Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/Xd36a5SLm7C4iapXRkiZJHUTyJk.roa
File: Xd36a5SLm7C4iapXRkiZJHUTyJk.roa (raw, json)
Hash identifier: LhIwU8rW4UNnaqUwdB3c6C0Ia6T/krlVodSFDVs9fT4=
Subject key identifier: 5D:DD:FA:6B:94:8B:9B:B0:B8:89:AA:57:46:48:99:24:75:13:C8:99
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 01A08C82A69CE04955928D4E44649A55F208
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/Xd36a5SLm7C4iapXRkiZJHUTyJk.roa
Signing time: Thu 10 Sep 2026 18:09:27 +0000
ROA not before: Thu 10 Sep 2026 18:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2a01:ecc0:2c1::/48 maxlen: 48
2a01:ecc0:340::/42 maxlen: 42
2a01:ecc0:380::/42 maxlen: 42
2a01:ecc0:3c0::/42 maxlen: 42
2a01:ecc0:400::/42 maxlen: 42
2a01:ecc0:440::/42 maxlen: 42
2a01:ecc0:480::/42 maxlen: 42
2a01:ecc0:4c0::/42 maxlen: 42
2a01:ecc0:500::/42 maxlen: 42
2a01:ecc0:540::/42 maxlen: 42
2a01:ecc0:a00::/40 maxlen: 42
2a01:ecc0:b00::/40 maxlen: 42
2a01:ecc0:c00::/39 maxlen: 42
2a01:ecc0:8000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:82:a6:9c:e0:49:55:92:8d:4e:44:64:9a:55:f2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Sep 10 18:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dddfa6b948b9bb0b889aa57464899247513c899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:29:c7:57:b2:cb:f9:25:5a:bc:02:05:7c:04:
9d:be:e1:44:f1:d4:11:8f:be:40:eb:8d:a1:60:2b:
24:86:ce:ce:25:9e:29:d1:95:0d:85:b8:07:b3:cb:
60:31:2e:9a:d6:02:27:44:0c:3f:57:f0:08:48:da:
05:53:c4:42:4a:90:bb:74:40:e2:ab:91:52:c7:8d:
f2:2b:b2:24:f3:93:dd:0d:34:95:fa:6b:29:8b:3c:
92:c2:af:bd:7e:60:1b:c6:52:3e:0a:55:4e:ed:a0:
06:42:65:4c:09:2e:27:66:ea:50:d9:36:40:77:67:
e2:91:25:6b:fe:b7:e8:c8:b2:ab:f1:b5:6a:b8:dc:
bf:17:78:2c:ad:c2:a3:5f:24:cd:56:aa:c3:cd:d2:
c4:27:5c:e2:98:c8:5e:bd:65:97:2f:3f:80:02:a4:
33:55:e9:b3:60:61:98:f5:15:2f:34:4b:0d:f7:85:
f7:9c:77:6d:c3:f3:e5:72:7e:6f:a3:8a:c1:0b:cc:
dd:c2:b6:99:50:8a:96:59:62:15:8f:60:a0:eb:a4:
64:8b:1b:f8:f6:51:81:e4:9c:98:97:56:04:78:54:
1d:5b:ff:24:d1:66:f1:0a:7c:24:27:85:eb:8e:93:
2b:cf:a4:f7:7e:2e:0c:e3:e9:4c:c4:a2:13:9b:a1:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:FA:6B:94:8B:9B:B0:B8:89:AA:57:46:48:99:24:75:13:C8:99
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/Xd36a5SLm7C4iapXRkiZJHUTyJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:2c1::/48
2a01:ecc0:340::-2a01:ecc0:57f:ffff:ffff:ffff:ffff:ffff
