Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/XN9O2yd7vMOZYVWW5FurGSxrMaA.roa
File: XN9O2yd7vMOZYVWW5FurGSxrMaA.roa (raw, json)
Hash identifier: MLtnyOG+gWqa9QDRbnM2nAtiJwTIE5o1g5sZgHCmshw=
Subject key identifier: 5C:DF:4E:DB:27:7B:BC:C3:99:61:55:96:E4:5B:AB:19:2C:6B:31:A0
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1893A1EF7250270BD6E43712245827D69
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/XN9O2yd7vMOZYVWW5FurGSxrMaA.roa
Signing time: Thu 29 Oct 2026 19:54:09 +0000
ROA not before: Thu 29 Oct 2026 19:54:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 168.199.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3a:1e:f7:25:02:70:bd:6e:43:71:22:45:82:7d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 29 19:54:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cdf4edb277bbcc399615596e45bab192c6b31a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:8a:99:47:29:88:74:97:4f:d9:60:92:bb:
f8:75:42:67:42:44:bb:be:31:9b:f6:2d:11:bc:09:
e4:6a:0c:c1:0b:ad:2a:92:39:69:5e:11:86:a9:f0:
76:48:1d:26:17:81:d9:54:83:12:8c:d3:53:cd:5c:
ed:82:47:f0:3d:2c:f1:78:cf:32:0b:fd:7f:0f:5d:
3d:45:32:a2:02:ae:92:aa:6d:78:e3:0f:30:93:4c:
d8:c5:74:0f:55:d7:be:a4:08:39:38:52:37:90:a7:
54:d9:d9:1f:a3:0e:e8:bb:dc:b5:94:88:4b:54:c0:
00:23:f0:7d:55:64:df:d3:b1:a3:5d:92:a6:10:47:
c5:be:2e:46:f3:3c:1f:16:3a:e5:65:53:2e:3f:dc:
df:c9:cd:ef:ff:93:87:58:46:b1:9a:2a:8d:16:45:
57:9a:6c:de:2b:32:4c:9c:d2:2d:b2:6d:70:8b:97:
e4:e7:86:62:82:de:f0:a4:e2:b0:6e:d7:52:a7:e9:
c5:c1:fb:20:70:62:41:24:ee:c9:a0:ea:b4:ab:6f:
b7:f1:e3:e5:4b:83:97:e5:88:ed:3c:c5:03:0a:c5:
77:b5:9a:58:22:cd:1c:83:1b:05:d8:0e:f1:22:ca:
31:39:d1:ef:fc:03:1e:8c:16:b9:89:8d:13:07:04:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:4E:DB:27:7B:BC:C3:99:61:55:96:E4:5B:AB:19:2C:6B:31:A0
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/XN9O2yd7vMOZYVWW5FurGSxrMaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.150.0/24
Signature Algorithm: sha256WithRSAEncryption
95:56:e9:dc:d5:e1:8c:ab:ae:60:85:9a:e7:78:1d:e6:84:32:
7c:38:82:39:35:5e:89:01:0d:7a:9f:00:16:4d:37:4a:ef:e3:
f2:5e:64:6f:f0:54:1d:f6:83:c3:57:30:64:36:5b:24:12:ea:
ee:8a:b9:f4:71:02:29:2f:c3:e2:8c:54:4f:d3:03:44:58:52:
d1:a1:67:1f:82:dd:17:cb:40:a9:8e:1d:85:99:5c:40:fe:dd:
5a:80:96:25:44:08:c6:40:02:c0:68:7b:fe:b2:ba:1c:4f:a9:
7c:9b:80:9f:28:33:72:15:d8:ce:52:98:08:15:45:e8:e6:44:
df:5f:bf:87:44:11:b3:0a:a2:19:c0:6b:ff:75:56:de:2a:3a:
b8:87:53:d5:87:60:18:48:ad:c8:d8:b2:49:56:1d:f4:d9:70:
95:95:94:48:5d:d5:4e:dc:9a:c6:41:bc:c8:fb:89:ba:38:f3:
9a:ed:ad:09:bf:40:0c:75:45:aa:df:76:9a:50:64:0e:e1:ab:
83:89:bf:fd:d3:1c:ca:b3:da:c7:07:a3:66:d6:a0:a4:cd:be:
cd:4e:ed:a4:26:42:a0:da:63:88:95:4d:bc:ce:03:a9:c1:2b:
e1:a0:a9:ec:37:59:75:b8:40:2c:cf:8b:d4:35:31:a3:4d:1d:
e5:ff:44:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGJOh73JQJwvW5DcSJFgn1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYxMDI5MTk1NDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RmNGVkYjI3N2JiY2MzOTk2MTU1OTZlNDViYWIxOTJjNmIzMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwiKmUcpiHSXT9lgkrv4dUJnQkS7
vjGb9i0RvAnkagzBC60qkjlpXhGGqfB2SB0mF4HZVIMSjNNTzVztgkfwPSzxeM8y
C/1/D109RTKiAq6Sqm144w8wk0zYxXQPVde+pAg5OFI3kKdU2dkfow7ou9y1lIhL
VMAAI/B9VWTf07GjXZKmEEfFvi5G8zwfFjrlZVMuP9zfyc3v/5OHWEaxmiqNFkVX
mmzeKzJMnNItsm1wi5fk54Zigt7wpOKwbtdSp+nFwfsgcGJBJO7JoOq0q2+38ePl
S4OX5YjtPMUDCsV3tZpYIs0cgxsF2A7xIsoxOdHv/AMejBa5iY0TBwR1IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFzfTtsne7zDmWFVluRbqxksazGgMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvWE45TzJ5ZDd2TU9aWVZXVzVGdXJHU3hyTWFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMeWMA0G
CSqGSIb3DQEBCwUAA4IBAQCVVunc1eGMq65ghZrneB3mhDJ8OII5NV6JAQ16nwAW
TTdK7+PyXmRv8FQd9oPDVzBkNlskEuruirn0cQIpL8PijFRP0wNEWFLRoWcfgt0X
y0Cpjh2FmVxA/t1agJYlRAjGQALAaHv+srocT6l8m4CfKDNyFdjOUpgIFUXo5kTf
X7+HRBGzCqIZwGv/dVbeKjq4h1PVh2AYSK3I2LJJVh302XCVlZRIXdVO3JrGQbzI
+4m6OPOa7a0Jv0AMdUWq33aaUGQO4auDib/90xzKs9rHB6Nm1qCkzb7NTu2kJkKg
2mOIlU28zgOpwSvhoKnsN1l1uEAsz4vUNTGjTR3l/0Qf
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:37:36 2026 by rpki-client