Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/xXZWM46z1TAUOXQSE6oSpM5BsdQ.roa
File: xXZWM46z1TAUOXQSE6oSpM5BsdQ.roa (raw, json)
Hash identifier: nduBgEx3bWW/63xwL0qUko3F9aKO/3P5rrMsQnWCQDU=
Subject key identifier: C5:76:56:33:8E:B3:D5:30:14:39:74:12:13:AA:12:A4:CE:41:B1:D4
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019D30CB37AD32034AEAAE0060DB5608E49D
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/xXZWM46z1TAUOXQSE6oSpM5BsdQ.roa
Signing time: Fri 27 Mar 2026 19:35:17 +0000
ROA not before: Fri 27 Mar 2026 19:35:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 2a10:fa82::/48 maxlen: 48
2a10:fa82:1::/48 maxlen: 48
2a10:fa82:2::/48 maxlen: 48
2a10:fa82:f600::/40 maxlen: 40
2a10:fa82:f700::/40 maxlen: 40
2a10:fa82:f800::/40 maxlen: 40
2a10:fa82:f900::/40 maxlen: 40
2a10:fa82:fa00::/40 maxlen: 40
2a10:fa82:fb00::/40 maxlen: 40
2a10:fa82:fc00::/40 maxlen: 40
2a10:fa82:fd00::/40 maxlen: 40
2a10:fa82:fe00::/40 maxlen: 40
2a10:fa82:fea0::/48 maxlen: 48
2a10:fa82:fef0::/44 maxlen: 44
2a10:fa82:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:cb:37:ad:32:03:4a:ea:ae:00:60:db:56:08:e4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Mar 27 19:35:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c57656338eb3d5301439741213aa12a4ce41b1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:2e:d0:46:b4:11:0b:62:2d:87:f3:2c:a1:
2b:77:ba:66:44:66:ea:49:7b:54:56:46:c1:59:6d:
53:78:75:c3:07:b9:fa:40:71:87:54:8d:4b:2c:5b:
82:87:d3:da:07:02:52:42:66:6e:7a:6b:79:06:82:
75:ef:87:ae:a0:8d:7b:22:15:f0:78:fd:ad:a2:37:
aa:86:38:26:45:7c:e9:6c:30:74:a6:ce:ee:83:5c:
52:24:8a:42:79:79:5b:51:46:67:54:ab:a1:9d:00:
c6:5e:d2:15:1f:26:ae:8b:25:8c:f8:36:f4:8e:d3:
cd:41:89:67:0f:74:50:4a:d5:e9:46:4c:1c:1f:11:
8c:27:91:f1:69:67:9d:83:35:47:94:02:d8:e6:3d:
8c:61:1c:71:24:68:ad:46:a2:7f:f6:01:a5:8b:c0:
46:46:c5:73:b8:69:a5:4b:f7:d1:cc:1f:11:26:34:
af:92:ba:d2:66:da:6b:7a:16:a5:78:bf:2b:41:03:
bb:93:10:dd:1a:f2:9d:63:f3:75:04:6c:f9:ab:98:
5e:50:2b:fb:1a:c4:58:2b:b1:4f:36:d6:5f:1a:4d:
17:96:00:13:d6:e1:fb:b0:bc:d8:bd:f4:62:40:0f:
b5:e5:58:b9:6b:e2:4c:92:13:b1:59:04:ec:37:d0:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:76:56:33:8E:B3:D5:30:14:39:74:12:13:AA:12:A4:CE:41:B1:D4
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/xXZWM46z1TAUOXQSE6oSpM5BsdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa82::-2a10:fa82:2:ffff:ffff:ffff:ffff:ffff
2a10:fa82:f600::-2a10:fa82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:ab:ab:3b:c5:62:90:83:97:ea:61:1d:fb:4e:09:95:be:38:
69:58:f6:26:76:0e:38:ca:0d:7c:f3:4e:81:18:5c:38:64:ef:
cc:75:40:00:ea:5e:b3:ee:2f:a0:40:9b:7f:2d:d6:97:ed:3f:
28:9d:7b:a8:44:30:bb:cf:17:5c:ce:37:e5:86:58:b3:2c:1d:
e2:58:3d:6b:bd:36:f0:cf:9c:9e:83:42:76:9a:02:cf:b6:f1:
5b:c1:85:c4:c5:c6:57:ad:f2:90:58:10:3f:9a:92:9d:38:9c:
b1:60:c2:a0:17:e3:b8:26:b1:2e:60:6e:db:be:09:b4:98:3f:
bc:28:58:cc:0a:dc:1a:9c:cb:b2:68:2d:c2:42:f4:f6:3d:c4:
1c:dc:7d:e3:7a:14:8b:a0:da:9c:54:19:34:7b:e3:d1:e8:15:
7e:48:ef:81:93:b4:3b:b0:6a:66:db:a1:b3:c5:d8:b3:31:9b:
94:6e:4a:af:9a:34:7e:98:e6:a9:14:3d:05:c0:57:a5:fb:df:
4d:28:75:7e:5e:66:9c:9c:41:7a:af:25:47:1c:65:e2:10:4c:
a3:f6:d1:f4:be:02:12:d9:92:85:9f:3b:f3:6e:d3:63:b9:8e:
21:d7:ad:29:29:a4:3e:71:9a:81:11:6f:ab:59:3d:52:30:62:
7a:f3:a3:6f
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ0wyzetMgNK6q4AYNtWCOSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwMzI3MTkzNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTc2NTYzMzhlYjNkNTMwMTQzOTc0MTIxM2FhMTJhNGNlNDFiMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWYu0Ea0EQtiLYfzLKErd7pmRGbq
SXtUVkbBWW1TeHXDB7n6QHGHVI1LLFuCh9PaBwJSQmZuemt5BoJ174euoI17IhXw
eP2tojeqhjgmRXzpbDB0ps7ug1xSJIpCeXlbUUZnVKuhnQDGXtIVHyauiyWM+Db0
jtPNQYlnD3RQStXpRkwcHxGMJ5HxaWedgzVHlALY5j2MYRxxJGitRqJ/9gGli8BG
RsVzuGmlS/fRzB8RJjSvkrrSZtprehaleL8rQQO7kxDdGvKdY/N1BGz5q5heUCv7
GsRYK7FPNtZfGk0XlgAT1uH7sLzYvfRiQA+15Vi5a+JMkhOxWQTsN9DY3wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFMV2VjOOs9UwFDl0EhOqEqTOQbHUMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEveFhaV000NnoxVEFVT1hRU0U2b1NwTTVCc2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjMBADBQEqEPqC
AwcAKhD6ggACMA8DBgEqEPqC9gMFACoQ+oIwDQYJKoZIhvcNAQELBQADggEBADCr
qzvFYpCDl+phHftOCZW+OGlY9iZ2DjjKDXzzToEYXDhk78x1QADqXrPuL6BAm38t
1pftPyide6hEMLvPF1zON+WGWLMsHeJYPWu9NvDPnJ6DQnaaAs+28VvBhcTFxlet
8pBYED+akp04nLFgwqAX47gmsS5gbtu+CbSYP7woWMwK3Bqcy7JoLcJC9PY9xBzc
feN6FIug2pxUGTR749HoFX5I74GTtDuwambbobPF2LMxm5RuSq+aNH6Y5qkUPQXA
V6X7300odX5eZpycQXqvJUccZeIQTKP20fS+AhLZkoWfO/Nu02O5jiHXrSkppD5x
moERb6tZPVIwYnrzo28=
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:08:05 2026 by rpki-client