Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JxwtXgGoD_CFiDd6Tm589CrVbsQ.roa
File: JxwtXgGoD_CFiDd6Tm589CrVbsQ.roa (raw, json)
Hash identifier: Rx8fWHkF2gGQDkE0A9hko81H/LNI95XicoVZhoeF28w=
Subject key identifier: 27:1C:2D:5E:01:A8:0F:F0:85:88:37:7A:4E:6E:7C:F4:2A:D5:6E:C4
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0E7B6D6878A4BE3C06CC0A1A106F21108
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JxwtXgGoD_CFiDd6Tm589CrVbsQ.roa
Signing time: Mon 28 Sep 2026 11:11:54 +0000
ROA not before: Mon 28 Sep 2026 11:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b6:d6:87:8a:4b:e3:c0:6c:c0:a1:a1:06:f2:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 28 11:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=271c2d5e01a80ff08588377a4e6e7cf42ad56ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:0b:b8:a9:ff:4c:38:8a:51:0b:ac:d1:60:
a6:b5:56:e2:a4:f0:66:d1:b5:90:01:d8:8d:7d:74:
46:ba:48:b1:3b:0a:20:3a:83:a0:93:29:da:08:76:
42:e1:93:4e:a4:8f:b2:c2:8e:4f:74:c6:9d:3c:06:
32:96:80:13:f8:44:23:d4:8e:f2:f4:67:02:75:71:
b6:97:67:5e:53:5a:2d:40:98:0c:9e:bc:fa:cd:23:
b7:9b:17:12:ae:4f:a9:1e:d6:df:08:31:6c:40:a9:
ac:a6:f0:11:10:a3:88:17:00:18:fb:9b:d8:02:cb:
1e:bb:20:10:53:3d:29:d9:66:12:ea:f0:74:e9:f1:
99:0d:bf:cb:2f:56:79:19:c0:de:e4:31:bd:19:20:
17:6f:c1:c8:fd:44:4b:dd:3d:9d:03:38:85:41:8e:
d3:52:3b:7b:89:ee:e3:62:bc:bb:b8:47:7a:ed:37:
9c:56:7d:b6:61:7d:6f:11:00:65:f4:99:f7:3c:46:
83:8a:c2:c0:13:a8:99:45:71:e0:5c:f8:40:70:58:
d3:5a:ae:ed:a2:a0:72:70:b2:85:06:56:7a:46:14:
e4:d3:2e:15:09:dc:f1:47:4a:23:64:c4:38:0a:21:
74:12:47:6e:64:6e:52:86:1c:01:11:fc:b9:f9:f5:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:2D:5E:01:A8:0F:F0:85:88:37:7A:4E:6E:7C:F4:2A:D5:6E:C4
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JxwtXgGoD_CFiDd6Tm589CrVbsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ce:a8:3c:7e:9c:10:dc:9b:d0:45:b9:cd:d5:e3:ca:cc:ad:
02:19:c5:aa:f8:48:e4:ae:1d:65:9d:c9:ab:17:7a:8b:a6:fb:
e3:89:d1:fd:cf:20:2e:7e:22:db:a3:53:1e:7c:b3:1a:33:78:
c1:04:2f:58:4c:86:77:46:28:8e:eb:ff:c6:56:c1:c8:97:dd:
51:17:1a:5f:0a:ab:0f:be:a3:16:ad:e4:a0:0d:cf:1c:43:8e:
de:3e:6b:47:a9:fa:c1:d5:8e:50:b3:4a:f7:4b:54:32:93:fa:
57:7e:50:0a:73:5f:8d:b1:7e:a5:a8:5e:ee:9c:51:e1:81:13:
a9:89:a8:e0:56:d8:eb:a6:d2:f4:19:f7:8c:e0:77:3e:3f:53:
07:a7:08:31:19:d2:eb:09:a2:69:1e:00:00:9c:3a:08:a7:0c:
04:9f:92:fb:49:a3:25:64:a5:4d:3f:ab:dd:bf:cb:9f:3c:69:
cd:a9:dd:47:b2:35:11:5d:7d:f9:c8:5b:9d:36:18:1f:d2:6f:
31:e8:c8:e1:d1:18:1f:50:76:28:01:cb:2f:5d:6b:34:74:8d:
ee:68:bc:0f:ad:61:ce:1f:0b:17:fe:af:ac:28:2d:ce:bc:49:
ed:17:b1:cf:ea:60:e8:b0:da:23:8e:16:c8:e4:ee:c4:04:73:
e0:43:b9:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDnttaHikvjwGzAoaEG8hEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwOTI4MTExMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzFjMmQ1ZTAxYTgwZmYwODU4ODM3N2E0ZTZlN2NmNDJhZDU2ZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ALuKn/TDiKUQus0WCmtVbipPBm
0bWQAdiNfXRGukixOwogOoOgkynaCHZC4ZNOpI+ywo5PdMadPAYyloAT+EQj1I7y
9GcCdXG2l2deU1otQJgMnrz6zSO3mxcSrk+pHtbfCDFsQKmspvAREKOIFwAY+5vY
AsseuyAQUz0p2WYS6vB06fGZDb/LL1Z5GcDe5DG9GSAXb8HI/URL3T2dAziFQY7T
Ujt7ie7jYry7uEd67TecVn22YX1vEQBl9Jn3PEaDisLAE6iZRXHgXPhAcFjTWq7t
oqBycLKFBlZ6RhTk0y4VCdzxR0ojZMQ4CiF0EkduZG5ShhwBEfy5+fVaQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCccLV4BqA/whYg3ek5ufPQq1W7EMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvSnh3dFhnR29EX0NGaURkNlRtNTg5Q3JWYnNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQEoMA0G
CSqGSIb3DQEBCwUAA4IBAQAYzqg8fpwQ3JvQRbnN1ePKzK0CGcWq+Ejkrh1lncmr
F3qLpvvjidH9zyAufiLbo1MefLMaM3jBBC9YTIZ3RiiO6//GVsHIl91RFxpfCqsP
vqMWreSgDc8cQ47ePmtHqfrB1Y5Qs0r3S1Qyk/pXflAKc1+NsX6lqF7unFHhgROp
iajgVtjrptL0GfeM4Hc+P1MHpwgxGdLrCaJpHgAAnDoIpwwEn5L7SaMlZKVNP6vd
v8ufPGnNqd1HsjURXX35yFudNhgf0m8x6Mjh0RgfUHYoAcsvXWs0dI3uaLwPrWHO
HwsX/q+sKC3OvEntF7HP6mDosNojjhbI5O7EBHPgQ7mV
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:13:03 2026 by rpki-client