Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/xGlaSWAs_nGok3RsMj09mCdZA-c.roa
File: xGlaSWAs_nGok3RsMj09mCdZA-c.roa (raw, json)
Hash identifier: PlUTSJXO25CuBLHkT82BadK7IIiVT9bby4rlA1xhZlY=
Subject key identifier: C4:69:5A:49:60:2C:FE:71:A8:93:74:6C:32:3D:3D:98:27:59:03:E7
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A1C59545A78AF2E5B01DD2856535E2A9EA
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/xGlaSWAs_nGok3RsMj09mCdZA-c.roa
Signing time: Tue 10 Nov 2026 13:10:56 +0000
ROA not before: Tue 10 Nov 2026 13:10:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 178.251.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:95:45:a7:8a:f2:e5:b0:1d:d2:85:65:35:e2:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 10 13:10:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4695a49602cfe71a893746c323d3d98275903e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:7a:9a:43:10:cf:2b:db:ed:a3:b2:fa:d5:
eb:5c:9f:ad:22:c0:3a:da:73:33:00:c7:f1:aa:6a:
13:00:31:b5:c2:99:ea:24:12:a4:8b:b8:28:75:59:
e1:84:3d:c2:f4:b4:65:13:a5:bd:8d:00:9f:fc:f7:
38:07:dd:cc:bd:03:df:e5:8e:67:b1:52:70:a2:e4:
1c:b7:fb:ed:2f:46:00:f9:25:02:bb:f7:02:ca:95:
25:42:c4:ed:dd:a2:11:f5:66:88:56:7c:7e:33:69:
c8:bc:bf:a6:2d:42:16:b5:2a:32:54:51:fa:26:74:
d0:4b:80:69:08:00:5c:02:f7:0f:78:f0:98:07:88:
9a:de:d9:d3:ca:a1:9f:b4:82:28:e1:8e:f8:1b:0a:
58:a9:16:f2:5b:c1:ff:6b:d4:01:67:3a:e4:e2:59:
7e:f0:bc:21:3a:5b:b2:c4:f9:3c:3d:1e:1a:ba:85:
aa:a9:78:54:7e:0c:75:14:2e:f2:74:68:a4:8e:38:
06:f9:28:fc:a7:c2:1d:ba:cd:88:08:0e:9e:46:aa:
fe:3d:53:b9:48:16:2b:70:4d:74:78:31:b2:31:a9:
c8:06:db:44:fe:9b:4f:6f:11:6f:ed:d3:97:3e:56:
c6:2e:87:e6:12:e0:5b:eb:16:98:b6:1b:d8:0a:c1:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:5A:49:60:2C:FE:71:A8:93:74:6C:32:3D:3D:98:27:59:03:E7
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/xGlaSWAs_nGok3RsMj09mCdZA-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.204.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:89:74:07:d7:f5:ac:3f:56:65:73:23:39:76:d6:72:e9:41:
b2:6c:28:29:19:f5:58:6a:52:0b:06:dd:fb:ff:57:04:13:e7:
a6:75:1e:19:00:68:1b:40:63:46:11:3b:8d:a2:55:3e:da:da:
48:76:c0:9d:24:5d:f8:12:bd:9d:a5:0a:db:e3:68:82:db:07:
17:4b:ca:5f:8a:a5:73:54:0e:fa:1a:50:35:98:01:96:7b:5b:
d1:3b:70:11:6e:3b:c1:e3:8b:24:e0:41:c7:3e:45:89:3b:9e:
5a:cf:a7:8f:54:e7:74:2a:19:68:71:b4:c4:eb:b3:17:1a:1a:
19:f6:dd:80:6a:b3:e9:84:6f:df:b5:dd:da:c9:cf:f3:70:d4:
c5:e0:1f:d5:50:c8:e8:fc:81:d4:2b:9c:e2:77:b0:27:1f:2b:
3d:a8:b9:b1:23:04:1a:d4:4a:39:df:e5:19:43:7d:19:40:1f:
16:8e:66:47:08:ba:80:68:c4:f6:c2:c5:06:ad:9f:9b:26:cf:
7d:49:3d:15:ea:a8:67:33:9c:45:57:87:1b:77:0d:07:5d:f3:
e5:cc:e1:47:d5:86:fa:3e:a0:e6:b5:63:8c:e2:57:a2:a2:2a:
46:bf:8e:e8:8d:a7:27:04:2d:73:ad:23:ed:a5:49:f0:38:a4:
49:e5:14:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHFlUWnivLlsB3ShWU14qnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw
YjIzZDgwHhcNMjYxMTEwMTMxMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDY5NWE0OTYwMmNmZTcxYTg5Mzc0NmMzMjNkM2Q5ODI3NTkwM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cp6mkMQzyvb7aOy+tXrXJ+tIsA6
2nMzAMfxqmoTADG1wpnqJBKki7godVnhhD3C9LRlE6W9jQCf/Pc4B93MvQPf5Y5n
sVJwouQct/vtL0YA+SUCu/cCypUlQsTt3aIR9WaIVnx+M2nIvL+mLUIWtSoyVFH6
JnTQS4BpCABcAvcPePCYB4ia3tnTyqGftIIo4Y74GwpYqRbyW8H/a9QBZzrk4ll+
8LwhOluyxPk8PR4auoWqqXhUfgx1FC7ydGikjjgG+Sj8p8Idus2ICA6eRqr+PVO5
SBYrcE10eDGyManIBttE/ptPbxFv7dOXPlbGLofmEuBb6xaYthvYCsFapwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRpWklgLP5xqJN0bDI9PZgnWQPnMB8GA1UdIwQY
MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt
NWViNzVjMjMxOGFhLzEveEdsYVNXQXNfbkdvazNSc01qMDltQ2RaQS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh
LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvvMMA0G
CSqGSIb3DQEBCwUAA4IBAQDXiXQH1/WsP1ZlcyM5dtZy6UGybCgpGfVYalILBt37
/1cEE+emdR4ZAGgbQGNGETuNolU+2tpIdsCdJF34Er2dpQrb42iC2wcXS8pfiqVz
VA76GlA1mAGWe1vRO3ARbjvB44sk4EHHPkWJO55az6ePVOd0KhlocbTE67MXGhoZ
9t2AarPphG/ftd3ayc/zcNTF4B/VUMjo/IHUK5zid7AnHys9qLmxIwQa1Eo53+UZ
Q30ZQB8WjmZHCLqAaMT2wsUGrZ+bJs99ST0V6qhnM5xFV4cbdw0HXfPlzOFH1Yb6
PqDmtWOM4leioipGv47ojacnBC1zrSPtpUnwOKRJ5RRG
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:49 2026 by rpki-client