Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/XfzUpSsLIgSjz9aZWEspmkCgnpw.roa
File: XfzUpSsLIgSjz9aZWEspmkCgnpw.roa (raw, json)
Hash identifier: zb1226RCVb8WeusQc5XtD7bhS1O9w/HByQ9/hDPXvGM=
Subject key identifier: 5D:FC:D4:A5:2B:0B:22:04:A3:CF:D6:99:58:4B:29:9A:40:A0:9E:9C
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01A0AE1687F4BFC471193950FDE5C938147A
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/XfzUpSsLIgSjz9aZWEspmkCgnpw.roa
Signing time: Thu 17 Sep 2026 06:38:27 +0000
ROA not before: Thu 17 Sep 2026 06:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29555
IP address blocks: 81.91.188.0/24 maxlen: 24
176.64.0.0/24 maxlen: 24
176.64.1.0/24 maxlen: 24
176.64.2.0/24 maxlen: 24
176.64.3.0/24 maxlen: 24
176.64.4.0/24 maxlen: 24
176.64.5.0/24 maxlen: 24
176.64.6.0/24 maxlen: 24
176.64.7.0/24 maxlen: 24
176.64.8.0/24 maxlen: 24
176.64.9.0/24 maxlen: 24
176.64.10.0/24 maxlen: 24
176.64.11.0/24 maxlen: 24
176.64.12.0/24 maxlen: 24
176.64.13.0/24 maxlen: 24
176.64.14.0/24 maxlen: 24
176.64.15.0/24 maxlen: 24
176.64.16.0/24 maxlen: 24
176.64.17.0/24 maxlen: 24
176.64.18.0/24 maxlen: 24
176.64.19.0/24 maxlen: 24
176.64.20.0/24 maxlen: 24
176.64.21.0/24 maxlen: 24
176.64.22.0/24 maxlen: 24
176.64.23.0/24 maxlen: 24
176.64.24.0/24 maxlen: 24
176.64.25.0/24 maxlen: 24
176.64.26.0/24 maxlen: 24
176.64.27.0/24 maxlen: 24
176.64.28.0/24 maxlen: 24
176.64.29.0/24 maxlen: 24
176.64.30.0/24 maxlen: 24
176.64.31.0/24 maxlen: 24
176.64.32.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
176.64.100.0/24 maxlen: 24
176.64.101.0/24 maxlen: 24
176.64.102.0/24 maxlen: 24
176.64.103.0/24 maxlen: 24
176.64.104.0/24 maxlen: 24
176.64.105.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.69.0/24 maxlen: 24
212.96.74.0/24 maxlen: 24
212.96.75.0/24 maxlen: 24
212.96.76.0/24 maxlen: 24
212.96.79.0/24 maxlen: 24
212.96.80.0/24 maxlen: 24
212.96.81.0/24 maxlen: 24
212.96.82.0/24 maxlen: 24
212.96.84.0/24 maxlen: 24
212.96.86.0/24 maxlen: 24
212.96.87.0/24 maxlen: 24
212.96.88.0/24 maxlen: 24
212.96.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:16:87:f4:bf:c4:71:19:39:50:fd:e5:c9:38:14:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Sep 17 06:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dfcd4a52b0b2204a3cfd699584b299a40a09e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:5d:b4:93:5e:33:0d:1b:5f:74:62:51:73:
95:7e:f4:91:83:45:e7:d9:ff:b4:82:aa:23:e8:38:
91:9b:79:bf:71:de:12:6d:1b:f0:53:b6:0e:a7:4f:
67:1a:e3:f4:af:13:c6:6a:47:bc:e1:3e:9e:53:39:
a6:43:a4:1d:7f:49:f8:27:6e:b9:65:1f:5c:79:cc:
2f:e7:ec:19:29:4b:d7:16:e8:8f:06:9d:ce:ce:96:
08:fd:d4:11:92:e6:72:0e:32:7e:dd:3f:93:53:98:
21:63:1b:27:58:98:9d:95:da:73:49:d1:be:0f:ef:
54:e6:c2:66:b9:13:7c:e1:c9:96:c0:e4:2f:a2:05:
f0:9a:62:e9:36:ab:cc:35:1e:61:46:a7:8a:9b:c2:
95:a3:0a:54:52:40:69:1a:80:5d:31:e3:0d:d2:67:
04:57:2d:e1:23:7a:89:12:46:cb:39:39:63:01:82:
6e:aa:8d:c3:b4:a8:c6:13:88:3f:0b:08:24:49:5b:
ac:e4:80:df:8c:94:70:43:40:da:e0:ed:a3:73:86:
44:58:9e:ca:18:15:f4:e8:ed:9f:cf:3d:bc:a2:b2:
b5:ae:8e:aa:dc:77:48:2f:a7:d8:02:ed:43:ea:6a:
76:7b:11:e6:32:8e:aa:80:d2:86:23:cf:69:b6:6f:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:D4:A5:2B:0B:22:04:A3:CF:D6:99:58:4B:29:9A:40:A0:9E:9C
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/XfzUpSsLIgSjz9aZWEspmkCgnpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.188.0/24
176.64.0.0-176.64.35.255
176.64.100.0-176.64.105.255
212.96.66.0/24
212.96.69.0/24
212.96.74.0-212.96.76.255
212.96.79.0-212.96.82.255
212.96.84.0/24
212.96.86.0-212.96.89.255
Signature Algorithm: sha256WithRSAEncryption
02:59:78:e4:62:10:c5:9b:a2:00:34:f4:27:b3:1e:7f:eb:4b:
d4:5f:20:9b:b9:c4:4e:bd:fd:fa:94:c9:65:11:9a:98:ac:db:
21:cd:79:68:7a:fa:ef:f7:72:b8:7c:3e:4a:8a:1c:d8:97:2d:
72:62:6f:67:8d:95:9b:38:1f:32:f9:d2:c7:57:9b:23:f5:72:
61:e7:06:ff:12:21:a8:94:ac:ce:7b:14:bf:14:aa:83:71:1b:
de:f4:90:a9:04:4a:83:aa:8d:67:d7:cd:0f:3d:58:de:30:15:
16:1d:c8:d0:1d:0d:8f:54:f5:50:ea:0a:9a:75:35:28:d9:8d:
f9:ec:10:6a:bc:1e:38:33:a6:6f:88:5e:5b:72:78:78:c6:aa:
6a:44:df:87:82:65:29:17:79:46:83:e5:26:c3:28:0f:14:ab:
d5:c9:4a:5c:22:3c:d9:dd:dd:04:f7:07:c4:38:6b:f3:78:67:
19:58:72:ac:ba:db:29:5a:dc:bb:f0:4e:83:7b:ec:83:12:0f:
7f:9a:cc:fc:33:8b:6e:e7:72:59:99:73:08:4b:35:e9:5a:aa:
a0:4e:a0:bd:5a:a9:bb:49:c5:bf:e8:30:b3:9d:70:06:e6:3e:
43:e8:71:ed:33:33:66:b5:bd:f2:70:3e:44:ce:3c:ac:84:33:
20:25:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:14 2026 by rpki-client