxYjI3LTMyNmEtNDY3OS1hNjRiLWRhNjE1Mzg4NWYz
Yi8xL1dEMTJCUkFYMEstcEZmejdlUW9BOUdaN0NvZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF64IQME
AF64KjANBgkqhkiG9w0BAQsFAAOCAQEApCkd0qkdmZfA4ndTAhWP5vCGunWqi5Tq
6wflFHmkLT7TCKVPmvIzUpXw5le3Dt1ETMEfrauRRTT0Wv2BVIpi605LlvS8Yy/4
2M4S66BqYXqaCOOa4ya8RAK8zqcgJL1bz9JxF2cRPQdph7TTGam+HoYNECxlKDbg
6Ar49Q0FsRuNbJ1JAtjXzYYy9fo+8oHZp2+qeDzj+dS1KMzmwjtXey9FcfOC69s7
k8SwcRSNzhDOmJ9A1kT6J2v0jA8OoRNSuRiTOvzKLbcWTNqH/WZXY/J0XjI9YtRp
CjjCjtk+IkTl10FZJq/r+403+58M7x3bSAjsYKaqMHYjZjTbLeIYGQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:59:56 2026 by rpki-client