Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x81qRCU2YqwQP6PCQiveLaLRppg.roa
File: x81qRCU2YqwQP6PCQiveLaLRppg.roa (raw, json)
Hash identifier: bHQZsEKhXYlZCOBaMuSGnaMHIYnM1AZuDlu7wcgpn0I=
Subject key identifier: C7:CD:6A:44:25:36:62:AC:10:3F:A3:C2:42:2B:DE:2D:A2:D1:A6:98
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A17835FA13017F00C0D33417821C085FCA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x81qRCU2YqwQP6PCQiveLaLRppg.roa
Signing time: Mon 26 Oct 2026 12:36:05 +0000
ROA not before: Mon 26 Oct 2026 12:36:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 192.36.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:35:fa:13:01:7f:00:c0:d3:34:17:82:1c:08:5f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 26 12:36:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7cd6a44253662ac103fa3c2422bde2da2d1a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:48:f4:73:37:0a:d4:18:bd:8c:d8:36:64:
af:9d:e3:ea:c2:92:a8:bd:f2:33:f9:cd:b6:ac:e9:
da:b4:6f:5b:14:77:3b:78:2b:4c:b1:1b:b1:75:1f:
21:f6:f0:8c:b2:b5:77:12:f3:b2:db:3c:03:88:20:
8f:58:56:3f:9c:0f:b2:29:13:0a:ac:e6:6a:94:26:
45:8d:89:9a:aa:2f:94:43:7e:52:22:05:4c:b7:64:
6b:52:ff:07:8d:b0:10:14:97:a9:67:7d:df:ab:f1:
46:b4:73:fe:e4:a5:72:e0:a5:63:f7:69:b2:85:86:
31:5a:0b:f2:f3:c1:0b:c8:99:22:e4:a2:ae:df:9f:
d7:91:d2:dc:84:a4:0b:de:06:6e:88:9c:29:27:02:
ae:d9:ad:6a:28:1d:a3:a2:1c:5e:7e:fd:db:f1:b9:
fa:bb:62:1e:f0:bf:41:58:96:3c:79:67:2c:6b:24:
d7:ad:62:3d:78:6b:dd:64:64:cf:a6:16:19:f3:91:
d8:d6:f7:00:03:24:22:87:5d:a2:31:b0:29:43:77:
97:72:fb:1f:4f:7e:ea:f3:9e:f9:f7:46:d2:38:fe:
66:12:4d:be:ad:c4:c3:16:f4:51:e7:7e:eb:4a:8e:
d2:72:e8:cf:b8:53:30:25:d2:aa:92:47:b2:5d:72:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:6A:44:25:36:62:AC:10:3F:A3:C2:42:2B:DE:2D:A2:D1:A6:98
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x81qRCU2YqwQP6PCQiveLaLRppg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ed:d6:cf:6d:84:e7:fd:c6:5b:a1:a9:bd:8d:02:0f:35:69:
77:09:fc:a4:4b:fc:9d:13:21:c6:dd:14:f6:bb:c1:40:92:a1:
9f:da:db:ad:c7:23:cf:f4:cc:24:4d:46:6f:8c:5e:fb:4d:2c:
8b:72:ee:ba:e6:8f:c4:d0:b1:10:30:83:dc:60:4e:8c:9c:c6:
b9:44:a5:1c:5f:14:5e:e5:0a:2c:79:91:62:c9:64:d7:b3:08:
20:64:36:9c:7d:21:b0:9f:f5:a9:c3:52:bf:b5:e5:43:59:93:
74:e3:ef:2a:be:c8:3b:69:26:2b:ed:e1:d3:db:22:27:89:e0:
bf:a2:42:bd:81:d2:ab:b4:06:73:d6:7b:92:ef:9b:df:19:02:
16:c2:eb:08:79:9a:c4:93:93:7a:ac:be:1d:de:30:84:1a:7e:
53:b7:26:8f:56:74:ca:6b:74:c4:31:f3:e9:96:61:36:35:01:
af:7a:63:dc:a0:85:04:d2:6e:48:cc:83:b8:e5:9b:20:55:e1:
39:6f:86:e7:e6:10:6b:1f:1f:92:42:37:45:9a:7e:fb:d9:05:
47:b7:d6:a2:a7:ba:34:cb:04:e8:b0:7f:44:ba:9f:0b:78:0f:
b2:eb:54:71:fe:f3:7c:5b:01:d4:4b:4f:f0:97:c2:f9:7f:e2:
56:2e:a5:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF4NfoTAX8AwNM0F4IcCF/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYxMDI2MTIzNjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2NkNmE0NDI1MzY2MmFjMTAzZmEzYzI0MjJiZGUyZGEyZDFhNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfxI9HM3CtQYvYzYNmSvnePqwpKo
vfIz+c22rOnatG9bFHc7eCtMsRuxdR8h9vCMsrV3EvOy2zwDiCCPWFY/nA+yKRMK
rOZqlCZFjYmaqi+UQ35SIgVMt2RrUv8HjbAQFJepZ33fq/FGtHP+5KVy4KVj92my
hYYxWgvy88ELyJki5KKu35/XkdLchKQL3gZuiJwpJwKu2a1qKB2johxefv3b8bn6
u2Ie8L9BWJY8eWcsayTXrWI9eGvdZGTPphYZ85HY1vcAAyQih12iMbApQ3eXcvsf
T37q857590bSOP5mEk2+rcTDFvRR537rSo7ScujPuFMwJdKqkkeyXXJ8zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfNakQlNmKsED+jwkIr3i2i0aaYMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEveDgxcVJDVTJZcXdRUDZQQ1FpdmVMYUxScHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCRiMA0G
CSqGSIb3DQEBCwUAA4IBAQBA7dbPbYTn/cZboam9jQIPNWl3CfykS/ydEyHG3RT2
u8FAkqGf2tutxyPP9MwkTUZvjF77TSyLcu665o/E0LEQMIPcYE6MnMa5RKUcXxRe
5QoseZFiyWTXswggZDacfSGwn/Wpw1K/teVDWZN04+8qvsg7aSYr7eHT2yInieC/
okK9gdKrtAZz1nuS75vfGQIWwusIeZrEk5N6rL4d3jCEGn5TtyaPVnTKa3TEMfPp
lmE2NQGvemPcoIUE0m5IzIO45ZsgVeE5b4bn5hBrHx+SQjdFmn772QVHt9aip7o0
ywTosH9Eup8LeA+y61Rx/vN8WwHUS0/wl8L5f+JWLqWZ
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:07 2026 by rpki-client