Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/w_XEzdiU384GG3tWDIA3eH1I_FA.roa
File: w_XEzdiU384GG3tWDIA3eH1I_FA.roa (raw, json)
Hash identifier: iki/QZU5ZHMk/ujCqXZUuFdao/uKQ75nWW/JWJw+O/8=
Subject key identifier: C3:F5:C4:CD:D8:94:DF:CE:06:1B:7B:56:0C:80:37:78:7D:48:FC:50
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 01A05A759D8061396C35C4BAD84050DBD0F8
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/w_XEzdiU384GG3tWDIA3eH1I_FA.roa
Signing time: Tue 01 Sep 2026 00:54:12 +0000
ROA not before: Tue 01 Sep 2026 00:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202225
IP address blocks: 64.28.40.0/24 maxlen: 24
64.28.41.0/24 maxlen: 24
167.104.64.0/21 maxlen: 21
193.93.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:75:9d:80:61:39:6c:35:c4:ba:d8:40:50:db:d0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: Sep 1 00:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3f5c4cdd894dfce061b7b560c8037787d48fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:aa:fc:5e:b1:5c:4f:bc:cc:5b:10:3a:aa:
7b:62:92:e9:c5:a9:c2:a8:2c:66:66:40:32:3c:5c:
b2:b1:8d:24:bd:3a:b3:01:c1:80:3a:16:84:e2:4c:
fc:91:55:e4:58:1c:53:11:db:7c:79:36:27:79:39:
92:ff:17:1c:62:0b:15:63:3b:d4:8f:c7:3c:c2:47:
3f:e1:60:fb:10:00:de:7d:ff:1f:4f:3b:99:90:9a:
c4:f5:2a:ce:c2:36:3a:3f:1b:51:75:41:c1:e7:41:
62:ae:60:85:79:a1:3b:6a:63:3e:10:b1:c1:8d:7e:
9a:ed:22:0a:a4:2f:2d:4d:7d:40:48:cf:e9:7d:c0:
99:aa:41:6c:a9:06:8a:ab:e3:72:f4:72:76:d1:2b:
04:99:18:0c:82:de:bd:85:77:62:7c:25:2b:c8:0b:
36:41:40:40:3c:22:c8:c2:4c:5f:6e:1b:db:84:71:
b2:69:a8:54:57:4e:f0:89:02:7f:fd:20:4f:cf:1c:
ff:b1:ab:38:6b:93:d5:88:02:fc:64:c2:c7:e8:70:
ec:2c:04:c2:5e:5a:ce:70:31:ae:95:bc:fc:5c:05:
0a:41:a3:95:11:6d:c3:e3:8d:1a:e0:08:2c:e0:0f:
aa:a0:d3:51:39:0e:6c:4a:cc:db:5a:a4:c3:2f:6a:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:C4:CD:D8:94:DF:CE:06:1B:7B:56:0C:80:37:78:7D:48:FC:50
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/w_XEzdiU384GG3tWDIA3eH1I_FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.40.0/23
167.104.64.0/21
193.93.252.0/24
Signature Algorithm: sha256WithRSAEncryption
80:38:b4:c1:81:87:9d:ec:3d:c2:b5:90:b0:70:27:02:82:c4:
0c:7d:2f:a7:8c:2b:2f:fe:f5:18:4d:1c:c9:02:a3:01:67:d8:
cc:57:31:23:6f:85:84:59:63:45:96:ea:c9:e9:4f:b5:f4:73:
3e:b5:6a:69:d9:6b:fc:f1:f8:81:66:4f:3e:f5:00:b3:4b:57:
86:27:17:2d:59:1a:f4:1a:b9:54:16:a1:d6:bd:9c:59:80:d1:
56:07:73:48:96:e4:ca:21:f7:b0:d4:44:d6:f9:ca:00:d1:68:
b1:d6:3b:1d:1b:ed:bb:21:cd:ee:2e:d0:e3:06:45:94:73:18:
2f:b7:b2:dc:47:d8:a5:bd:8d:b1:c6:98:16:9a:c4:23:21:6e:
11:8b:bc:f6:ab:a1:c8:54:f4:7b:11:ef:00:28:96:d5:6e:c0:
6f:93:90:9c:b6:b1:f3:bb:d8:57:35:d7:24:49:6b:21:f8:10:
f6:c7:79:f0:60:f3:fd:90:ba:92:6f:05:97:5d:5a:6c:15:38:
25:e1:b2:58:2e:22:4c:c2:69:20:b4:02:67:59:0b:58:23:ab:
9a:45:5d:eb:a9:8a:b4:06:0e:10:c0:3b:82:7a:0b:2e:dc:91:
37:b8:d2:46:78:10:69:f7:99:2a:f6:92:48:70:d3:c7:ce:a3:
4a:72:1f:ec
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBadZ2AYTlsNcS62EBQ29D4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODllZTdkYzdhNGJlYThkMjY5Yzg3NDZjZmU3ZDM2MTk4
ZDIyMWUwHhcNMjYwOTAxMDA1NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Y1YzRjZGQ4OTRkZmNlMDYxYjdiNTYwYzgwMzc3ODdkNDhmYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Sq/F6xXE+8zFsQOqp7YpLpxanC
qCxmZkAyPFyysY0kvTqzAcGAOhaE4kz8kVXkWBxTEdt8eTYneTmS/xccYgsVYzvU
j8c8wkc/4WD7EADeff8fTzuZkJrE9SrOwjY6PxtRdUHB50FirmCFeaE7amM+ELHB
jX6a7SIKpC8tTX1ASM/pfcCZqkFsqQaKq+Ny9HJ20SsEmRgMgt69hXdifCUryAs2
QUBAPCLIwkxfbhvbhHGyaahUV07wiQJ//SBPzxz/sas4a5PViAL8ZMLH6HDsLATC
XlrOcDGulbz8XAUKQaOVEW3D440a4Ags4A+qoNNROQ5sSszbWqTDL2qdNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMP1xM3YlN/OBht7VgyAN3h9SPxQMB8GA1UdIwQY
MBaAFNOJ7n3HpL6o0mnIdGz+fTYZjSIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQt
MjFiMDM0YzJmOGRjLzEvd19YRXpkaVUzODRHRzN0V0RJQTNlSDFJX0ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQtMjFiMDM0YzJmOGRj
LzEvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBQBwoAwQD
p2hAAwQAwV38MA0GCSqGSIb3DQEBCwUAA4IBAQCAOLTBgYed7D3CtZCwcCcCgsQM
fS+njCsv/vUYTRzJAqMBZ9jMVzEjb4WEWWNFlurJ6U+19HM+tWpp2Wv88fiBZk8+
9QCzS1eGJxctWRr0GrlUFqHWvZxZgNFWB3NIluTKIfew1ETW+coA0Wix1jsdG+27
Ic3uLtDjBkWUcxgvt7LcR9ilvY2xxpgWmsQjIW4Ri7z2q6HIVPR7Ee8AKJbVbsBv
k5CctrHzu9hXNdckSWsh+BD2x3nwYPP9kLqSbwWXXVpsFTgl4bJYLiJMwmkgtAJn
WQtYI6uaRV3rqYq0Bg4QwDuCegsu3JE3uNJGeBBp95kq9pJIcNPHzqNKch/s
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:20 2026 by rpki-client