Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/x3mNd6D6usA5k_7l-emYO2TtcmI.roa
File: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (raw, json)
Hash identifier: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=
Subject key identifier: C7:79:8D:77:A0:FA:BA:C0:39:93:FE:E5:F9:E9:98:3B:64:ED:72:62
Certificate issuer: /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial: 019C46E7A98DD08441E763BC9484FA39CB2B
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/x3mNd6D6usA5k_7l-emYO2TtcmI.roa
Signing time: Tue 10 Feb 2026 09:35:13 +0000
ROA not before: Tue 10 Feb 2026 09:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201671
IP address blocks: 195.222.105.0/24 maxlen: 24
2001:67c:4f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:e7:a9:8d:d0:84:41:e7:63:bc:94:84:fa:39:cb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Validity
Not Before: Feb 10 09:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7798d77a0fabac03993fee5f9e9983b64ed7262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1e:5b:69:51:cb:89:12:36:4f:e4:32:e4:d8:
ef:9c:55:05:35:62:a7:fd:12:64:91:ee:57:4a:fa:
1e:cf:90:9c:2a:87:a2:fa:27:2b:c1:45:e4:c2:a0:
09:48:e9:e7:e4:a8:2c:3d:da:69:e4:04:1a:5e:3e:
10:7c:1a:aa:1e:cb:6e:16:7f:f7:6a:d1:17:e5:97:
a5:d6:24:d1:c1:e4:4c:ff:2a:de:97:b2:0f:07:b6:
a2:97:08:34:e7:18:e3:1f:fd:03:a0:b2:df:28:60:
07:40:57:44:d5:1c:ed:b1:fa:bd:7a:9c:90:b0:c2:
ff:77:e4:df:8b:54:86:91:93:54:c2:0c:eb:51:ac:
b6:7c:29:2e:35:42:2c:58:e1:d4:84:fd:9f:bc:1a:
0b:5b:cc:2b:e3:47:41:0b:68:09:9d:2d:73:c2:47:
04:c9:4d:01:0b:8b:00:b8:87:2b:32:cd:c2:ea:0b:
e9:66:e1:c0:8d:66:e6:96:f6:df:53:0a:e6:a7:ce:
d3:bb:35:84:49:4c:fd:ef:8e:2d:42:79:2f:a4:9f:
d9:eb:30:d8:67:e7:27:3b:e1:e0:49:74:f7:76:c4:
23:11:02:2d:95:e3:49:aa:84:af:d8:6f:78:bb:85:
cd:18:4c:ea:98:ad:0f:33:9c:34:ca:4b:24:64:89:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:8D:77:A0:FA:BA:C0:39:93:FE:E5:F9:E9:98:3B:64:ED:72:62
X509v3 Authority Key Identifier:
keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/x3mNd6D6usA5k_7l-emYO2TtcmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.105.0/24
IPv6:
2001:67c:4f8::/48
Signature Algorithm: sha256WithRSAEncryption
3a:2f:6e:a1:27:3c:c9:9c:40:51:a4:4f:69:4c:5f:d6:dc:11:
e2:30:d6:d3:bf:9d:60:7d:f0:5e:f8:02:d3:f5:8d:d3:01:ff:
b5:52:8d:c4:9f:c5:60:c5:e5:31:22:d6:36:65:b5:05:6e:ae:
27:2d:a4:ea:5d:fe:1c:19:1b:0d:16:ca:02:f9:4b:7e:9b:6a:
3b:d8:d0:4d:af:b4:11:83:7c:8c:62:36:e6:cf:d0:67:90:c1:
d6:33:3f:4e:1e:1b:10:cb:d9:b8:7d:dd:68:f5:db:c9:67:9a:
2b:4f:71:bf:7f:48:a1:cd:71:8a:2c:fc:d6:d9:57:41:45:ed:
d8:48:a3:da:30:39:f7:4f:c9:76:56:7a:9d:73:f1:64:1f:2a:
48:f2:a0:ef:2e:14:3d:e6:f9:32:78:8e:15:0f:0e:b3:09:4a:
67:f0:b6:af:88:63:56:7b:03:84:c4:a7:d8:39:1a:2a:2c:bb:
87:ab:7d:30:d9:cc:2b:60:bd:9b:85:74:90:15:04:85:0d:4a:
e7:6e:38:96:f7:a5:59:1a:08:df:9e:ab:68:69:9c:21:e6:86:
c4:1f:94:20:c9:5d:0b:45:24:af:d4:01:41:13:f7:23:2a:09:
bf:46:c4:e1:14:df:2c:f9:b7:ab:ea:bc:d1:4b:38:e0:c2:30:
ea:a5:97:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZxG56mN0IRB52O8lIT6OcsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWJiOTQ3Njc1MGVjMGUyNjIyYTUwNWU1MTUxMmVmNmY1
YTViYjQwHhcNMjYwMjEwMDkzNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzc5OGQ3N2EwZmFiYWMwMzk5M2ZlZTVmOWU5OTgzYjY0ZWQ3MjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R5baVHLiRI2T+Qy5NjvnFUFNWKn
/RJkke5XSvoez5CcKoei+icrwUXkwqAJSOnn5KgsPdpp5AQaXj4QfBqqHstuFn/3
atEX5Zel1iTRweRM/yrel7IPB7ailwg05xjjH/0DoLLfKGAHQFdE1Rztsfq9epyQ
sML/d+Tfi1SGkZNUwgzrUay2fCkuNUIsWOHUhP2fvBoLW8wr40dBC2gJnS1zwkcE
yU0BC4sAuIcrMs3C6gvpZuHAjWbmlvbfUwrmp87TuzWESUz9744tQnkvpJ/Z6zDY
Z+cnO+HgSXT3dsQjEQItleNJqoSv2G94u4XNGEzqmK0PM5w0ykskZIk5DwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMd5jXeg+rrAOZP+5fnpmDtk7XJiMB8GA1UdIwQY
MBaAFKKbuUdnUOwOJiKlBeUVEu9vWlu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jMTE4MmUtZTM4Ny00YzgzLTk3MjYt
Y2FkOTUxMDIwNmFiLzEveDNtTmQ2RDZ1c0E1a183bC1lbVlPMlR0Y21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jMTE4MmUtZTM4Ny00YzgzLTk3MjYtY2FkOTUxMDIwNmFi
LzEvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw95pMA8E
AgACMAkDBwAgAQZ8BPgwDQYJKoZIhvcNAQELBQADggEBADovbqEnPMmcQFGkT2lM
X9bcEeIw1tO/nWB98F74AtP1jdMB/7VSjcSfxWDF5TEi1jZltQVurictpOpd/hwZ
Gw0WygL5S36bajvY0E2vtBGDfIxiNubP0GeQwdYzP04eGxDL2bh93Wj128lnmitP
cb9/SKHNcYos/NbZV0FF7dhIo9owOfdPyXZWep1z8WQfKkjyoO8uFD3m+TJ4jhUP
DrMJSmfwtq+IY1Z7A4TEp9g5Giosu4erfTDZzCtgvZuFdJAVBIUNSuduOJb3pVka
CN+eq2hpnCHmhsQflCDJXQtFJK/UAUET9yMqCb9GxOEU3yz5t6vqvNFLOODCMOql
l80=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:31 2026 by rpki-client