Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/0XJW3RE3Oa8-Wlb8ywLH_ZnR1Mk.roa
File: 0XJW3RE3Oa8-Wlb8ywLH_ZnR1Mk.roa (raw, json)
Hash identifier: 6YXJfIWnaLnUsSWqplSKpLD1TbvfW1YxIw/54EfmOfc=
Subject key identifier: D1:72:56:DD:11:37:39:AF:3E:5A:56:FC:CB:02:C7:FD:99:D1:D4:C9
Certificate issuer: /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial: 01A1B06063497B5CE464793F42FB66655855
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/0XJW3RE3Oa8-Wlb8ywLH_ZnR1Mk.roa
Signing time: Fri 06 Nov 2026 10:21:09 +0000
ROA not before: Fri 06 Nov 2026 10:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 66.111.96.0/23 maxlen: 24
66.111.100.0/22 maxlen: 24
66.111.104.0/22 maxlen: 24
66.111.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:60:63:49:7b:5c:e4:64:79:3f:42:fb:66:65:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Validity
Not Before: Nov 6 10:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d17256dd113739af3e5a56fccb02c7fd99d1d4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:31:72:d0:07:c0:0e:d4:46:ca:dd:ad:17:
66:0c:ff:bf:5e:f8:6f:91:72:9f:41:f0:5d:51:97:
ae:9f:7c:63:cb:89:50:1f:5c:d8:5e:35:48:e1:54:
4a:a2:3d:3e:08:fb:77:a7:9f:70:1b:48:51:43:9c:
b9:b4:90:3c:7e:4d:b5:18:a2:7e:93:96:08:67:df:
f7:e9:da:34:4b:50:94:a6:ab:51:cc:ca:2d:db:b3:
14:a9:1b:b9:c8:79:4b:fc:41:8b:12:69:83:1d:23:
46:be:40:c0:99:8f:db:da:fa:10:65:38:c6:f4:5e:
f1:fa:03:3c:ec:51:fc:ae:e5:61:81:d8:a2:29:08:
25:6c:0f:67:96:37:96:61:17:3d:d7:69:d5:3d:9b:
ef:bd:ef:b2:b6:cb:a6:97:2e:b7:45:01:17:26:b5:
c4:2b:a6:ae:a4:f5:ed:a3:3f:b7:23:af:7a:66:6a:
07:db:3c:fb:10:8b:60:c8:83:da:c4:10:ec:74:a6:
4c:d1:40:dc:27:13:b3:5c:25:53:f7:76:86:12:ec:
92:9f:87:d5:90:1d:9e:67:3d:71:36:c1:44:d7:8c:
d8:cf:99:e2:c2:a4:33:ec:7f:50:f1:24:9c:b5:14:
fc:7e:ca:66:aa:59:0c:4d:67:3a:8f:38:c5:4f:65:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:56:DD:11:37:39:AF:3E:5A:56:FC:CB:02:C7:FD:99:D1:D4:C9
X509v3 Authority Key Identifier:
keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/0XJW3RE3Oa8-Wlb8ywLH_ZnR1Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.111.96.0/23
66.111.100.0-66.111.109.255
Signature Algorithm: sha256WithRSAEncryption
37:21:e2:8b:af:b6:90:95:0c:12:14:ed:67:47:dd:2b:0f:45:
da:e2:a8:6a:f1:0e:c2:24:88:1e:77:6a:ed:c7:ac:be:36:ce:
53:cf:05:fa:21:7e:53:18:97:be:b3:fd:02:8c:04:4a:95:cc:
9a:c0:c4:c2:c6:38:9f:cb:ed:a0:bf:86:04:4d:6c:9e:6e:77:
59:b4:48:dd:1b:b9:f3:a1:b2:4f:17:09:d8:dd:cc:f5:da:f3:
eb:3e:ef:01:fe:51:46:45:ed:32:9a:37:80:b4:26:45:fe:4d:
3c:d1:92:cb:48:8b:4d:a8:f6:80:21:21:e7:15:7c:e9:96:73:
84:16:5b:b5:00:87:75:57:31:d0:5e:c9:75:73:e7:57:da:69:
c5:13:2d:20:7e:b7:f0:2b:22:89:d2:db:25:48:1f:6d:23:8c:
34:1b:dd:de:45:3e:91:65:6c:7b:3b:9e:bb:3c:a0:66:00:19:
cb:41:87:33:ce:b1:04:0d:51:73:35:5f:2f:87:ad:fc:9f:74:
e1:a2:a1:b4:b5:c2:49:e4:af:f4:2b:45:6e:2a:1e:47:be:00:
45:fc:c7:43:f3:3e:13:9d:bf:50:81:dd:43:7d:f0:c5:46:de:
f9:89:17:31:70:0e:dd:0f:dc:95:da:09:58:ee:6f:9c:d7:a2:
ac:80:6c:81
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGwYGNJe1zkZHk/QvtmZVhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTg5ZjNhYTBmNmMyMTU0NDQwMDc2YjQ2NTFlMDk0MGIy
NGQzYjMwHhcNMjYxMTA2MTAyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTcyNTZkZDExMzczOWFmM2U1YTU2ZmNjYjAyYzdmZDk5ZDFkNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wxctAHwA7URsrdrRdmDP+/Xvhv
kXKfQfBdUZeun3xjy4lQH1zYXjVI4VRKoj0+CPt3p59wG0hRQ5y5tJA8fk21GKJ+
k5YIZ9/36do0S1CUpqtRzMot27MUqRu5yHlL/EGLEmmDHSNGvkDAmY/b2voQZTjG
9F7x+gM87FH8ruVhgdiiKQglbA9nljeWYRc912nVPZvvve+ytsumly63RQEXJrXE
K6aupPXtoz+3I696ZmoH2zz7EItgyIPaxBDsdKZM0UDcJxOzXCVT93aGEuySn4fV
kB2eZz1xNsFE14zYz5niwqQz7H9Q8SSctRT8fspmqlkMTWc6jzjFT2XL/QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNFyVt0RNzmvPlpW/MsCx/2Z0dTJMB8GA1UdIwQY
MBaAFEVYnzqg9sIVREAHa0ZR4JQLJNOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjIt
ZTI0NGY2ZmUwYmVjLzEvMFhKVzNSRTNPYTgtV2xiOHl3TEhfWm5SMU1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjItZTI0NGY2ZmUwYmVj
LzEvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBQm9gMAwD
BAJCb2QDBAFCb2wwDQYJKoZIhvcNAQELBQADggEBADch4ouvtpCVDBIU7WdH3SsP
RdriqGrxDsIkiB53au3HrL42zlPPBfohflMYl76z/QKMBEqVzJrAxMLGOJ/L7aC/
hgRNbJ5ud1m0SN0bufOhsk8XCdjdzPXa8+s+7wH+UUZF7TKaN4C0JkX+TTzRkstI
i02o9oAhIecVfOmWc4QWW7UAh3VXMdBeyXVz51faacUTLSB+t/ArIonS2yVIH20j
jDQb3d5FPpFlbHs7nrs8oGYAGctBhzPOsQQNUXM1Xy+HrfyfdOGiobS1wknkr/Qr
RW4qHke+AEX8x0PzPhOdv1CB3UN98MVG3vmJFzFwDt0P3JXaCVjub5zXoqyAbIE=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:42 2026 by rpki-client