Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/Xwng2aOLLOOXGJWWCrEGpFiiseE.roa
File: Xwng2aOLLOOXGJWWCrEGpFiiseE.roa (raw, json)
Hash identifier: 6yqVFWixLzqYnXIf35RXEXUfb95qxNvK5438TeN6PcA=
Subject key identifier: 5F:09:E0:D9:A3:8B:2C:E3:97:18:95:96:0A:B1:06:A4:58:A2:B1:E1
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 01A014327AA4170C5EF2D2C7D8A600B57F72
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/Xwng2aOLLOOXGJWWCrEGpFiiseE.roa
Signing time: Tue 18 Aug 2026 09:27:27 +0000
ROA not before: Tue 18 Aug 2026 09:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39122
IP address blocks: 193.36.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:32:7a:a4:17:0c:5e:f2:d2:c7:d8:a6:00:b5:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Aug 18 09:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f09e0d9a38b2ce3971895960ab106a458a2b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:a6:09:4c:5b:f1:1a:33:01:0d:ea:5f:9b:
02:94:e7:a4:6e:07:f4:fb:98:01:6f:74:41:02:12:
70:54:b8:3d:b1:ec:51:ff:12:55:92:b0:75:d1:1d:
ce:ad:4f:3c:cf:a3:01:d4:eb:57:b8:d0:00:58:9f:
f5:49:b5:d4:aa:ce:2e:3c:4c:1b:e7:cb:e8:c9:04:
26:e6:33:76:4b:b7:7d:4d:fe:1e:2c:60:6e:88:88:
1a:1d:96:74:05:bf:ea:9c:74:7b:bb:ff:87:13:83:
2a:ed:d0:d3:22:2f:e7:87:5f:bc:50:cc:d3:8a:1b:
09:a9:c7:50:3e:eb:e8:19:7f:60:05:e5:a0:ec:68:
74:ec:b8:92:2f:e6:cc:25:b1:06:c0:a2:33:bf:1b:
90:14:52:34:3c:3c:51:23:98:6b:4b:93:9e:8a:55:
3f:ee:a2:d9:7c:9e:51:e8:c1:2c:27:dd:e2:a4:22:
3e:12:cf:eb:44:71:1e:ae:79:c9:27:a4:02:af:da:
0c:23:9c:e4:30:7e:5a:0d:36:c3:68:34:37:74:aa:
50:fa:34:ac:2c:ac:ee:c1:15:a2:60:c8:a2:c3:67:
e1:a1:0b:e6:f0:c5:9c:6d:b5:51:16:f4:ab:2a:38:
81:4a:93:51:ec:d4:50:66:07:f0:07:d7:bb:6e:bb:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:E0:D9:A3:8B:2C:E3:97:18:95:96:0A:B1:06:A4:58:A2:B1:E1
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/Xwng2aOLLOOXGJWWCrEGpFiiseE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:03:8e:90:7c:b6:3f:36:76:08:cf:02:a0:cb:0b:aa:e1:8a:
4f:f4:32:18:67:1c:16:8b:8a:36:38:cb:61:fc:ed:f2:e7:89:
f7:a4:e7:81:77:a0:13:c0:6a:58:ec:b0:d0:e7:c5:d5:e3:51:
1b:d3:28:f8:46:2a:fe:e9:11:68:4f:ab:60:d2:0a:c5:0c:d9:
31:40:0f:94:02:8e:a1:4d:6d:94:c7:19:58:84:30:1c:8a:bc:
a5:42:a7:62:e1:7a:26:fb:1a:ad:d9:68:b9:9d:5c:94:5f:8e:
12:4b:ca:22:cc:67:9d:b2:a4:b4:8c:4e:c7:75:f3:2b:8c:49:
41:a0:59:17:98:35:c8:75:ae:9a:d3:69:56:6c:8d:a9:7c:6a:
58:e9:cd:f8:96:4d:ef:87:80:bf:76:a1:d6:2b:80:b7:b4:22:
2e:35:10:69:39:43:ba:d3:67:36:83:89:84:cb:ae:ff:8c:1e:
fe:38:ea:db:51:b8:4d:cb:47:be:43:f8:f3:b3:09:85:a9:81:
16:88:66:c4:7f:53:0a:0f:1b:af:cc:9f:da:62:87:75:ab:84:
b0:27:32:2f:b6:e0:03:39:7b:2a:85:d0:66:e9:fb:b7:de:09:
b3:cd:f1:ad:38:c3:b4:7d:48:3d:04:00:a0:4b:06:4d:53:ab:
48:4c:05:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAUMnqkFwxe8tLH2KYAtX9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwODE4MDkyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjA5ZTBkOWEzOGIyY2UzOTcxODk1OTYwYWIxMDZhNDU4YTJiMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ+mCUxb8RozAQ3qX5sClOekbgf0
+5gBb3RBAhJwVLg9sexR/xJVkrB10R3OrU88z6MB1OtXuNAAWJ/1SbXUqs4uPEwb
58voyQQm5jN2S7d9Tf4eLGBuiIgaHZZ0Bb/qnHR7u/+HE4Mq7dDTIi/nh1+8UMzT
ihsJqcdQPuvoGX9gBeWg7Gh07LiSL+bMJbEGwKIzvxuQFFI0PDxRI5hrS5OeilU/
7qLZfJ5R6MEsJ93ipCI+Es/rRHEernnJJ6QCr9oMI5zkMH5aDTbDaDQ3dKpQ+jSs
LKzuwRWiYMiiw2fhoQvm8MWcbbVRFvSrKjiBSpNR7NRQZgfwB9e7bruwYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8J4NmjiyzjlxiVlgqxBqRYorHhMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvWHduZzJhT0xMT09YR0pXV0NyRUdwRmlpc2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQrMA0G
CSqGSIb3DQEBCwUAA4IBAQBKA46QfLY/NnYIzwKgywuq4YpP9DIYZxwWi4o2OMth
/O3y54n3pOeBd6ATwGpY7LDQ58XV41Eb0yj4Rir+6RFoT6tg0grFDNkxQA+UAo6h
TW2UxxlYhDAcirylQqdi4Xom+xqt2Wi5nVyUX44SS8oizGedsqS0jE7HdfMrjElB
oFkXmDXIda6a02lWbI2pfGpY6c34lk3vh4C/dqHWK4C3tCIuNRBpOUO602c2g4mE
y67/jB7+OOrbUbhNy0e+Q/jzswmFqYEWiGbEf1MKDxuvzJ/aYod1q4SwJzIvtuAD
OXsqhdBm6fu33gmzzfGtOMO0fUg9BACgSwZNU6tITAVx
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:15 2026 by rpki-client