Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/rxOR0nnsJBK2aO6hF1CWH964xf4.roa
File: rxOR0nnsJBK2aO6hF1CWH964xf4.roa (raw, json)
Hash identifier: /C0J0mQyY3e0ykF5/cEAUDikLIMGgrDBsKE6mDxFG7c=
Subject key identifier: AF:13:91:D2:79:EC:24:12:B6:68:EE:A1:17:50:96:1F:DE:B8:C5:FE
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01A1D1232D2050D82981FC6E44DD85BE605A
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/rxOR0nnsJBK2aO6hF1CWH964xf4.roa
Signing time: Thu 12 Nov 2026 19:01:45 +0000
ROA not before: Thu 12 Nov 2026 19:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210387
IP address blocks: 94.154.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:23:2d:20:50:d8:29:81:fc:6e:44:dd:85:be:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 12 19:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1391d279ec2412b668eea11750961fdeb8c5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:c0:39:23:7f:e9:6f:bd:fc:6c:89:f0:23:
53:ce:7e:64:81:7f:d5:b1:ce:15:a0:1d:2e:62:c9:
a7:88:c5:7b:83:53:69:0a:e9:3a:fc:05:6c:93:83:
c8:ec:a5:13:8f:e2:3a:4b:e1:f8:8d:98:b9:9d:61:
c4:7c:98:28:a4:1c:93:6c:ef:44:cc:1e:55:6a:70:
7d:bf:21:59:1f:03:4d:ab:44:84:7b:74:5a:93:c7:
63:f7:41:88:73:24:d3:aa:4f:71:0c:a0:84:c4:25:
a1:19:5a:ad:cd:13:fc:22:ed:f4:5e:f7:51:86:23:
34:b3:3b:7f:bc:dd:c5:c4:d1:e6:44:13:e2:09:8a:
08:c1:51:04:44:44:c0:23:9e:e6:2a:17:61:1e:75:
ac:98:6a:8f:5c:d9:f8:41:36:a4:20:c0:3e:4a:92:
79:42:8a:67:43:26:42:dc:f8:df:de:f5:a7:03:64:
26:b7:58:e9:8c:30:a7:d9:b9:2d:14:40:5b:10:49:
24:10:e1:c2:75:d3:08:be:43:e7:de:1c:e9:01:80:
76:1c:40:0a:ae:af:58:33:09:6d:f7:05:23:fd:63:
99:31:6f:3c:bb:6a:c9:34:29:de:53:b7:fa:ad:85:
69:99:99:0b:6f:0b:93:c9:d3:ea:1d:db:23:f1:e8:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:13:91:D2:79:EC:24:12:B6:68:EE:A1:17:50:96:1F:DE:B8:C5:FE
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/rxOR0nnsJBK2aO6hF1CWH964xf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f6:e2:ad:82:52:ae:b3:55:38:d7:6f:05:57:08:16:85:7e:
68:cd:85:ae:ae:5b:6a:4b:4d:c9:55:63:f1:09:f4:7d:e6:52:
2c:1d:43:84:65:9d:61:39:3d:d6:b7:ae:8f:8b:3f:38:54:34:
14:26:ea:be:a1:da:be:f9:56:c6:80:65:fc:00:67:4e:22:25:
17:d4:bd:d2:8c:0c:a3:d6:7f:2c:1b:df:b1:6a:5c:f1:9e:d5:
e0:07:02:07:ba:b4:6a:29:74:ec:3d:e5:57:f9:83:72:1f:73:
a3:cf:2f:06:60:37:0a:12:0b:a3:6e:cb:3d:6a:be:8b:df:28:
c9:b9:e4:53:07:9c:7f:4c:28:77:df:ad:5e:a7:5b:9c:cf:64:
b6:cd:36:cd:99:0b:87:a1:e2:83:51:04:b9:b9:3a:30:f1:24:
4b:39:f7:b3:20:37:e1:67:91:f4:96:12:fb:8e:14:84:a0:da:
2e:b1:b7:ae:47:70:b2:44:3e:2a:c3:98:f9:fb:c1:e7:c8:97:
53:07:cb:78:bc:c8:4b:4a:b3:72:cf:ad:9c:51:3c:2a:91:d3:
fc:59:e9:2a:52:73:c9:45:3c:88:56:f2:dd:47:e2:51:f4:a9:
23:20:8e:24:ce:d9:38:f1:d2:a7:c7:3d:13:9d:c0:04:96:ea:
e0:7a:d5:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHRIy0gUNgpgfxuRN2FvmBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjYxMTEyMTkwMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjEzOTFkMjc5ZWMyNDEyYjY2OGVlYTExNzUwOTYxZmRlYjhjNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37jAOSN/6W+9/GyJ8CNTzn5kgX/V
sc4VoB0uYsmniMV7g1NpCuk6/AVsk4PI7KUTj+I6S+H4jZi5nWHEfJgopByTbO9E
zB5VanB9vyFZHwNNq0SEe3Rak8dj90GIcyTTqk9xDKCExCWhGVqtzRP8Iu30XvdR
hiM0szt/vN3FxNHmRBPiCYoIwVEERETAI57mKhdhHnWsmGqPXNn4QTakIMA+SpJ5
QopnQyZC3Pjf3vWnA2Qmt1jpjDCn2bktFEBbEEkkEOHCddMIvkPn3hzpAYB2HEAK
rq9YMwlt9wUj/WOZMW88u2rJNCneU7f6rYVpmZkLbwuTydPqHdsj8ehuhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8TkdJ57CQStmjuoRdQlh/euMX+MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvcnhPUjBubnNKQksyYU82aEYxQ1dIOTY0eGY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXporMA0G
CSqGSIb3DQEBCwUAA4IBAQCP9uKtglKus1U4128FVwgWhX5ozYWurltqS03JVWPx
CfR95lIsHUOEZZ1hOT3Wt66Piz84VDQUJuq+odq++VbGgGX8AGdOIiUX1L3SjAyj
1n8sG9+xalzxntXgBwIHurRqKXTsPeVX+YNyH3Ojzy8GYDcKEgujbss9ar6L3yjJ
ueRTB5x/TCh3361ep1ucz2S2zTbNmQuHoeKDUQS5uTow8SRLOfezIDfhZ5H0lhL7
jhSEoNousbeuR3CyRD4qw5j5+8HnyJdTB8t4vMhLSrNyz62cUTwqkdP8WekqUnPJ
RTyIVvLdR+JR9KkjII4kztk48dKnxz0TncAElurgetVl
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:55 2026 by rpki-client