Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/XV4BJJtWnOFwfijBbTe0gJGiMFk.roa
File: XV4BJJtWnOFwfijBbTe0gJGiMFk.roa (raw, json)
Hash identifier: vGvkomVCBASHPt9ZuX6FqSHqFEmWmYrSvCqsWBijJO8=
Subject key identifier: 5D:5E:01:24:9B:56:9C:E1:70:7E:28:C1:6D:37:B4:80:91:A2:30:59
Certificate issuer: /CN=227994b66f9fd67c175e343c62aee6077cd4245f
Certificate serial: 01A0FC6630DFCF5CB3AE8C2B858100BB58CA
Authority key identifier: 22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/XV4BJJtWnOFwfijBbTe0gJGiMFk.roa
Signing time: Fri 02 Oct 2026 11:35:50 +0000
ROA not before: Fri 02 Oct 2026 11:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 129.101.112.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:66:30:df:cf:5c:b3:ae:8c:2b:85:81:00:bb:58:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227994b66f9fd67c175e343c62aee6077cd4245f
Validity
Not Before: Oct 2 11:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d5e01249b569ce1707e28c16d37b48091a23059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:99:a1:c2:53:29:bf:a6:37:91:0d:91:31:
02:5a:cb:0c:04:0f:4f:0c:45:83:3a:49:d6:ee:c3:
50:5e:b0:3e:c3:bd:cc:cf:d9:05:9f:0a:87:91:2b:
fc:59:45:83:e2:fb:bb:65:af:6b:46:52:a1:11:34:
99:da:75:a5:d6:0b:63:2d:93:75:ed:f4:ca:c2:7d:
ac:3e:d6:15:6c:f3:e1:72:e9:31:49:81:84:56:6e:
6f:75:85:c3:73:05:08:28:4c:e9:e8:81:04:61:61:
e3:af:58:e0:dd:e5:79:ef:43:50:45:14:78:d7:b5:
e1:4d:43:4c:f9:49:74:cf:3e:20:84:2b:23:82:19:
7f:07:4b:c9:b1:9a:20:9c:7b:64:90:dc:8a:db:8a:
b1:aa:32:91:cb:d1:5c:5c:b8:ba:ec:cc:89:a7:6a:
bf:ca:df:1b:2b:cc:32:14:52:ab:a9:7c:30:6b:93:
d4:43:c3:16:9e:21:35:80:84:91:7f:1b:3c:f1:d1:
86:af:38:32:1d:27:80:34:6b:bb:09:49:2b:f1:45:
d1:11:fc:e2:e2:c4:80:ae:10:51:b7:18:80:e0:35:
94:19:2e:80:d6:8d:47:15:8e:9d:9d:5a:15:ae:bc:
81:96:25:b8:83:0b:cd:bb:13:7e:1d:da:16:90:92:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5E:01:24:9B:56:9C:E1:70:7E:28:C1:6D:37:B4:80:91:A2:30:59
X509v3 Authority Key Identifier:
keyid:22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/XV4BJJtWnOFwfijBbTe0gJGiMFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.101.112.0/21
Signature Algorithm: sha256WithRSAEncryption
14:74:38:52:65:a2:e8:16:6e:aa:52:c6:d6:ae:36:cc:b0:79:
48:61:25:1d:9a:6d:4e:2c:54:32:a5:4d:a3:8a:c7:04:b6:72:
e3:9e:15:ec:08:3b:d3:6a:45:d4:d0:9f:64:aa:78:5a:e3:ab:
c6:7b:9d:1d:2c:9d:24:dc:b7:52:7d:ea:04:4d:35:8b:20:f4:
96:ed:86:7b:4a:dd:bc:9b:d6:16:02:27:ce:6d:cc:68:64:f6:
54:f2:5b:cb:74:53:ff:c4:df:04:50:2d:d2:60:30:4a:33:78:
ba:32:11:14:c1:37:9e:04:b9:5d:9a:13:12:52:9e:d7:d7:ae:
bf:33:6d:b7:1f:47:73:a1:65:87:55:59:57:b0:e5:7b:af:b3:
ea:e4:97:12:71:9f:b9:b8:53:6f:73:3e:a9:a9:f4:79:89:f0:
25:66:4d:35:72:05:46:c6:3c:7c:32:4f:5e:83:26:ae:5d:e4:
01:af:0b:15:03:71:ce:22:39:6c:11:8a:9e:10:c5:b4:34:a8:
f2:9b:51:1b:0f:0a:16:10:80:ca:49:87:e2:4d:7b:05:b6:73:
b9:38:65:26:92:e9:c0:78:b9:30:52:8a:b3:cf:f0:81:ed:b2:
22:27:98:38:80:d7:c2:88:85:1c:5f:41:9b:d7:56:f3:73:e6:
f5:46:5a:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD8ZjDfz1yzrowrhYEAu1jKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNzk5NGI2NmY5ZmQ2N2MxNzVlMzQzYzYyYWVlNjA3N2Nk
NDI0NWYwHhcNMjYxMDAyMTEzNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDVlMDEyNDliNTY5Y2UxNzA3ZTI4YzE2ZDM3YjQ4MDkxYTIzMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NyZocJTKb+mN5ENkTECWssMBA9P
DEWDOknW7sNQXrA+w73Mz9kFnwqHkSv8WUWD4vu7Za9rRlKhETSZ2nWl1gtjLZN1
7fTKwn2sPtYVbPPhcukxSYGEVm5vdYXDcwUIKEzp6IEEYWHjr1jg3eV570NQRRR4
17XhTUNM+Ul0zz4ghCsjghl/B0vJsZognHtkkNyK24qxqjKRy9FcXLi67MyJp2q/
yt8bK8wyFFKrqXwwa5PUQ8MWniE1gISRfxs88dGGrzgyHSeANGu7CUkr8UXREfzi
4sSArhBRtxiA4DWUGS6A1o1HFY6dnVoVrryBliW4gwvNuxN+HdoWkJIApwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1eASSbVpzhcH4owW03tICRojBZMB8GA1UdIwQY
MBaAFCJ5lLZvn9Z8F140PGKu5gd81CRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW5tVXRtLWYxbndYWGpROFlxN21CM3pVSkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjE5NmEtMDcwNC00YTRjLTllMWEt
ZGE1MTJmYjlkMTJhLzEvWFY0QkpKdFduT0Z3ZmlqQmJUZTBnSkdpTUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjE5NmEtMDcwNC00YTRjLTllMWEtZGE1MTJmYjlkMTJh
LzEvSW5tVXRtLWYxbndYWGpROFlxN21CM3pVSkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgWVwMA0G
CSqGSIb3DQEBCwUAA4IBAQAUdDhSZaLoFm6qUsbWrjbMsHlIYSUdmm1OLFQypU2j
iscEtnLjnhXsCDvTakXU0J9kqnha46vGe50dLJ0k3LdSfeoETTWLIPSW7YZ7St28
m9YWAifObcxoZPZU8lvLdFP/xN8EUC3SYDBKM3i6MhEUwTeeBLldmhMSUp7X166/
M223H0dzoWWHVVlXsOV7r7Pq5JcScZ+5uFNvcz6pqfR5ifAlZk01cgVGxjx8Mk9e
gyauXeQBrwsVA3HOIjlsEYqeEMW0NKjym1EbDwoWEIDKSYfiTXsFtnO5OGUmkunA
eLkwUoqzz/CB7bIiJ5g4gNfCiIUcX0Gb11bzc+b1Rlpp
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:20:26 2026 by rpki-client