Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/rxWTpB1cBDAasdpeCd_eBF1w0wk.roa
File: rxWTpB1cBDAasdpeCd_eBF1w0wk.roa (raw, json)
Hash identifier: aF9Mb+BB8Tjqy6FAH1rJtXHNbhARNFUNI1crgBVxf6Y=
Subject key identifier: AF:15:93:A4:1D:5C:04:30:1A:B1:DA:5E:09:DF:DE:04:5D:70:D3:09
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A09A602631E31FD4FEC3322640EBDF2C4F
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/rxWTpB1cBDAasdpeCd_eBF1w0wk.roa
Signing time: Sun 13 Sep 2026 10:46:27 +0000
ROA not before: Sun 13 Sep 2026 10:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215567
IP address blocks: 176.53.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:60:26:31:e3:1f:d4:fe:c3:32:26:40:eb:df:2c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Sep 13 10:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1593a41d5c04301ab1da5e09dfde045d70d309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:2b:90:30:86:b0:a1:67:65:33:77:27:8b:
5f:dd:48:75:e4:03:cc:39:64:a2:38:8f:62:fb:19:
9f:14:fe:64:81:e0:e2:48:64:47:d1:57:13:ee:81:
06:a2:da:e2:d6:f7:75:8a:a2:73:b5:4d:35:7a:db:
38:f1:fe:0d:82:99:b7:88:89:28:00:81:e6:08:94:
77:7b:06:2d:3d:e6:07:b9:15:dd:b3:27:13:45:bb:
0d:b2:95:af:48:0f:41:8f:fc:b3:c9:56:e3:16:d5:
c7:d4:92:46:2e:2e:d5:51:ad:40:a1:af:a3:fc:ff:
c1:ad:52:3e:e7:1d:fd:ac:1b:51:f8:50:19:05:ce:
64:e9:7b:62:e7:96:f9:21:aa:a5:a0:0e:81:14:ff:
c4:21:c7:62:b0:a4:e9:ef:89:55:80:50:62:e1:cb:
6a:4e:5e:54:19:cc:ed:d5:e2:0d:1d:22:92:53:14:
c7:1c:08:33:ba:3a:1f:0b:7c:ef:bb:91:eb:c9:db:
b6:fd:51:c7:54:30:58:ad:a9:6b:cf:da:7c:82:0e:
be:69:10:63:d6:c2:bf:3f:d1:b1:05:95:b5:30:50:
65:94:cb:7a:0e:c4:f2:0e:b6:a4:17:92:77:57:2b:
f8:25:59:e6:b4:aa:6d:d5:07:83:90:2d:81:51:b1:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:15:93:A4:1D:5C:04:30:1A:B1:DA:5E:09:DF:DE:04:5D:70:D3:09
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/rxWTpB1cBDAasdpeCd_eBF1w0wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.37.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cc:9e:9c:af:a9:3c:a6:bf:b8:c9:86:8c:24:69:91:9d:58:
eb:ba:9f:63:1b:6f:5b:a0:c9:dc:5f:54:19:ee:e1:5b:03:63:
75:6a:3a:a9:02:b2:c9:06:91:a3:1c:32:8f:e2:af:87:76:c7:
aa:12:a1:bb:42:4a:f7:ca:22:1e:9e:9b:3e:9d:cb:e9:34:d8:
26:c4:79:78:4c:1d:bb:58:97:db:fa:16:7d:aa:67:66:4e:af:
9e:96:a0:6b:36:71:8b:09:5c:4a:88:17:97:ea:ff:a1:3f:0b:
95:1f:70:8f:16:b4:f5:a8:9e:72:d3:7a:3c:99:0b:0b:81:96:
60:ea:d4:76:48:38:80:a1:63:d7:82:1b:db:b3:e6:f5:11:2d:
d4:eb:50:f9:30:c8:a2:71:f9:af:ac:76:89:2b:85:32:b5:21:
59:31:93:8f:6d:bc:2e:9f:7d:bf:49:49:d5:84:5a:2e:f2:9f:
da:c7:a7:6f:f0:7a:71:ec:47:5d:8b:d4:9d:a0:f5:6f:8a:02:
fc:42:10:8d:bf:5c:dd:83:9a:90:72:3a:30:e0:4f:fa:3a:f0:
70:fe:57:2b:a5:f6:86:e7:39:33:08:05:71:ce:59:87:90:4e:
e7:02:42:a3:c7:c9:6a:d6:bb:4e:5d:0d:b6:05:bb:2d:e3:22:
18:4d:88:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCaYCYx4x/U/sMyJkDr3yxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzFiYmYxZDNkM2MwZWZlMzZkZTExMDM5MmJlMGM3YWM0
NDdhODQwHhcNMjYwOTEzMTA0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjE1OTNhNDFkNWMwNDMwMWFiMWRhNWUwOWRmZGUwNDVkNzBkMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YsrkDCGsKFnZTN3J4tf3Uh15APM
OWSiOI9i+xmfFP5kgeDiSGRH0VcT7oEGotri1vd1iqJztU01ets48f4Ngpm3iIko
AIHmCJR3ewYtPeYHuRXdsycTRbsNspWvSA9Bj/yzyVbjFtXH1JJGLi7VUa1Aoa+j
/P/BrVI+5x39rBtR+FAZBc5k6Xti55b5IaqloA6BFP/EIcdisKTp74lVgFBi4ctq
Tl5UGczt1eINHSKSUxTHHAgzujofC3zvu5Hrydu2/VHHVDBYralrz9p8gg6+aRBj
1sK/P9GxBZW1MFBllMt6DsTyDrakF5J3Vyv4JVnmtKpt1QeDkC2BUbFm/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8Vk6QdXAQwGrHaXgnf3gRdcNMJMB8GA1UdIwQY
MBaAFPVxu/HT08Dv423hEDkr4MesRHqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYt
YTk2NTdlYjFmOGQ3LzEvcnhXVHBCMWNCREFhc2RwZUNkX2VCRjF3MHdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYtYTk2NTdlYjFmOGQ3
LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDUlMA0G
CSqGSIb3DQEBCwUAA4IBAQAkzJ6cr6k8pr+4yYaMJGmRnVjrup9jG29boMncX1QZ
7uFbA2N1ajqpArLJBpGjHDKP4q+HdseqEqG7Qkr3yiIenps+ncvpNNgmxHl4TB27
WJfb+hZ9qmdmTq+elqBrNnGLCVxKiBeX6v+hPwuVH3CPFrT1qJ5y03o8mQsLgZZg
6tR2SDiAoWPXghvbs+b1ES3U61D5MMiicfmvrHaJK4UytSFZMZOPbbwun32/SUnV
hFou8p/ax6dv8Hpx7Eddi9SdoPVvigL8QhCNv1zdg5qQcjow4E/6OvBw/lcrpfaG
5zkzCAVxzlmHkE7nAkKjx8lq1rtOXQ22Bbst4yIYTYjC
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:09 2026 by rpki-client