Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa
File: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (raw, json)
Hash identifier: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=
Subject key identifier: 5F:0F:D8:AD:BB:3A:74:6F:20:3A:EB:FB:8B:D1:19:42:19:4F:86:5C
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019C7B9CE9699F9E87475A7C1140DA58215E
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa
Signing time: Fri 20 Feb 2026 15:13:26 +0000
ROA not before: Fri 20 Feb 2026 15:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211496
IP address blocks: 45.83.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:9c:e9:69:9f:9e:87:47:5a:7c:11:40:da:58:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Feb 20 15:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f0fd8adbb3a746f203aebfb8bd11942194f865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:7e:4d:b1:06:12:8e:f0:25:89:96:65:28:
67:74:78:a1:a7:6d:7a:d2:21:3c:66:54:0c:d3:bc:
27:dd:97:36:66:f0:3b:95:cd:8b:e8:ac:85:9f:f6:
78:80:64:0e:81:af:0c:8b:4f:07:db:3a:e2:5f:15:
64:ef:5a:d8:fe:1b:41:d6:c5:bf:3b:f1:26:bf:a6:
c6:59:42:35:8e:df:62:64:03:cf:15:e8:57:73:43:
5e:95:6e:c1:ce:af:43:5a:91:39:f5:a7:d1:2d:58:
64:1f:34:50:3b:62:2f:8d:c0:26:09:a2:63:e6:4e:
f5:a4:79:ac:36:03:e8:9a:29:71:ed:d4:97:73:58:
e0:2d:76:66:9a:66:52:72:c2:e2:5a:40:6b:18:65:
6a:16:e8:c0:80:63:d2:ea:c0:64:97:2b:60:e8:7c:
54:18:5c:f1:95:1d:6c:ad:99:63:11:01:b7:24:bd:
b1:b7:fa:5e:61:68:2e:a2:30:42:8e:41:7a:7a:3c:
0c:a3:02:c0:ce:36:69:e4:25:76:0a:79:bf:71:63:
21:88:51:67:83:66:4c:fe:6a:6a:54:1a:72:fe:69:
a4:5a:fc:77:a4:4e:2b:92:de:cc:2f:3e:59:3a:09:
14:98:23:b7:d3:3a:27:02:27:be:76:25:75:d5:3b:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:D8:AD:BB:3A:74:6F:20:3A:EB:FB:8B:D1:19:42:19:4F:86:5C
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.32.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c4:54:69:8a:d2:41:a6:8f:80:2c:be:93:dd:a1:bf:db:1e:
01:62:bd:3f:ae:34:0d:72:a1:3a:2d:64:f4:9a:02:4c:d7:73:
3e:05:70:bc:1b:17:1e:fe:cf:17:ee:ac:a2:3a:01:b5:87:d4:
20:0f:be:a3:44:0d:e6:99:66:57:e4:3a:c2:05:52:f8:bd:c8:
ef:f4:f2:8b:62:7b:5d:f3:96:33:99:e5:22:38:2a:1a:6a:89:
26:23:b4:b7:5e:15:e9:6d:48:f5:c4:e8:f6:19:7d:0f:3b:24:
51:9d:67:36:63:1f:18:f9:8a:a2:82:1a:8a:25:95:0f:c7:2a:
3d:d9:07:42:2f:32:e6:ed:7b:53:cc:fa:3b:58:79:be:dd:50:
9c:94:6b:1d:0b:c4:dd:70:20:1d:33:da:84:98:83:f7:05:ad:
39:6a:20:08:83:81:08:b9:dd:85:95:12:5b:c9:fb:2c:30:e0:
ac:5b:3f:70:8d:8f:d1:26:87:5d:10:37:41:d4:c4:a6:67:71:
e1:21:07:05:af:9f:41:48:a8:62:6d:6b:28:77:a6:d0:d2:ec:
97:cd:9a:91:49:fb:c5:7e:b2:77:43:a0:6d:27:75:68:6e:4e:
f7:11:be:48:9a:13:91:b6:46:35:0a:50:59:49:d3:6b:02:ed:
09:c8:3f:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZx7nOlpn56HR1p8EUDaWCFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh
MzkzNGEwHhcNMjYwMjIwMTUxMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjBmZDhhZGJiM2E3NDZmMjAzYWViZmI4YmQxMTk0MjE5NGY4NjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Z+TbEGEo7wJYmWZShndHihp216
0iE8ZlQM07wn3Zc2ZvA7lc2L6KyFn/Z4gGQOga8Mi08H2zriXxVk71rY/htB1sW/
O/Emv6bGWUI1jt9iZAPPFehXc0NelW7Bzq9DWpE59afRLVhkHzRQO2IvjcAmCaJj
5k71pHmsNgPomilx7dSXc1jgLXZmmmZScsLiWkBrGGVqFujAgGPS6sBklytg6HxU
GFzxlR1srZljEQG3JL2xt/peYWguojBCjkF6ejwMowLAzjZp5CV2Cnm/cWMhiFFn
g2ZM/mpqVBpy/mmkWvx3pE4rkt7MLz5ZOgkUmCO30zonAie+diV11TuuNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8P2K27OnRvIDrr+4vRGUIZT4ZcMB8GA1UdIwQY
MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt
NGZkMjhjNjYxOWFlLzEvWHdfWXJiczZkRzhnT3V2N2k5RVpRaGxQaGx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl
LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVMgMA0G
CSqGSIb3DQEBCwUAA4IBAQBCxFRpitJBpo+ALL6T3aG/2x4BYr0/rjQNcqE6LWT0
mgJM13M+BXC8Gxce/s8X7qyiOgG1h9QgD76jRA3mmWZX5DrCBVL4vcjv9PKLYntd
85YzmeUiOCoaaokmI7S3XhXpbUj1xOj2GX0POyRRnWc2Yx8Y+YqighqKJZUPxyo9
2QdCLzLm7XtTzPo7WHm+3VCclGsdC8TdcCAdM9qEmIP3Ba05aiAIg4EIud2FlRJb
yfssMOCsWz9wjY/RJoddEDdB1MSmZ3HhIQcFr59BSKhibWsod6bQ0uyXzZqRSfvF
frJ3Q6BtJ3Vobk73Eb5ImhORtkY1ClBZSdNrAu0JyD8E
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:19:59 2026 by rpki-client