Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/x4y5JxDrafwxKhlG-r82-29DIO4.roa
File: x4y5JxDrafwxKhlG-r82-29DIO4.roa (raw, json)
Hash identifier: 76ZeinJEZXAt5CMu/llzcYQkuoMHqW1kwWUZsBr+knU=
Subject key identifier: C7:8C:B9:27:10:EB:69:FC:31:2A:19:46:FA:BF:36:FB:6F:43:20:EE
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A099E48CE5DBADBF02D6022A8B705D0AE9
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/x4y5JxDrafwxKhlG-r82-29DIO4.roa
Signing time: Sun 13 Sep 2026 08:31:27 +0000
ROA not before: Sun 13 Sep 2026 08:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.57.0/24 maxlen: 24
193.108.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:e4:8c:e5:db:ad:bf:02:d6:02:2a:8b:70:5d:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Sep 13 08:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c78cb92710eb69fc312a1946fabf36fb6f4320ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:6c:28:54:3f:a9:fe:73:72:0f:59:48:83:
56:9e:84:7c:98:a0:65:b1:bc:aa:e8:09:4d:a4:1f:
33:bb:11:73:3b:b0:1d:81:b1:cd:12:5c:e1:9e:5b:
84:20:af:e7:61:01:5e:96:ff:48:41:67:a6:ff:38:
1e:fa:2f:6a:62:40:e2:02:27:ac:a8:d0:b7:ed:9c:
91:83:ba:15:ba:ee:a9:d1:30:a0:95:89:40:0d:92:
f6:5a:78:6c:47:08:02:e6:94:d4:6c:5d:1e:04:83:
39:f6:aa:2b:50:b1:0d:22:58:0d:8a:16:39:a4:cc:
03:92:45:88:98:6b:84:d0:d8:28:50:94:ce:48:f9:
dd:04:3a:2d:ec:b4:c1:91:89:af:42:f0:ad:e0:e0:
55:89:27:c3:08:44:d7:4c:a5:1f:37:6b:8a:b8:d1:
7d:e0:10:f5:e2:f9:bd:a2:7f:28:de:f6:17:05:58:
79:ec:77:6c:14:03:6e:18:df:df:41:d8:c8:ce:85:
77:db:e6:2d:5f:9a:62:3a:80:f7:3c:37:58:28:e8:
e9:a8:16:dc:3a:65:3a:a1:a7:cd:63:da:59:cd:27:
5f:09:8c:ed:fe:7c:6b:cf:0e:7e:a8:98:b2:98:b7:
9d:3e:09:23:1c:ad:01:f5:76:ec:e9:ba:83:37:2b:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8C:B9:27:10:EB:69:FC:31:2A:19:46:FA:BF:36:FB:6F:43:20:EE
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/x4y5JxDrafwxKhlG-r82-29DIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/23
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:f9:1a:7e:55:f2:c4:89:66:b8:8e:2e:6e:3d:0c:52:cb:
d6:e8:87:7b:68:4e:64:1d:4e:55:c6:7b:a0:1b:f7:72:4b:f2:
34:c7:ac:19:25:9b:9b:c8:a9:0f:fa:79:97:71:0c:37:35:ed:
a3:3e:7d:c7:6e:95:c0:fc:8c:d6:f8:8b:09:03:a2:7f:ed:15:
10:ff:59:c2:ad:f6:52:bf:d6:d3:6e:08:82:1d:4e:f5:0e:be:
66:2d:00:d9:05:77:6e:f9:5a:a3:58:e3:f1:b3:74:3d:07:7e:
cb:17:03:a8:43:72:bc:3c:db:5f:c4:e4:af:27:5a:cb:31:c0:
b2:ec:b1:fa:d5:82:23:a0:fc:0b:15:77:6a:d7:81:df:51:91:
97:a1:25:68:d4:75:7c:d8:f5:54:6d:39:f9:bc:57:0d:06:df:
c3:5c:0d:0d:c9:ad:ea:35:c5:a8:39:6a:67:9b:8c:7e:19:72:
f2:35:4f:b6:10:9b:a2:ef:07:bd:1a:f0:dc:b9:f1:5c:c1:66:
b8:bb:c6:15:f7:4e:43:11:95:73:a4:51:16:5d:c0:71:64:d8:
61:0b:da:12:df:b9:19:6c:35:7c:fd:18:d4:1b:27:19:4f:4d:
4e:56:25:1a:8a:4f:f2:e5:dc:06:b2:d9:1d:b6:63:f0:c2:88:
cc:e4:95:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCZ5Izl262/AtYCKotwXQrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjYwOTEzMDgzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzhjYjkyNzEwZWI2OWZjMzEyYTE5NDZmYWJmMzZmYjZmNDMyMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGdsKFQ/qf5zcg9ZSINWnoR8mKBl
sbyq6AlNpB8zuxFzO7AdgbHNElzhnluEIK/nYQFelv9IQWem/zge+i9qYkDiAies
qNC37ZyRg7oVuu6p0TCglYlADZL2WnhsRwgC5pTUbF0eBIM59qorULENIlgNihY5
pMwDkkWImGuE0NgoUJTOSPndBDot7LTBkYmvQvCt4OBViSfDCETXTKUfN2uKuNF9
4BD14vm9on8o3vYXBVh57HdsFANuGN/fQdjIzoV32+YtX5piOoD3PDdYKOjpqBbc
OmU6oafNY9pZzSdfCYzt/nxrzw5+qJiymLedPgkjHK0B9Xbs6bqDNys6UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMeMuScQ62n8MSoZRvq/NvtvQyDuMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEveDR5NUp4RHJhZnd4S2hsRy1yODItMjlESU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWw4AwQA
wWxpMA0GCSqGSIb3DQEBCwUAA4IBAQA4ofkaflXyxIlmuI4ubj0MUsvW6Id7aE5k
HU5VxnugG/dyS/I0x6wZJZubyKkP+nmXcQw3Ne2jPn3HbpXA/IzW+IsJA6J/7RUQ
/1nCrfZSv9bTbgiCHU71Dr5mLQDZBXdu+VqjWOPxs3Q9B37LFwOoQ3K8PNtfxOSv
J1rLMcCy7LH61YIjoPwLFXdq14HfUZGXoSVo1HV82PVUbTn5vFcNBt/DXA0Nya3q
NcWoOWpnm4x+GXLyNU+2EJui7we9GvDcufFcwWa4u8YV905DEZVzpFEWXcBxZNhh
C9oS37kZbDV8/RjUGycZT01OViUaik/y5dwGstkdtmPwwojM5JXg
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:28:28 2026 by rpki-client