Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XrP6qSkiNVV1PTaGIr40AvlDW4A.roa
File: XrP6qSkiNVV1PTaGIr40AvlDW4A.roa (raw, json)
Hash identifier: ORN5Y9Rn2QOP1Z0IonWoCU185ATiq2+ea1Af9X2nn+Y=
Subject key identifier: 5E:B3:FA:A9:29:22:35:55:75:3D:36:86:22:BE:34:02:F9:43:5B:80
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019D676EC5275F9985F2985E88F21402CA3E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XrP6qSkiNVV1PTaGIr40AvlDW4A.roa
Signing time: Tue 07 Apr 2026 10:13:25 +0000
ROA not before: Tue 07 Apr 2026 10:13:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 92.62.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:6e:c5:27:5f:99:85:f2:98:5e:88:f2:14:02:ca:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 7 10:13:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eb3faa929223555753d368622be3402f9435b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:e7:d4:1b:5e:f9:00:4a:ab:03:02:97:49:
77:8c:8c:cf:b8:b5:cc:42:e5:1f:01:29:01:ba:0b:
b7:bf:48:d5:e5:3a:2a:d3:74:72:92:77:26:86:00:
c4:8d:d2:7a:8a:b3:1f:b2:82:f7:73:7b:8d:48:be:
ad:16:64:b7:25:82:39:d3:6f:fd:a2:be:7c:e2:bf:
ab:71:8c:d8:61:1e:60:32:d7:5d:a8:dd:77:aa:6a:
04:dc:4c:13:f0:9f:e1:e5:84:33:df:ce:4a:aa:1d:
bb:d4:f0:7a:25:dc:11:ea:7c:18:b7:85:75:8e:13:
83:43:89:f4:97:9a:ee:32:65:01:8f:0a:21:1f:50:
49:e4:2f:83:0f:e8:ad:a8:29:f0:61:f3:09:41:e9:
f9:1c:46:1a:34:9f:03:31:08:cc:fe:4a:f8:db:1f:
9f:1e:2d:cc:e9:2e:3b:fc:00:3e:d5:61:88:01:56:
71:5d:53:2f:6f:6b:48:35:b0:6c:7a:e7:c9:58:f2:
ee:37:19:c2:25:06:e7:20:c6:d8:6b:03:af:c7:56:
e8:aa:48:ae:9c:f6:6f:ce:c9:ef:71:65:8b:d4:52:
7d:c6:e2:5c:2c:80:5f:8c:2d:98:7f:eb:e7:57:3f:
3e:df:fe:cd:51:15:07:ef:35:f4:c5:38:4c:73:26:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B3:FA:A9:29:22:35:55:75:3D:36:86:22:BE:34:02:F9:43:5B:80
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/XrP6qSkiNVV1PTaGIr40AvlDW4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:17:84:77:c9:43:b3:66:96:a7:6a:27:2a:75:b5:37:ac:bf:
65:08:2a:d2:09:e8:48:c6:bb:a4:96:c3:e5:25:03:75:ab:ad:
66:a1:56:a1:68:df:a3:2f:e5:de:c4:bc:43:3f:06:3c:23:ce:
7b:2c:13:4d:71:02:13:fe:d3:96:73:b9:59:bd:e3:be:7e:4f:
cf:b4:02:f8:2e:17:31:cb:44:45:b8:24:a4:77:e6:4d:f7:48:
da:bf:65:7c:a8:94:09:d8:8c:fb:5a:1a:f0:35:4d:cd:d1:25:
f2:c2:16:23:07:2b:a7:ad:01:06:df:31:dc:b5:89:18:57:f7:
a9:8e:b3:5e:78:96:60:f6:81:3a:79:07:71:e3:bb:80:26:05:
84:5d:28:8c:3c:14:b5:73:40:40:0d:bc:de:bd:5d:e3:5d:55:
58:6f:3e:7b:26:ef:2d:6d:df:74:57:d9:56:be:7b:95:4f:09:
86:99:74:04:0c:c4:1f:b2:3c:0d:d0:2c:82:3c:25:c8:cb:f3:
aa:1a:6c:98:f3:1e:68:75:20:f0:ac:a8:9a:e6:dd:c9:2c:69:
be:9c:b5:4c:fb:3e:90:7e:ba:fa:91:c1:b6:41:4a:b9:47:10:
61:72:5c:22:3f:16:f4:9a:a2:84:24:ae:0c:58:7f:f5:bc:f6:
d0:5b:74:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1nbsUnX5mF8pheiPIUAso+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwNDA3MTAxMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWIzZmFhOTI5MjIzNTU1NzUzZDM2ODYyMmJlMzQwMmY5NDM1YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqbn1Bte+QBKqwMCl0l3jIzPuLXM
QuUfASkBugu3v0jV5Toq03RykncmhgDEjdJ6irMfsoL3c3uNSL6tFmS3JYI502/9
or584r+rcYzYYR5gMtddqN13qmoE3EwT8J/h5YQz385Kqh271PB6JdwR6nwYt4V1
jhODQ4n0l5ruMmUBjwohH1BJ5C+DD+itqCnwYfMJQen5HEYaNJ8DMQjM/kr42x+f
Hi3M6S47/AA+1WGIAVZxXVMvb2tINbBseufJWPLuNxnCJQbnIMbYawOvx1boqkiu
nPZvzsnvcWWL1FJ9xuJcLIBfjC2Yf+vnVz8+3/7NURUH7zX0xThMcyYCewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6z+qkpIjVVdT02hiK+NAL5Q1uAMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvWHJQNnFTa2lOVlYxUFRhR0lyNDBBdmxEVzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7+MA0G
CSqGSIb3DQEBCwUAA4IBAQA7F4R3yUOzZpanaicqdbU3rL9lCCrSCehIxruklsPl
JQN1q61moVahaN+jL+XexLxDPwY8I857LBNNcQIT/tOWc7lZveO+fk/PtAL4Lhcx
y0RFuCSkd+ZN90jav2V8qJQJ2Iz7WhrwNU3N0SXywhYjByunrQEG3zHctYkYV/ep
jrNeeJZg9oE6eQdx47uAJgWEXSiMPBS1c0BADbzevV3jXVVYbz57Ju8tbd90V9lW
vnuVTwmGmXQEDMQfsjwN0CyCPCXIy/OqGmyY8x5odSDwrKia5t3JLGm+nLVM+z6Q
frr6kcG2QUq5RxBhclwiPxb0mqKEJK4MWH/1vPbQW3R9
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:10 2026 by rpki-client