2a01:ecc0:a00::-2a01:ecc0:dff:ffff:ffff:ffff:ffff:ffff
2a01:ecc0:8000::/39
Signature Algorithm: sha256WithRSAEncryption
2b:9d:ba:4e:f3:67:af:93:85:03:a4:ff:a2:df:c1:d0:db:c1:
62:b2:f7:c5:11:c1:06:ed:5b:e9:3a:24:f2:17:9d:6f:cd:99:
20:c3:07:7f:b2:94:85:5f:bf:82:45:42:54:f9:cd:8b:4c:4c:
bb:79:8d:d4:6d:9c:e3:6e:3c:78:b4:64:57:fd:38:1d:90:09:
fc:9e:46:12:ab:8b:ca:ae:a5:2f:ca:fe:2a:61:2b:95:e1:d8:
a4:cf:2e:2c:49:c4:51:58:91:6c:4c:7b:cf:49:d8:fc:cb:ad:
de:1e:00:34:f6:bf:bd:90:f1:cf:75:c9:28:5c:97:1c:ce:1b:
6b:f6:6d:43:0d:1d:ce:48:6b:71:72:18:aa:44:0a:e6:68:a8:
ff:35:b3:58:ea:87:99:c0:47:1b:8b:67:1d:c1:76:ec:92:80:
47:a5:38:60:f9:7b:0b:71:7e:07:3f:40:01:6c:36:fc:d8:9e:
4d:75:b0:cd:10:5b:10:3e:ee:79:7a:25:c7:36:96:03:b9:42:
f6:fe:52:f5:24:10:56:8f:18:05:1b:d6:44:32:81:d9:9c:a8:
eb:f9:d0:41:97:8d:b5:14:de:67:03:fe:db:d1:78:01:f7:8f:
a1:6d:b3:43:7a:5b:04:5e:45:a0:ad:f9:85:e7:2d:9f:a1:49:
12:59:13:4b
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAaCMgqac4ElVko1ORGSaVfIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0
ZWU1YmUwHhcNMjYwOTEwMTgwOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGRkZmE2Yjk0OGI5YmIwYjg4OWFhNTc0NjQ4OTkyNDc1MTNjODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SnHV7LL+SVavAIFfASdvuFE8dQR
j75A642hYCskhs7OJZ4p0ZUNhbgHs8tgMS6a1gInRAw/V/AISNoFU8RCSpC7dEDi
q5FSx43yK7Ik85PdDTSV+mspizySwq+9fmAbxlI+ClVO7aAGQmVMCS4nZupQ2TZA
d2fikSVr/rfoyLKr8bVquNy/F3gsrcKjXyTNVqrDzdLEJ1zimMhevWWXLz+AAqQz
VemzYGGY9RUvNEsN94X3nHdtw/Plcn5vo4rBC8zdwraZUIqWWWIVj2Cg66Rkixv4
9lGB5JyYl1YEeFQdW/8k0WbxCnwkJ4XrjpMrz6T3fi4M4+lMxKITm6FmnwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFF3d+muUi5uwuImqV0ZImSR1E8iZMB8GA1UdIwQY
MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt
NjM0NTE1NDg5NzlkLzEvWGQzNmE1U0xtN0M0aWFwWFJraVpKSFVUeUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk
LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAAjA3AwcAKgHswALB
MBIDBwYqAezAA0ADBwcqAezABQAwEAMGASoB7MAKAwYBKgHswAwDBgEqAezAgDAN
BgkqhkiG9w0BAQsFAAOCAQEAK526TvNnr5OFA6T/ot/B0NvBYrL3xRHBBu1b6Tok
8hedb82ZIMMHf7KUhV+/gkVCVPnNi0xMu3mN1G2c4248eLRkV/04HZAJ/J5GEquL
yq6lL8r+KmErleHYpM8uLEnEUViRbEx7z0nY/Mut3h4ANPa/vZDxz3XJKFyXHM4b
a/ZtQw0dzkhrcXIYqkQK5mio/zWzWOqHmcBHG4tnHcF27JKAR6U4YPl7C3F+Bz9A
AWw2/NieTXWwzRBbED7ueXolxzaWA7lC9v5S9SQQVo8YBRvWRDKB2Zyo6/nQQZeN
tRTeZwP+29F4AfePoW2zQ3pbBF5FoK35hectn6FJElkTSw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:00:58 2026 by rpki-client