Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/xqzM-5vhLBSZim_gjJ3-4oxkNWc.roa
File: xqzM-5vhLBSZim_gjJ3-4oxkNWc.roa (raw, json)
Hash identifier: 2Wker3K9FCOFZ0rUFS4E2eve+n7uzGRTl2lu+nWWkO4=
Subject key identifier: C6:AC:CC:FB:9B:E1:2C:14:99:8A:6F:E0:8C:9D:FE:E2:8C:64:35:67
Certificate issuer: /CN=aa358cc061e36be03a4ed92ad671780f06589be3
Certificate serial: 019D67CDFC0B91BDB079ADAF33D4DBE143FC
Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/xqzM-5vhLBSZim_gjJ3-4oxkNWc.roa
Signing time: Tue 07 Apr 2026 11:57:25 +0000
ROA not before: Tue 07 Apr 2026 11:57:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197882
IP address blocks: 130.255.88.0/24 maxlen: 24
130.255.89.0/24 maxlen: 24
130.255.90.0/24 maxlen: 24
130.255.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:cd:fc:0b:91:bd:b0:79:ad:af:33:d4:db:e1:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3
Validity
Not Before: Apr 7 11:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6acccfb9be12c14998a6fe08c9dfee28c643567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:a2:28:81:b5:97:03:1c:19:85:d4:58:c7:
82:ca:05:c2:64:87:b2:f5:1f:65:66:0f:c8:08:27:
5a:30:7c:a8:b9:d0:bb:f0:8c:fa:45:7c:f0:d7:37:
5a:6e:29:d6:6d:4e:c1:10:4c:b8:d7:eb:ed:65:c4:
9a:e1:40:a0:42:d4:29:27:60:6a:f2:b9:21:aa:a8:
77:ee:2c:92:95:ed:91:85:58:c5:31:04:16:62:f7:
8c:ac:48:08:13:1a:4c:1c:47:11:45:fc:d5:11:5d:
db:79:cf:8c:6d:2d:a7:a8:07:5f:bd:ff:d6:d6:d3:
09:3a:41:5d:9c:ec:ec:37:92:27:7e:19:18:35:a5:
1b:a4:9c:bf:de:13:59:15:20:0d:5f:65:eb:d5:00:
e4:bc:80:8c:32:98:39:27:12:b5:1d:b6:ba:22:f0:
1a:03:ca:79:9f:70:03:b0:b6:9a:9e:78:5a:2a:89:
6a:19:2d:2e:89:c6:b8:36:b3:1d:a8:d9:28:d2:9a:
56:3a:e4:45:e6:6c:72:df:0c:0b:06:92:73:b9:b2:
56:1e:ec:01:3e:7f:4b:73:ff:44:27:f2:60:a0:c3:
82:06:ce:25:4e:02:fe:ac:d3:4b:de:3f:79:cf:9f:
51:4c:3c:bb:d1:c8:1f:42:56:38:ef:57:ac:c1:04:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:CC:FB:9B:E1:2C:14:99:8A:6F:E0:8C:9D:FE:E2:8C:64:35:67
X509v3 Authority Key Identifier:
keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/xqzM-5vhLBSZim_gjJ3-4oxkNWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:31:3f:b8:b1:9c:8d:0c:68:cd:67:94:a2:94:25:2f:bd:f5:
60:54:e0:39:5a:bb:38:01:e3:9b:31:72:5a:29:fa:77:d1:de:
2e:44:ed:ec:f8:23:87:da:1a:a2:a2:6e:24:64:ed:c6:2e:79:
01:97:01:20:e6:67:78:f0:b3:1b:5a:92:b6:01:dd:0e:6f:60:
f6:c1:25:1f:01:b6:10:5d:e2:e2:61:21:c5:c3:d1:1a:c5:87:
9d:f0:f5:b7:36:96:8f:54:f4:ef:45:b3:95:ce:bc:9b:42:3a:
ed:6c:22:46:7b:69:c8:4b:48:83:23:67:9a:f4:ad:ec:f2:a2:
3b:2c:fa:49:52:68:93:45:68:63:bf:74:27:cc:23:32:f4:a1:
80:fb:ea:56:e3:94:b3:dd:92:fa:b9:f6:ef:94:c3:8b:99:a2:
f1:c8:98:10:d7:e1:3c:b6:83:e6:b4:3b:83:35:20:84:3e:4d:
af:8e:cc:6e:50:05:ec:9a:80:2a:19:c5:ff:c6:73:0c:49:fd:
dc:d5:3b:1b:32:ac:0e:36:18:2a:ec:76:50:22:6f:58:54:9b:
e9:3d:11:09:46:7b:a1:ee:04:48:15:3b:22:fe:97:6f:2b:e2:
11:eb:41:7a:d7:e3:48:06:26:35:f9:df:b7:cc:34:32:7a:40:
7e:04:cf:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1nzfwLkb2wea2vM9Tb4UP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzU4Y2MwNjFlMzZiZTAzYTRlZDkyYWQ2NzE3ODBmMDY1
ODliZTMwHhcNMjYwNDA3MTE1NzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmFjY2NmYjliZTEyYzE0OTk4YTZmZTA4YzlkZmVlMjhjNjQzNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+iKIG1lwMcGYXUWMeCygXCZIey
9R9lZg/ICCdaMHyoudC78Iz6RXzw1zdabinWbU7BEEy41+vtZcSa4UCgQtQpJ2Bq
8rkhqqh37iySle2RhVjFMQQWYveMrEgIExpMHEcRRfzVEV3bec+MbS2nqAdfvf/W
1tMJOkFdnOzsN5InfhkYNaUbpJy/3hNZFSANX2Xr1QDkvICMMpg5JxK1Hba6IvAa
A8p5n3ADsLaannhaKolqGS0uica4NrMdqNko0ppWOuRF5mxy3wwLBpJzubJWHuwB
Pn9Lc/9EJ/JgoMOCBs4lTgL+rNNL3j95z59RTDy70cgfQlY471eswQQrbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMaszPub4SwUmYpv4Iyd/uKMZDVnMB8GA1UdIwQY
MBaAFKo1jMBh42vgOk7ZKtZxeA8GWJvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYt
YWJkYWEyYmEyYzdmLzEveHF6TS01dmhMQlNaaW1fZ2pKMy00b3hrTldjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYtYWJkYWEyYmEyYzdm
LzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv9YMA0G
CSqGSIb3DQEBCwUAA4IBAQCKMT+4sZyNDGjNZ5SilCUvvfVgVOA5Wrs4AeObMXJa
Kfp30d4uRO3s+COH2hqiom4kZO3GLnkBlwEg5md48LMbWpK2Ad0Ob2D2wSUfAbYQ
XeLiYSHFw9EaxYed8PW3NpaPVPTvRbOVzrybQjrtbCJGe2nIS0iDI2ea9K3s8qI7
LPpJUmiTRWhjv3QnzCMy9KGA++pW45Sz3ZL6ufbvlMOLmaLxyJgQ1+E8toPmtDuD
NSCEPk2vjsxuUAXsmoAqGcX/xnMMSf3c1TsbMqwONhgq7HZQIm9YVJvpPREJRnuh
7gRIFTsi/pdvK+IR60F61+NIBiY1+d+3zDQyekB+BM+e
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:45:49 2026 by rpki-client