Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/XddofGQPCZvvJARoShJNKWyGOPE.roa
File: XddofGQPCZvvJARoShJNKWyGOPE.roa (raw, json)
Hash identifier: mwOOWRufyuu3Lcd2xxoAQpzQ4w61M0La0mGMruF3D9A=
Subject key identifier: 5D:D7:68:7C:64:0F:09:9B:EF:24:04:68:4A:12:4D:29:6C:86:38:F1
Certificate issuer: /CN=0a79946872eb5438684858fc861ed2bf6ccec353
Certificate serial: 019E5F005279162D726482F272ABB02A9049
Authority key identifier: 0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/XddofGQPCZvvJARoShJNKWyGOPE.roa
Signing time: Mon 25 May 2026 11:58:37 +0000
ROA not before: Mon 25 May 2026 11:58:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199804
IP address blocks: 2001:678:1214::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:00:52:79:16:2d:72:64:82:f2:72:ab:b0:2a:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a79946872eb5438684858fc861ed2bf6ccec353
Validity
Not Before: May 25 11:58:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dd7687c640f099bef2404684a124d296c8638f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:b9:5c:12:7f:0b:40:ed:fe:d3:2a:1b:37:
e7:e2:07:d0:00:10:c2:48:45:10:0c:61:79:e5:61:
9b:44:aa:b5:be:43:81:d5:4c:eb:b8:f5:b1:f4:09:
13:e6:de:68:34:05:75:2f:18:4b:37:5d:f5:15:ba:
b6:d2:b4:15:9e:99:d1:3c:58:e1:1e:a0:3c:37:aa:
d1:7d:86:da:e6:73:4b:f9:38:a2:96:5a:c6:bd:98:
2b:e8:6c:b5:ac:6e:13:0a:34:8f:e5:91:54:1f:49:
2f:b1:c9:09:d6:e9:1f:b2:78:b9:6f:94:30:eb:fc:
f6:11:d9:08:58:bc:b3:0f:f3:c1:6a:54:3c:e3:3f:
8f:c6:65:8a:ae:cd:ec:d0:15:22:d2:78:17:e8:b5:
6b:7e:f6:7f:eb:7a:20:04:b7:e5:a0:f2:46:c3:e9:
7a:81:14:ca:92:49:4e:fe:c0:86:31:00:46:62:dc:
09:21:ab:36:e8:45:cb:29:3f:67:05:6e:b4:83:f4:
08:8d:98:66:06:19:62:8d:31:39:01:a3:2b:dd:44:
ea:71:c0:b2:54:fc:32:62:75:d9:9b:af:ec:f1:c3:
1b:12:22:3f:89:93:e8:22:39:d9:b3:43:5d:ea:c6:
ff:2f:f9:09:7d:e1:c3:a4:76:d8:73:9b:6b:02:16:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:68:7C:64:0F:09:9B:EF:24:04:68:4A:12:4D:29:6C:86:38:F1
X509v3 Authority Key Identifier:
keyid:0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/XddofGQPCZvvJARoShJNKWyGOPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1214::/48
Signature Algorithm: sha256WithRSAEncryption
91:43:05:29:40:6f:2f:7e:1f:1e:a0:84:91:c0:49:67:9d:c8:
12:80:13:74:21:33:dc:7f:cf:e9:78:44:d9:a6:9d:20:0b:bd:
f7:71:d6:9a:f1:5f:37:a6:ed:79:59:54:08:5d:dc:2a:bc:ad:
56:b5:be:4f:7e:02:73:1f:25:f5:a4:5b:d6:6d:46:f1:a3:3f:
d1:14:e8:10:7a:86:2c:62:ed:5e:84:d6:ec:ed:d0:79:56:92:
b2:72:d2:09:c1:01:d3:9a:6b:e5:b4:43:8f:6b:56:44:b1:13:
82:b8:3a:33:08:f0:8d:58:ac:07:14:b2:de:72:f1:a2:cd:16:
4f:f7:3e:71:39:c0:79:20:f3:9a:a5:c4:f3:16:73:ee:ca:f6:
f8:ea:57:dd:4c:59:86:74:9e:7d:8a:a7:b8:68:d8:bb:c9:39:
86:e0:e0:6d:c7:77:c8:af:ff:73:7d:23:62:95:ed:29:bb:32:
cf:79:63:06:fc:e9:54:fe:b6:4b:46:aa:86:e6:5e:fa:88:a3:
11:62:c4:0b:5e:38:77:ee:47:2f:a4:5c:98:7d:1d:00:94:b5:
16:bc:db:b4:fd:3a:e9:2a:c5:25:58:90:1b:f9:8b:ec:7b:b2:
5c:19:ae:d6:db:95:9f:ff:8e:a3:ed:94:85:ae:e6:25:c0:be:
22:0d:7c:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ5fAFJ5Fi1yZILycquwKpBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzk5NDY4NzJlYjU0Mzg2ODQ4NThmYzg2MWVkMmJmNmNj
ZWMzNTMwHhcNMjYwNTI1MTE1ODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGQ3Njg3YzY0MGYwOTliZWYyNDA0Njg0YTEyNGQyOTZjODYzOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+5XBJ/C0Dt/tMqGzfn4gfQABDC
SEUQDGF55WGbRKq1vkOB1UzruPWx9AkT5t5oNAV1LxhLN131Fbq20rQVnpnRPFjh
HqA8N6rRfYba5nNL+TiillrGvZgr6Gy1rG4TCjSP5ZFUH0kvsckJ1ukfsni5b5Qw
6/z2EdkIWLyzD/PBalQ84z+PxmWKrs3s0BUi0ngX6LVrfvZ/63ogBLfloPJGw+l6
gRTKkklO/sCGMQBGYtwJIas26EXLKT9nBW60g/QIjZhmBhlijTE5AaMr3UTqccCy
VPwyYnXZm6/s8cMbEiI/iZPoIjnZs0Nd6sb/L/kJfeHDpHbYc5trAhaMSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFF3XaHxkDwmb7yQEaEoSTSlshjjxMB8GA1UdIwQY
MBaAFAp5lGhy61Q4aEhY/IYe0r9szsNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25tVWFITHJWRGhvU0ZqOGhoN1N2MnpPdzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80YWU0NDQtYTk1Zi00NjIzLTk4Y2It
NTgwM2ZmNzJjOTA3LzEvWGRkb2ZHUVBDWnZ2SkFSb1NoSk5LV3lHT1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80YWU0NDQtYTk1Zi00NjIzLTk4Y2ItNTgwM2ZmNzJjOTA3
LzEvQ25tVWFITHJWRGhvU0ZqOGhoN1N2MnpPdzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBIU
MA0GCSqGSIb3DQEBCwUAA4IBAQCRQwUpQG8vfh8eoISRwElnncgSgBN0ITPcf8/p
eETZpp0gC733cdaa8V83pu15WVQIXdwqvK1Wtb5PfgJzHyX1pFvWbUbxoz/RFOgQ
eoYsYu1ehNbs7dB5VpKyctIJwQHTmmvltEOPa1ZEsROCuDozCPCNWKwHFLLecvGi
zRZP9z5xOcB5IPOapcTzFnPuyvb46lfdTFmGdJ59iqe4aNi7yTmG4OBtx3fIr/9z
fSNile0puzLPeWMG/OlU/rZLRqqG5l76iKMRYsQLXjh37kcvpFyYfR0AlLUWvNu0
/TrpKsUlWJAb+Yvse7JcGa7W25Wf/46j7ZSFruYlwL4iDXz0
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:22 2026 by rpki-client