Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XGUrNr8c05Sn_D-Fc1VPbPTHjTk.roa
File: XGUrNr8c05Sn_D-Fc1VPbPTHjTk.roa (raw, json)
Hash identifier: 5yVUBV0msfLhM/K0o32Ibt+L/WadHE6K9ZYTVsGO4kI=
Subject key identifier: 5C:65:2B:36:BF:1C:D3:94:A7:FC:3F:85:73:55:4F:6C:F4:C7:8D:39
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019FAE4D32EB8523958E9094452D6C7FCD58
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XGUrNr8c05Sn_D-Fc1VPbPTHjTk.roa
Signing time: Wed 29 Jul 2026 14:35:22 +0000
ROA not before: Wed 29 Jul 2026 14:35:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:eec0:19::/48 maxlen: 48
2a10:eec0:1a::/47 maxlen: 47
2a10:eec0:1c::/46 maxlen: 46
2a10:eec0:20::/43 maxlen: 43
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:8000::/35 maxlen: 35
2a10:eec0:a000::/37 maxlen: 37
2a10:eec0:a800::/39 maxlen: 39
2a10:eec0:aa00::/40 maxlen: 40
2a10:eec0:ab00::/41 maxlen: 41
2a10:eec0:ab80::/42 maxlen: 42
2a10:eec0:abc0::/45 maxlen: 45
2a10:eec0:abc8::/46 maxlen: 46
2a10:eec0:abcc::/48 maxlen: 48
2a10:eec0:abce::/47 maxlen: 47
2a10:eec0:abd0::/44 maxlen: 44
2a10:eec0:abe0::/43 maxlen: 43
2a10:eec0:ac00::/38 maxlen: 38
2a10:eec0:b000::/36 maxlen: 36
2a10:eec0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:4d:32:eb:85:23:95:8e:90:94:45:2d:6c:7f:cd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jul 29 14:35:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c652b36bf1cd394a7fc3f8573554f6cf4c78d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:12:d1:54:e8:17:be:32:c2:87:80:89:34:
30:91:25:4e:08:62:8d:38:e2:5f:af:d6:03:46:83:
58:22:ab:60:f9:80:46:78:33:a5:0c:2d:3a:49:e4:
d1:68:45:ef:07:de:2e:92:2f:2c:c8:1f:58:98:93:
32:f8:a7:26:71:bd:f1:8f:e1:c8:19:cf:34:f2:f6:
fe:44:4f:53:7d:cb:24:f4:34:55:55:9b:8c:43:46:
b1:16:b9:18:b4:98:1c:0c:88:3c:7a:8d:4c:91:cf:
1e:c2:87:8e:53:2c:3c:82:64:42:4b:5e:4c:dc:f7:
3a:48:14:99:35:22:42:fe:55:a4:33:86:ee:33:75:
3e:76:55:2f:1f:05:11:b0:8c:5e:53:9d:e1:85:cd:
0e:30:38:62:8f:18:9c:c0:ec:b1:d8:86:68:e2:bf:
00:37:94:22:47:8a:98:8f:2c:c9:c0:90:9e:f0:81:
fd:f0:0d:65:16:eb:f4:91:92:5e:0c:21:78:78:9a:
1b:97:cc:3e:9c:70:d3:71:45:32:7f:13:78:77:f1:
86:d3:a3:71:e6:8c:4a:84:3a:41:70:58:e0:3d:3a:
b5:f0:6e:dc:69:b5:b5:93:ca:98:45:f8:a9:a7:54:
7e:fb:58:6a:ed:f9:f9:40:1d:d3:a5:95:9a:b6:7f:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:2B:36:BF:1C:D3:94:A7:FC:3F:85:73:55:4F:6C:F4:C7:8D:39
