Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/XKUOeM-i5UiZKIrVKNM2f8JwiQw.roa
File: XKUOeM-i5UiZKIrVKNM2f8JwiQw.roa (raw, json)
Hash identifier: kBI8dpIgHAc0lY+xhoqnmWrgOnUXzAX+VacCm1L5Hmw=
Subject key identifier: 5C:A5:0E:78:CF:A2:E5:48:99:28:8A:D5:28:D3:36:7F:C2:70:89:0C
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01A13F09586F9C253E13F23C89BBF1512F35
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/XKUOeM-i5UiZKIrVKNM2f8JwiQw.roa
Signing time: Thu 15 Oct 2026 10:08:59 +0000
ROA not before: Thu 15 Oct 2026 10:08:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218429
IP address blocks: 165.217.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:09:58:6f:9c:25:3e:13:f2:3c:89:bb:f1:51:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Oct 15 10:08:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ca50e78cfa2e54899288ad528d3367fc270890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:65:c5:6f:fc:69:89:56:64:10:61:af:5e:
50:58:31:16:1f:7c:50:cd:0c:fb:1d:be:d3:c3:dc:
4d:97:43:a0:25:53:77:5a:c1:68:4f:20:61:db:5e:
3e:f5:77:43:ff:dd:eb:e4:43:64:af:1b:b3:e2:e9:
de:a5:b9:99:a5:49:5d:df:34:71:f1:d9:ee:fb:14:
f0:9d:ad:30:6d:31:3e:51:cb:95:13:7b:07:cb:6d:
57:0e:71:57:98:8a:6d:86:f4:d6:cd:cd:8a:8c:f8:
55:1c:69:8b:68:d0:2a:a4:33:f3:5a:1c:a5:84:ad:
df:99:46:ce:05:ef:a0:bf:94:12:aa:ab:1e:8d:e2:
74:f9:7c:d2:05:bc:38:2a:19:66:20:98:63:63:c0:
79:61:ec:49:d8:27:5a:6a:e6:11:b8:db:15:57:fc:
6c:cb:f5:4e:a9:96:db:68:24:b8:69:62:e3:54:5d:
58:af:17:37:39:20:9e:d5:4e:17:2f:30:4c:dc:9c:
f3:4b:02:9f:5b:9f:c3:ed:e9:56:a0:f0:47:1d:8f:
3c:fb:91:0e:24:3c:2c:1c:25:e0:b5:4d:7e:45:b9:
e6:9c:6a:6e:af:88:07:bb:f8:6a:cf:4e:a3:c9:61:
90:88:7a:eb:09:f8:95:e4:10:f0:cb:8e:a8:91:29:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:0E:78:CF:A2:E5:48:99:28:8A:D5:28:D3:36:7F:C2:70:89:0C
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/XKUOeM-i5UiZKIrVKNM2f8JwiQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.217.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:16:a4:c4:dc:8f:d3:2e:57:7e:0e:ca:00:f7:1f:3e:fc:57:
da:49:21:7c:78:3b:0e:b7:23:ec:7b:f4:e7:93:c8:62:a9:21:
cf:42:53:39:0d:61:7b:6b:5b:b8:26:e7:5b:8e:f6:1d:15:49:
d4:d4:35:47:af:38:5b:cb:bd:2a:97:76:a2:d8:c8:10:ef:ed:
80:a3:f6:bd:ab:75:cf:f5:03:0a:5a:b1:f9:12:aa:7b:97:36:
3f:73:2f:d9:54:18:fa:82:c4:6d:70:93:9c:27:3f:24:46:71:
0d:af:15:be:38:53:8b:ac:4d:d5:03:38:8e:6e:11:e7:56:cc:
05:7b:04:34:38:3a:af:b2:5a:e6:d7:4e:e5:1a:3d:e5:df:8f:
75:76:c8:b5:75:63:8c:5c:c9:18:49:b0:3c:79:36:60:55:30:
67:0f:a7:71:2c:8f:50:25:a1:86:d2:76:c1:ba:4a:ea:47:95:
7d:64:3d:da:94:4f:ba:bd:87:95:c6:38:21:b6:9e:88:30:22:
3f:06:97:f1:8a:94:26:eb:2b:74:49:98:00:4e:5a:74:ca:0f:
74:ac:9a:dd:2e:a0:26:9e:c7:d9:d2:df:f1:af:50:da:17:d9:
d0:65:31:19:e5:74:9c:a8:9e:99:a8:ba:1b:f8:49:38:19:59:
f3:44:bb:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE/CVhvnCU+E/I8ibvxUS81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjYxMDE1MTAwODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2E1MGU3OGNmYTJlNTQ4OTkyODhhZDUyOGQzMzY3ZmMyNzA4OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq9lxW/8aYlWZBBhr15QWDEWH3xQ
zQz7Hb7Tw9xNl0OgJVN3WsFoTyBh214+9XdD/93r5ENkrxuz4unepbmZpUld3zRx
8dnu+xTwna0wbTE+UcuVE3sHy21XDnFXmIpthvTWzc2KjPhVHGmLaNAqpDPzWhyl
hK3fmUbOBe+gv5QSqqsejeJ0+XzSBbw4KhlmIJhjY8B5YexJ2CdaauYRuNsVV/xs
y/VOqZbbaCS4aWLjVF1Yrxc3OSCe1U4XLzBM3JzzSwKfW5/D7elWoPBHHY88+5EO
JDwsHCXgtU1+RbnmnGpur4gHu/hqz06jyWGQiHrrCfiV5BDwy46okSlQ0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFylDnjPouVImSiK1SjTNn/CcIkMMB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvWEtVT2VNLWk1VWlaS0lyVktOTTJmOEp3aVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApdmkMA0G
CSqGSIb3DQEBCwUAA4IBAQCfFqTE3I/TLld+DsoA9x8+/FfaSSF8eDsOtyPse/Tn
k8hiqSHPQlM5DWF7a1u4JudbjvYdFUnU1DVHrzhby70ql3ai2MgQ7+2Ao/a9q3XP
9QMKWrH5Eqp7lzY/cy/ZVBj6gsRtcJOcJz8kRnENrxW+OFOLrE3VAziObhHnVswF
ewQ0ODqvslrm107lGj3l3491dsi1dWOMXMkYSbA8eTZgVTBnD6dxLI9QJaGG0nbB
ukrqR5V9ZD3alE+6vYeVxjghtp6IMCI/BpfxipQm6yt0SZgATlp0yg90rJrdLqAm
nsfZ0t/xr1DaF9nQZTEZ5XScqJ6ZqLob+Ek4GVnzRLts
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:05:45 2026 by rpki-client