Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/xpGtv_mG4cms2mw3QC-BVsSP4fA.roa
File: xpGtv_mG4cms2mw3QC-BVsSP4fA.roa (raw, json)
Hash identifier: O9hyeZFmfTE2yjuecg1PiQ0pgntJV6NChJjiCd1hgUA=
Subject key identifier: C6:91:AD:BF:F9:86:E1:C9:AC:DA:6C:37:40:2F:81:56:C4:8F:E1:F0
Certificate issuer: /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial: 01A1B06062A438E86D33AD2037E33F0433BE
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/xpGtv_mG4cms2mw3QC-BVsSP4fA.roa
Signing time: Fri 06 Nov 2026 10:21:09 +0000
ROA not before: Fri 06 Nov 2026 10:21:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 148996
IP address blocks: 66.111.96.0/23 maxlen: 24
66.111.100.0/22 maxlen: 24
66.111.104.0/22 maxlen: 24
66.111.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:60:62:a4:38:e8:6d:33:ad:20:37:e3:3f:04:33:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Validity
Not Before: Nov 6 10:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c691adbff986e1c9acda6c37402f8156c48fe1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:18:45:c7:9b:e1:75:7c:2a:1a:92:05:b9:
cb:ca:f6:af:6f:5f:92:b9:6d:d7:ab:ac:ba:55:09:
00:27:21:34:95:b0:e3:65:99:ef:98:ec:ee:88:62:
4c:d8:24:80:38:e8:21:4a:91:61:c4:6b:97:25:a2:
8d:da:13:fc:58:11:75:b2:a0:e5:78:43:79:3a:b2:
0f:cc:e5:6a:3b:a2:66:0c:91:21:0b:ac:70:76:c3:
55:ef:c0:ba:05:b1:84:88:f7:e3:ac:70:90:85:50:
4e:3d:9a:3b:dc:a7:31:22:8f:ed:59:6f:5f:cc:01:
8c:26:ae:17:30:6a:bf:52:b5:64:a7:1e:d5:6f:f9:
fe:17:16:fd:41:ff:8d:a5:f0:22:38:37:cb:68:11:
db:38:8a:c1:75:2e:8c:f6:39:b0:23:ca:69:be:59:
84:2d:1f:d8:7e:c5:95:32:f1:06:55:5c:09:95:56:
d6:8d:b6:97:f4:3b:bc:da:57:2f:aa:1a:b8:77:a1:
09:42:fd:4d:71:9d:ae:b2:34:f2:76:5a:a8:a9:ab:
29:74:f2:ff:1d:89:65:e0:2b:9c:24:7d:5c:17:c1:
26:1c:3f:60:1b:1e:13:4b:f0:29:bd:98:02:73:b1:
5d:a8:2b:ee:fc:a8:61:2b:22:9e:35:c3:6c:bc:4b:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:AD:BF:F9:86:E1:C9:AC:DA:6C:37:40:2F:81:56:C4:8F:E1:F0
X509v3 Authority Key Identifier:
keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/xpGtv_mG4cms2mw3QC-BVsSP4fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.111.96.0/23
66.111.100.0-66.111.109.255
Signature Algorithm: sha256WithRSAEncryption
7a:ed:e4:e9:f7:49:66:13:89:d8:e1:b5:12:61:e6:ed:59:b9:
d8:99:78:35:4d:1a:94:96:e6:a4:67:5a:ee:4a:9a:15:04:60:
eb:ec:32:1f:fe:3e:8a:2b:47:95:42:3b:4e:28:36:aa:4e:ee:
ae:89:1e:a5:6e:6f:da:3e:07:86:40:8f:d9:31:31:3d:b3:f7:
03:03:01:f7:99:87:c9:9c:6b:d7:f1:5c:7e:29:97:5c:63:62:
b2:f9:03:e2:97:4f:f1:25:84:8e:6c:79:9a:b3:1b:57:f7:22:
59:b2:9b:57:bd:54:23:b9:95:60:c4:e1:56:ec:46:4d:2b:4e:
af:09:e2:17:12:82:dd:75:f0:98:b6:f0:00:1e:32:3f:75:a2:
7c:d4:29:55:cf:cb:e8:6a:f9:c1:d1:ed:e0:26:78:a3:f7:85:
86:60:ef:2d:a0:a4:c7:14:4c:74:8f:d8:31:ad:c2:97:12:bf:
25:cf:97:cd:e7:2d:aa:09:09:c5:a3:45:88:a1:12:48:ae:99:
2c:b4:e1:27:e7:c9:92:5e:5c:97:16:21:1d:27:bb:15:cb:b4:
45:1d:20:56:e0:41:b0:e2:39:a5:2c:fc:8b:6c:91:76:1a:05:
80:90:3b:b7:74:15:8d:b7:2d:cb:9b:7b:fe:8f:d1:d5:6f:1c:
8a:15:8f:c7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGwYGKkOOhtM60gN+M/BDO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTg5ZjNhYTBmNmMyMTU0NDQwMDc2YjQ2NTFlMDk0MGIy
NGQzYjMwHhcNMjYxMTA2MTAyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjkxYWRiZmY5ODZlMWM5YWNkYTZjMzc0MDJmODE1NmM0OGZlMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjoYRceb4XV8KhqSBbnLyvavb1+S
uW3Xq6y6VQkAJyE0lbDjZZnvmOzuiGJM2CSAOOghSpFhxGuXJaKN2hP8WBF1sqDl
eEN5OrIPzOVqO6JmDJEhC6xwdsNV78C6BbGEiPfjrHCQhVBOPZo73KcxIo/tWW9f
zAGMJq4XMGq/UrVkpx7Vb/n+Fxb9Qf+NpfAiODfLaBHbOIrBdS6M9jmwI8ppvlmE
LR/YfsWVMvEGVVwJlVbWjbaX9Du82lcvqhq4d6EJQv1NcZ2usjTydlqoqaspdPL/
HYll4CucJH1cF8EmHD9gGx4TS/ApvZgCc7FdqCvu/KhhKyKeNcNsvEvFgwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMaRrb/5huHJrNpsN0AvgVbEj+HwMB8GA1UdIwQY
MBaAFEVYnzqg9sIVREAHa0ZR4JQLJNOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjIt
ZTI0NGY2ZmUwYmVjLzEveHBHdHZfbUc0Y21zMm13M1FDLUJWc1NQNGZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjItZTI0NGY2ZmUwYmVj
LzEvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBQm9gMAwD
BAJCb2QDBAFCb2wwDQYJKoZIhvcNAQELBQADggEBAHrt5On3SWYTidjhtRJh5u1Z
udiZeDVNGpSW5qRnWu5KmhUEYOvsMh/+PoorR5VCO04oNqpO7q6JHqVub9o+B4ZA
j9kxMT2z9wMDAfeZh8mca9fxXH4pl1xjYrL5A+KXT/ElhI5seZqzG1f3Ilmym1e9
VCO5lWDE4VbsRk0rTq8J4hcSgt118Ji28AAeMj91onzUKVXPy+hq+cHR7eAmeKP3
hYZg7y2gpMcUTHSP2DGtwpcSvyXPl83nLaoJCcWjRYihEkiumSy04SfnyZJeXJcW
IR0nuxXLtEUdIFbgQbDiOaUs/ItskXYaBYCQO7d0FY23Lcube/6P0dVvHIoVj8c=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:49:04 2026 by rpki-client