Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/xfiqL5GzkXAGOLrT3MNfC0_hTrE.roa
File: xfiqL5GzkXAGOLrT3MNfC0_hTrE.roa (raw, json)
Hash identifier: DPd6CfbqSOqESA+FWn2c8BamoHZ/VTuDEhywjFfGcGs=
Subject key identifier: C5:F8:AA:2F:91:B3:91:70:06:38:BA:D3:DC:C3:5F:0B:4F:E1:4E:B1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 01A0E4B04ECA96DD15809ED8F97F34D8CB3D
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/xfiqL5GzkXAGOLrT3MNfC0_hTrE.roa
Signing time: Sun 27 Sep 2026 21:05:54 +0000
ROA not before: Sun 27 Sep 2026 21:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201191
IP address blocks: 185.71.60.0/22 maxlen: 22
193.110.143.0/24 maxlen: 24
2a03:2020::/48 maxlen: 48
2a03:38a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:b0:4e:ca:96:dd:15:80:9e:d8:f9:7f:34:d8:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Sep 27 21:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5f8aa2f91b391700638bad3dcc35f0b4fe14eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:b9:bf:fb:fc:6f:90:d7:ab:b1:6d:66:fa:
99:84:b4:b6:7c:85:24:07:08:d6:e8:01:58:5c:a9:
cb:09:c6:18:30:54:6b:f8:ea:12:fd:37:f2:3a:b8:
c3:ed:7b:58:3a:a0:79:21:5c:9c:16:dd:7a:41:75:
bb:4b:ab:e1:47:08:db:c2:e3:f2:7b:20:18:56:63:
ad:15:41:ba:be:58:a2:44:f2:a4:58:97:ef:4b:5e:
ca:c6:ba:c2:9e:af:59:91:a6:13:20:86:bb:a3:04:
2f:56:c2:ad:22:7a:d5:ab:c2:b5:c0:7d:29:96:82:
58:65:10:77:75:28:23:d7:0c:26:38:c8:48:4a:c6:
18:d3:ad:7e:05:00:00:02:86:ae:57:c1:b5:6a:4c:
8e:6f:45:01:5b:c6:2b:5b:09:75:4b:a0:21:7b:3a:
06:39:14:47:42:bb:e7:0c:b3:75:7d:d8:6a:da:8e:
01:52:38:d9:63:e8:72:48:3e:4f:93:9d:87:26:8c:
a5:65:af:4a:3c:f1:5c:9c:d4:b0:36:6e:6d:ce:4f:
f8:2c:35:c5:17:46:fd:4d:61:18:ba:27:4e:7e:b9:
42:69:da:a2:d6:b1:38:4e:4b:96:9d:4b:9a:0f:59:
45:a6:c6:f9:17:68:e5:cd:51:4a:34:7d:95:fe:aa:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:AA:2F:91:B3:91:70:06:38:BA:D3:DC:C3:5F:0B:4F:E1:4E:B1
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/xfiqL5GzkXAGOLrT3MNfC0_hTrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.60.0/22
193.110.143.0/24
IPv6:
2a03:2020::/48
2a03:38a0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:e1:4f:ce:d8:47:33:91:0b:f3:fd:90:72:d5:66:b2:05:1c:
bf:2b:c7:68:1b:2a:f0:50:1b:87:64:64:18:e8:cb:e7:5f:8f:
71:3a:3a:d2:44:95:e0:e2:f7:f1:35:42:37:25:d9:5b:67:31:
41:39:cf:06:c7:ea:66:85:a0:b6:18:16:74:e1:03:a2:71:80:
64:ba:b0:03:f5:9e:c6:ed:09:28:b2:f0:58:ea:cb:5d:89:0c:
70:e8:5a:0d:7c:6b:73:99:20:3a:49:ff:ef:d0:35:4d:15:2c:
1a:d4:18:03:50:f4:a5:47:70:d2:af:85:ab:d0:19:de:b8:68:
8d:55:56:37:ec:a1:32:26:23:2b:aa:ae:59:3b:8b:b8:37:bb:
25:cd:33:8f:c9:ed:9e:9c:c9:ad:77:44:40:e3:78:ec:f4:df:
ed:87:ae:1b:1b:ad:19:c5:38:6d:16:4d:51:22:bb:16:d8:d1:
02:91:41:5b:09:86:0e:f5:7f:95:32:cb:de:35:e2:d1:69:f3:
73:16:c1:4c:15:98:61:0a:44:bb:d9:16:35:25:c9:3b:ea:d2:
14:88:ab:01:cc:f6:d7:64:be:dc:b1:a4:c4:fb:72:6c:9d:89:
39:da:c9:a0:2d:d1:ed:14:2c:bd:cc:fd:b6:05:99:76:ad:71:
b6:5e:06:ed
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaDksE7Klt0VgJ7Y+X802Ms9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2Q4YjBlNzU0NjM1MTE3NmNjMGM2ZTUxZWQ0NTIwYWJl
MDRlZjEwHhcNMjYwOTI3MjEwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWY4YWEyZjkxYjM5MTcwMDYzOGJhZDNkY2MzNWYwYjRmZTE0ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq65v/v8b5DXq7FtZvqZhLS2fIUk
BwjW6AFYXKnLCcYYMFRr+OoS/TfyOrjD7XtYOqB5IVycFt16QXW7S6vhRwjbwuPy
eyAYVmOtFUG6vliiRPKkWJfvS17KxrrCnq9ZkaYTIIa7owQvVsKtInrVq8K1wH0p
loJYZRB3dSgj1wwmOMhISsYY061+BQAAAoauV8G1akyOb0UBW8YrWwl1S6AhezoG
ORRHQrvnDLN1fdhq2o4BUjjZY+hySD5Pk52HJoylZa9KPPFcnNSwNm5tzk/4LDXF
F0b9TWEYuidOfrlCadqi1rE4TkuWnUuaD1lFpsb5F2jlzVFKNH2V/qoGswIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMX4qi+Rs5FwBji609zDXwtP4U6xMB8GA1UdIwQY
MBaAFFh9iw51RjURdswMblHtRSCr4E7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDIt
YzEwZjc4MmZiMDdmLzEveGZpcUw1R3prWEFHT0xyVDNNTmZDMF9oVHJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDItYzEwZjc4MmZiMDdm
LzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuUc8AwQA
wW6PMBYEAgACMBADBwAqAyAgAAADBQAqAzigMA0GCSqGSIb3DQEBCwUAA4IBAQAO
4U/O2EczkQvz/ZBy1WayBRy/K8doGyrwUBuHZGQY6MvnX49xOjrSRJXg4vfxNUI3
JdlbZzFBOc8Gx+pmhaC2GBZ04QOicYBkurAD9Z7G7QkosvBY6stdiQxw6FoNfGtz
mSA6Sf/v0DVNFSwa1BgDUPSlR3DSr4Wr0BneuGiNVVY37KEyJiMrqq5ZO4u4N7sl
zTOPye2enMmtd0RA43js9N/th64bG60ZxThtFk1RIrsW2NECkUFbCYYO9X+VMsve
NeLRafNzFsFMFZhhCkS72RY1Jck76tIUiKsBzPbXZL7csaTE+3JsnYk52smgLdHt
FCy9zP22BZl2rXG2Xgbt
-----END CERTIFICATE-----
Generated at Wed Sep 30 04:19:11 2026 by rpki-client