Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/xJgVtdXjTRsXhcsLNoQEOd3WPUw.roa
File: xJgVtdXjTRsXhcsLNoQEOd3WPUw.roa (raw, json)
Hash identifier: PbrwVhyr9VwnsYtmcA/Kxh412q3DSawxivXz8EKb0kc=
Subject key identifier: C4:98:15:B5:D5:E3:4D:1B:17:85:CB:0B:36:84:04:39:DD:D6:3D:4C
Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial: 019E8742424F2375F9FED9939F4748C2D039
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/xJgVtdXjTRsXhcsLNoQEOd3WPUw.roa
Signing time: Tue 02 Jun 2026 07:35:26 +0000
ROA not before: Tue 02 Jun 2026 07:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53856
IP address blocks: 91.222.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:42:42:4f:23:75:f9:fe:d9:93:9f:47:48:c2:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Validity
Not Before: Jun 2 07:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c49815b5d5e34d1b1785cb0b36840439ddd63d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:f9:dc:8b:66:e3:dd:34:c5:bd:5a:f5:9b:
c2:df:63:18:a3:f4:5f:35:b1:e3:5c:e0:1c:ad:a0:
0b:d4:82:c6:25:cf:d0:3b:7f:b0:f2:a2:b0:3a:0f:
8b:81:07:7f:82:bc:89:2e:51:c2:52:28:80:16:ac:
a2:ea:5d:4c:b9:eb:ea:fb:bb:ee:12:e1:5c:52:16:
65:3f:54:53:4e:03:f3:17:b6:27:49:3e:e6:ef:25:
5a:0a:40:50:14:9e:da:1d:c0:3c:2c:22:af:80:b2:
2e:56:8b:74:d8:b0:e5:ca:93:96:c6:ba:d1:ab:c5:
d3:c0:69:f8:46:87:8b:83:9e:26:9b:af:35:dc:d9:
27:0b:4a:a7:6c:94:63:69:35:6f:75:dd:79:92:2c:
7b:34:7a:52:5e:bb:23:e1:d1:cc:a4:1a:34:03:d1:
fb:bb:d8:e9:db:99:1e:99:a3:e1:25:70:fe:c5:1b:
3c:05:32:b7:00:bd:54:40:22:36:73:ff:f8:7a:1b:
de:2b:31:04:d1:95:5a:90:ea:fb:bc:f0:ca:ef:48:
ff:62:c9:bf:73:f9:6a:92:2a:76:88:ba:ea:1c:c0:
71:15:41:74:82:85:27:55:57:90:35:d3:d3:8a:fe:
fb:50:0b:d9:a5:b6:03:39:65:4a:90:e0:77:18:08:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:15:B5:D5:E3:4D:1B:17:85:CB:0B:36:84:04:39:DD:D6:3D:4C
X509v3 Authority Key Identifier:
keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/xJgVtdXjTRsXhcsLNoQEOd3WPUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:3c:9b:11:55:e4:9f:25:3f:1d:47:d6:47:88:cc:47:4b:fa:
1b:21:a2:9d:96:ee:46:ed:2a:43:e0:22:16:99:24:0b:8c:64:
b9:c3:e5:bd:b9:72:8d:3d:2c:d9:39:5d:ba:85:24:f9:b1:71:
a3:46:e9:75:01:0a:ec:b2:48:dd:cf:f3:16:fb:45:08:b2:6c:
e8:49:1d:5e:42:ca:97:77:b4:84:ac:99:75:da:3f:44:77:64:
b3:9a:c9:a3:1c:03:00:19:9e:fa:cd:04:8d:47:b8:56:79:8f:
2f:66:77:3a:3d:b2:c5:13:1b:ed:b6:53:90:d1:39:0b:e5:75:
3f:50:31:2e:d2:07:5b:28:5a:b2:c7:fd:de:8e:c5:ca:e3:58:
93:ab:8f:6d:bd:e5:ad:b8:6e:2a:d7:fe:bb:07:e1:49:2a:0f:
bb:d1:6e:cf:af:ae:c3:a8:8d:9e:95:10:5a:c2:02:d2:5c:2c:
fe:51:9f:e6:31:0a:31:0d:a9:ec:b5:8c:d6:b4:ad:96:1e:b0:
c7:86:b9:e6:08:32:62:04:03:08:41:cb:02:a7:98:34:69:c8:
16:f4:aa:58:33:41:11:c2:92:b0:a3:27:37:1c:82:fd:7f:fd:
67:9a:82:e2:b9:18:96:12:44:ce:53:a0:a8:b3:35:7d:c8:94:
85:61:a8:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6HQkJPI3X5/tmTn0dIwtA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5
NWJlYTIwHhcNMjYwNjAyMDczNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDk4MTViNWQ1ZTM0ZDFiMTc4NWNiMGIzNjg0MDQzOWRkZDYzZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPH53Itm4900xb1a9ZvC32MYo/Rf
NbHjXOAcraAL1ILGJc/QO3+w8qKwOg+LgQd/gryJLlHCUiiAFqyi6l1Muevq+7vu
EuFcUhZlP1RTTgPzF7YnST7m7yVaCkBQFJ7aHcA8LCKvgLIuVot02LDlypOWxrrR
q8XTwGn4RoeLg54mm6813NknC0qnbJRjaTVvdd15kix7NHpSXrsj4dHMpBo0A9H7
u9jp25kemaPhJXD+xRs8BTK3AL1UQCI2c//4ehveKzEE0ZVakOr7vPDK70j/Ysm/
c/lqkip2iLrqHMBxFUF0goUnVVeQNdPTiv77UAvZpbYDOWVKkOB3GAg3vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMSYFbXV400bF4XLCzaEBDnd1j1MMB8GA1UdIwQY
MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt
YmY5MjRhODI1ZjU4LzEveEpnVnRkWGpUUnNYaGNzTE5vUUVPZDNXUFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4
LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW97cMA0G
CSqGSIb3DQEBCwUAA4IBAQA9PJsRVeSfJT8dR9ZHiMxHS/obIaKdlu5G7SpD4CIW
mSQLjGS5w+W9uXKNPSzZOV26hST5sXGjRul1AQrsskjdz/MW+0UIsmzoSR1eQsqX
d7SErJl12j9Ed2SzmsmjHAMAGZ76zQSNR7hWeY8vZnc6PbLFExvttlOQ0TkL5XU/
UDEu0gdbKFqyx/3ejsXK41iTq49tveWtuG4q1/67B+FJKg+70W7Pr67DqI2elRBa
wgLSXCz+UZ/mMQoxDanstYzWtK2WHrDHhrnmCDJiBAMIQcsCp5g0acgW9KpYM0ER
wpKwoyc3HIL9f/1nmoLiuRiWEkTOU6CoszV9yJSFYah0
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:41 2026 by rpki-client