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XGUrNr8c05Sn_D-Fc1VPbPTHjTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eec0:19::-2a10:eec0:abcc:ffff:ffff:ffff:ffff:ffff
2a10:eec0:abce::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:e0:54:56:25:6a:3b:95:ef:50:e3:92:0f:03:a2:32:b7:de:
e6:ea:3f:e4:01:61:6c:58:be:40:ec:e5:7c:cc:3e:69:19:36:
eb:7b:d6:76:f8:eb:0c:dd:fd:27:cf:d3:df:74:84:e9:02:14:
3b:02:69:42:7d:3b:01:f5:87:a4:9f:58:e8:07:3d:8a:68:0e:
13:95:6c:32:3c:d8:69:04:f0:71:f0:e7:57:51:e1:82:3a:7e:
ec:fc:9f:84:7f:55:b4:04:49:05:fd:49:91:1b:86:62:24:a0:
32:89:19:a8:0f:86:16:d3:b5:d3:67:64:53:2a:5e:b4:fe:ae:
62:58:e5:50:0f:03:5a:e4:f5:e7:f5:7a:3f:e8:0f:18:d0:f7:
c8:d6:63:44:40:5e:af:d4:cc:33:12:de:ac:3e:5e:f1:c8:b4:
c1:2d:48:74:1b:ec:8a:b1:b8:75:cd:a3:39:29:22:db:f7:b6:
df:06:73:71:2e:12:dd:ef:5a:a7:77:60:e1:7c:a6:77:b6:5a:
8a:43:82:a8:a4:4d:20:26:72:c7:b4:87:ec:c9:92:b8:1a:12:
f3:d2:ad:8b:ac:5d:66:e6:60:67:76:2d:d0:14:71:be:a2:2b:
48:59:20:95:6f:10:b2:ea:1f:6e:2e:16:7d:1c:4e:4b:33:eb:
b3:d7:15:c3
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ+uTTLrhSOVjpCURS1sf81YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNzI5MTQzNTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzY1MmIzNmJmMWNkMzk0YTdmYzNmODU3MzU1NGY2Y2Y0Yzc4ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nYS0VToF74ywoeAiTQwkSVOCGKN
OOJfr9YDRoNYIqtg+YBGeDOlDC06SeTRaEXvB94uki8syB9YmJMy+Kcmcb3xj+HI
Gc808vb+RE9Tfcsk9DRVVZuMQ0axFrkYtJgcDIg8eo1Mkc8ewoeOUyw8gmRCS15M
3Pc6SBSZNSJC/lWkM4buM3U+dlUvHwURsIxeU53hhc0OMDhijxicwOyx2IZo4r8A
N5QiR4qYjyzJwJCe8IH98A1lFuv0kZJeDCF4eJobl8w+nHDTcUUyfxN4d/GG06Nx
5oxKhDpBcFjgPTq18G7cabW1k8qYRfipp1R++1hq7fn5QB3TpZWatn9pPwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFxlKza/HNOUp/w/hXNVT2z0x405MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWEdVck5yOGMwNVNuX0QtRmMxVlBiUFRIalRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqEO7A
ABkDBwAqEO7Aq8wwEAMHASoQ7sCrzgMFACoQ7sAwDQYJKoZIhvcNAQELBQADggEB
AErgVFYlajuV71Djkg8DojK33ubqP+QBYWxYvkDs5XzMPmkZNut71nb46wzd/SfP
0990hOkCFDsCaUJ9OwH1h6SfWOgHPYpoDhOVbDI82GkE8HHw51dR4YI6fuz8n4R/
VbQESQX9SZEbhmIkoDKJGagPhhbTtdNnZFMqXrT+rmJY5VAPA1rk9ef1ej/oDxjQ
98jWY0RAXq/UzDMS3qw+XvHItMEtSHQb7IqxuHXNozkpItv3tt8Gc3EuEt3vWqd3
YOF8pne2WopDgqikTSAmcse0h+zJkrgaEvPSrYusXWbmYGd2LdAUcb6iK0hZIJVv
ELLqH24uFn0cTksz67PXFcM=
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:52:44 2026 by rpki-client