Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/xF1DzDjk2x1kIAUmYjScihsLh94.roa
File: xF1DzDjk2x1kIAUmYjScihsLh94.roa (raw, json)
Hash identifier: c33mejelY728d79n3OH435ljL0H9k5ztSPf/lo5be4s=
Subject key identifier: C4:5D:43:CC:38:E4:DB:1D:64:20:05:26:62:34:9C:8A:1B:0B:87:DE
Certificate issuer: /CN=f2890aaa623f89132520caa49edd780b8596daa0
Certificate serial: 01A0C86796D3BE78687A415A568B81ECD92F
Authority key identifier: F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/xF1DzDjk2x1kIAUmYjScihsLh94.roa
Signing time: Tue 22 Sep 2026 09:17:07 +0000
ROA not before: Tue 22 Sep 2026 09:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 158.223.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:67:96:d3:be:78:68:7a:41:5a:56:8b:81:ec:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2890aaa623f89132520caa49edd780b8596daa0
Validity
Not Before: Sep 22 09:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c45d43cc38e4db1d6420052662349c8a1b0b87de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:02:f5:d5:18:00:bb:52:6e:2c:46:84:1b:
b2:57:15:9f:3b:8a:7f:67:de:3c:f9:1a:f1:7b:d9:
f3:e5:f0:f9:d5:b4:08:ad:24:79:cf:ae:ae:54:18:
f9:2f:2f:fe:55:40:78:1d:bf:e6:37:8a:f8:a7:e6:
1a:00:9e:a2:87:b2:cf:1c:b0:d6:32:e3:f3:57:f0:
03:56:07:14:bb:e2:45:fd:ca:d6:d2:c9:f2:27:0c:
a0:98:b6:a2:7d:2b:75:b9:d4:04:fe:5e:d4:05:13:
4e:ff:fb:37:ad:46:d8:3c:70:e7:a7:28:95:3e:8b:
2c:5d:b7:a7:7f:14:7c:5f:a4:57:0f:61:e1:c4:5b:
0f:f8:04:12:d0:97:13:33:fd:84:ea:54:15:c3:63:
00:ba:01:16:41:39:a9:e7:2d:5b:fa:eb:e5:b6:ce:
66:79:27:18:ff:b9:f8:67:a1:d6:9c:4c:49:8f:98:
1b:8c:c0:d8:a7:d8:6f:66:e7:61:a3:68:56:06:3d:
18:64:9c:96:a8:ca:f5:39:b6:bb:d0:ca:b3:b1:5e:
e7:f5:cf:04:8c:42:d9:94:24:d6:90:7b:82:da:c7:
9a:81:dd:f6:dd:18:e5:c9:6f:d6:16:40:dd:3a:c5:
2d:4e:f0:06:e9:44:26:bc:fc:b1:07:b8:b9:82:40:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:43:CC:38:E4:DB:1D:64:20:05:26:62:34:9C:8A:1B:0B:87:DE
X509v3 Authority Key Identifier:
keyid:F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/xF1DzDjk2x1kIAUmYjScihsLh94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:57:1a:70:ef:13:61:42:34:24:96:ff:5b:07:ca:a5:c4:a2:
12:ff:68:6d:db:c7:38:96:8c:18:b8:d3:76:03:6b:e1:fc:36:
d0:3b:9d:71:e9:2c:f8:53:5e:09:e0:e6:8a:3b:6c:96:3f:4c:
19:63:89:1b:ea:40:aa:41:ec:42:05:c5:9c:75:dd:e5:94:c9:
33:cb:a9:2e:fe:0a:cd:43:1a:e6:fb:ba:ed:09:1d:10:ce:3b:
82:e2:74:45:f7:9b:59:14:ac:34:b0:76:b3:e6:c2:78:b5:94:
0f:d6:8e:80:c4:d3:cb:16:cb:45:99:95:1f:d3:6e:63:2f:33:
b3:24:47:b5:95:60:ec:0c:ab:82:17:17:b6:43:86:bc:e4:6c:
4b:d1:47:11:25:4d:98:d7:ac:4c:1f:0e:6a:a5:81:b3:84:8a:
03:d8:3e:db:29:9c:15:8f:cd:80:4a:a1:e2:bb:98:0f:13:5f:
78:24:a1:29:db:05:22:cd:9c:36:22:36:a1:50:31:35:3b:2d:
df:54:a6:e4:96:d4:e8:ef:d2:78:2f:7e:82:a6:57:58:14:44:
31:f1:07:30:38:47:f1:0d:79:a6:17:e2:9b:67:3c:28:3d:a6:
04:d5:96:db:96:08:5d:47:2d:53:c2:fc:d4:55:8c:a8:92:0b:
94:48:2c:27
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAaDIZ5bTvnhoekFaVouB7NkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODkwYWFhNjIzZjg5MTMyNTIwY2FhNDllZGQ3ODBiODU5
NmRhYTAwHhcNMjYwOTIyMDkxNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDVkNDNjYzM4ZTRkYjFkNjQyMDA1MjY2MjM0OWM4YTFiMGI4N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEAC9dUYALtSbixGhBuyVxWfO4p/
Z948+Rrxe9nz5fD51bQIrSR5z66uVBj5Ly/+VUB4Hb/mN4r4p+YaAJ6ih7LPHLDW
MuPzV/ADVgcUu+JF/crW0snyJwygmLaifSt1udQE/l7UBRNO//s3rUbYPHDnpyiV
PossXbenfxR8X6RXD2HhxFsP+AQS0JcTM/2E6lQVw2MAugEWQTmp5y1b+uvlts5m
eScY/7n4Z6HWnExJj5gbjMDYp9hvZudho2hWBj0YZJyWqMr1Oba70MqzsV7n9c8E
jELZlCTWkHuC2seagd323RjlyW/WFkDdOsUtTvAG6UQmvPyxB7i5gkARMwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMRdQ8w45NsdZCAFJmI0nIobC4feMB8GA1UdIwQY
MBaAFPKJCqpiP4kTJSDKpJ7deAuFltqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2EzYzYtMmQ0Yi00ZjAwLWE5OTQt
YTc5MTcxN2RlNGFhLzEveEYxRHpEamsyeDFrSUFVbVlqU2NpaHNMaDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mN2EzYzYtMmQ0Yi00ZjAwLWE5OTQtYTc5MTcxN2RlNGFh
LzEvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnt8wDQYJ
KoZIhvcNAQELBQADggEBAIhXGnDvE2FCNCSW/1sHyqXEohL/aG3bxziWjBi403YD
a+H8NtA7nXHpLPhTXgng5oo7bJY/TBljiRvqQKpB7EIFxZx13eWUyTPLqS7+Cs1D
Gub7uu0JHRDOO4LidEX3m1kUrDSwdrPmwni1lA/WjoDE08sWy0WZlR/TbmMvM7Mk
R7WVYOwMq4IXF7ZDhrzkbEvRRxElTZjXrEwfDmqlgbOEigPYPtspnBWPzYBKoeK7
mA8TX3gkoSnbBSLNnDYiNqFQMTU7Ld9UpuSW1Ojv0ngvfoKmV1gURDHxBzA4R/EN
eaYX4ptnPCg9pgTVltuWCF1HLVPC/NRVjKiSC5RILCc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:02:46 2026 by rpki-client