Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa
File: xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa (raw, json)
Hash identifier: 7eLkL929YGBrLf10p7Xu8H5BWgjYEKgp3pDvwQ/th+o=
Subject key identifier: C5:37:99:C3:AB:7A:8F:49:02:81:3A:4A:02:36:72:7A:4E:95:D5:04
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 019D385D636E835CE8CE43E6A0B3921FDDB7
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa
Signing time: Sun 29 Mar 2026 06:52:17 +0000
ROA not before: Sun 29 Mar 2026 06:52:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 378
IP address blocks: 132.64.0.0/15 maxlen: 24
132.64.0.0/16 maxlen: 24
132.65.0.0/16 maxlen: 24
192.114.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:5d:63:6e:83:5c:e8:ce:43:e6:a0:b3:92:1f:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Mar 29 06:52:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c53799c3ab7a8f4902813a4a0236727a4e95d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:8c:c6:3e:e5:2f:4e:3f:ec:4a:09:64:7d:
c8:c4:32:0c:0b:d7:e7:91:a1:14:f9:bf:26:f5:e4:
80:9c:17:7b:c1:6a:ed:6c:ab:15:f9:a1:1d:42:1f:
bd:e7:dd:29:6a:ed:72:49:5a:91:e0:21:d8:1d:00:
8c:e2:09:9c:e1:ed:27:b4:a9:0c:52:de:7e:33:c6:
bf:4a:1a:44:94:41:ca:2f:42:19:21:7f:88:7f:41:
99:af:3b:6b:97:58:05:f8:0f:49:2b:21:b8:05:3a:
7a:df:f5:44:06:b5:6f:c3:b0:51:e1:58:9a:98:88:
79:76:d0:97:c0:45:d8:6f:1e:15:bc:33:41:ea:7e:
21:44:a6:d2:65:59:6d:fd:e9:54:37:b9:4a:6e:c7:
8a:a8:0e:8a:d1:af:17:67:84:68:34:7e:f7:aa:e4:
a6:f9:34:c1:f4:06:46:77:e8:db:e1:e4:f3:e3:5b:
be:e2:22:1f:8b:39:ba:d7:4e:a3:bb:46:45:44:6d:
0d:de:e3:2f:00:7a:b0:b8:bc:f1:ac:1c:48:32:d4:
a6:57:39:75:fc:63:38:bd:e1:6b:34:a2:99:5f:2b:
d9:f5:04:e7:ab:08:15:cc:be:59:d1:6c:f9:1d:bb:
25:92:f3:34:c7:26:ff:ef:9a:0c:92:44:94:7d:04:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:99:C3:AB:7A:8F:49:02:81:3A:4A:02:36:72:7A:4E:95:D5:04
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/xTeZw6t6j0kCgTpKAjZyek6V1QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.0.0/15
192.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9b:16:68:fb:c3:10:87:5a:90:ab:9e:87:1f:62:b1:69:7e:
8b:ae:c1:fb:1a:cc:90:06:50:8e:3c:2f:d7:7a:da:3f:4a:ca:
28:a2:33:00:70:e6:f4:93:cd:89:f8:42:e5:cc:85:54:a7:56:
40:40:e7:88:88:3b:0f:cc:67:de:15:33:d4:95:15:80:68:9d:
0c:bf:4f:bd:bb:ac:5e:11:18:c3:45:b4:0b:b7:76:7a:8b:5c:
c5:4a:cf:c5:61:a3:2e:9a:2a:08:b3:65:8b:9e:b7:23:3d:6a:
87:dd:08:4b:f7:49:1f:7a:c1:0f:31:89:8e:4f:0d:a1:82:30:
d2:f4:73:f6:91:a5:88:59:ba:e6:b5:90:fa:23:a1:f3:32:c4:
a7:8f:3b:d3:48:e6:97:68:d5:73:3f:1d:48:4a:4d:5f:c9:08:
f0:08:05:6f:e7:91:7a:46:93:78:11:20:d3:b0:04:62:fb:59:
87:e6:56:09:fc:7f:fb:d1:c3:db:49:09:23:64:62:0a:a6:62:
5c:10:97:d2:88:de:56:44:92:7e:d8:b1:cb:06:ce:24:a6:a7:
7d:f6:f3:95:bc:06:43:d6:29:52:10:04:bb:a0:88:c9:4d:5a:
d5:9c:25:b0:f4:f0:38:9a:3e:ef:69:7b:96:2d:0b:d4:fe:34:
49:45:2a:0c
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZ04XWNug1zozkPmoLOSH923MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2
M2MwZGYwHhcNMjYwMzI5MDY1MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTM3OTljM2FiN2E4ZjQ5MDI4MTNhNGEwMjM2NzI3YTRlOTVkNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IKMxj7lL04/7EoJZH3IxDIMC9fn
kaEU+b8m9eSAnBd7wWrtbKsV+aEdQh+9590pau1ySVqR4CHYHQCM4gmc4e0ntKkM
Ut5+M8a/ShpElEHKL0IZIX+If0GZrztrl1gF+A9JKyG4BTp63/VEBrVvw7BR4Via
mIh5dtCXwEXYbx4VvDNB6n4hRKbSZVlt/elUN7lKbseKqA6K0a8XZ4RoNH73quSm
+TTB9AZGd+jb4eTz41u+4iIfizm6106ju0ZFRG0N3uMvAHqwuLzxrBxIMtSmVzl1
/GM4veFrNKKZXyvZ9QTnqwgVzL5Z0Wz5HbslkvM0xyb/75oMkkSUfQQqwwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFMU3mcOreo9JAoE6SgI2cnpOldUEMB8GA1UdIwQY
MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt
YTJlMjRmOTgwYjNmLzEveFRlWnc2dDZqMGtDZ1RwS0FqWnllazZWMVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm
LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMBhEADBALA
clgwDQYJKoZIhvcNAQELBQADggEBACibFmj7wxCHWpCrnocfYrFpfouuwfsazJAG
UI48L9d62j9KyiiiMwBw5vSTzYn4QuXMhVSnVkBA54iIOw/MZ94VM9SVFYBonQy/
T727rF4RGMNFtAu3dnqLXMVKz8Vhoy6aKgizZYuetyM9aofdCEv3SR96wQ8xiY5P
DaGCMNL0c/aRpYhZuua1kPojofMyxKePO9NI5pdo1XM/HUhKTV/JCPAIBW/nkXpG
k3gRINOwBGL7WYfmVgn8f/vRw9tJCSNkYgqmYlwQl9KI3lZEkn7YscsGziSmp332
85W8BkPWKVIQBLugiMlNWtWcJbD08DiaPu9pe5YtC9T+NElFKgw=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:30 2026 by rpki-client