Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/x1WBx6DAwtjbFr75tDoDEWSnT5s.roa
File: x1WBx6DAwtjbFr75tDoDEWSnT5s.roa (raw, json)
Hash identifier: MeOf4yFZ9y5wV7QlTUlr6SSOMpyYg18VxsuPXiZIJFU=
Subject key identifier: C7:55:81:C7:A0:C0:C2:D8:DB:16:BE:F9:B4:3A:03:11:64:A7:4F:9B
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 01A1BB651E7C6E78BB09DAB59BCEF236693F
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/x1WBx6DAwtjbFr75tDoDEWSnT5s.roa
Signing time: Sun 08 Nov 2026 13:42:08 +0000
ROA not before: Sun 08 Nov 2026 13:42:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213290
IP address blocks: 91.234.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:65:1e:7c:6e:78:bb:09:da:b5:9b:ce:f2:36:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Nov 8 13:42:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c75581c7a0c0c2d8db16bef9b43a031164a74f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:98:f7:fc:98:17:a1:f0:50:f7:19:99:5c:
c8:ea:92:d2:e7:58:5a:1b:0f:71:a3:a8:8f:55:65:
3d:36:a6:3f:6e:d9:e2:a6:08:7a:47:e4:63:a3:ee:
0c:d0:04:c8:92:67:09:c4:59:b4:0b:d8:30:af:52:
ab:0b:b2:a9:09:8e:60:9f:1f:f0:9c:80:71:22:b5:
77:c2:03:91:f0:c8:da:15:25:09:83:26:94:ca:d7:
ed:66:dd:ad:30:ff:cb:65:3c:aa:cd:88:b4:c1:48:
cb:57:30:4a:0e:23:83:88:02:2b:63:3b:30:6b:f3:
86:e4:79:83:a6:98:0c:78:bd:b3:47:7d:0b:b2:14:
60:c4:df:80:30:8f:2d:31:1c:3f:7e:62:ff:ad:4c:
50:9f:42:78:62:dd:9a:65:c5:15:f1:67:b9:de:34:
06:94:c9:3e:11:35:bc:a6:5e:87:e2:6c:8b:53:52:
df:03:a0:61:0f:76:16:45:0c:08:42:b5:ad:fd:30:
4d:81:19:b7:5e:60:88:44:b1:50:d6:d8:d3:f3:f2:
ed:59:b7:24:37:26:1a:d7:2c:21:0c:a7:5f:ae:73:
6e:cb:37:d5:8d:b5:56:f6:21:88:62:8a:8c:26:f2:
99:63:a0:4e:98:6f:1e:ed:c1:a1:94:79:95:d8:45:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:81:C7:A0:C0:C2:D8:DB:16:BE:F9:B4:3A:03:11:64:A7:4F:9B
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/x1WBx6DAwtjbFr75tDoDEWSnT5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.88.0/24
Signature Algorithm: sha256WithRSAEncryption
59:84:df:23:8d:44:83:46:14:5c:e6:c8:31:28:0c:8c:36:2f:
3a:95:64:3c:07:a6:36:27:63:07:67:f2:4e:f8:c0:ca:f0:0b:
57:0b:0e:f5:d6:c9:eb:81:8f:aa:d4:f2:2b:fb:9b:ab:16:65:
8d:e6:2f:27:e4:9e:75:ee:6a:dd:0c:9b:8f:01:96:b9:9a:13:
e6:03:65:14:6f:9a:40:83:f5:59:7a:eb:ab:e5:20:e1:40:b4:
d8:c2:ca:22:8c:9b:71:07:35:9c:97:4c:54:80:25:7f:28:9d:
18:fa:26:cb:78:f9:ef:0a:c4:5a:93:fc:dd:f3:f9:4a:08:e2:
7b:0d:aa:83:ba:da:75:aa:dc:96:b8:df:77:5f:b1:0c:dd:a9:
5e:10:4c:d1:c7:77:61:e2:01:ef:6b:82:4b:4a:a3:d1:06:21:
49:51:2e:b5:f3:82:ab:55:cc:93:b7:9b:47:f0:bc:cd:f6:7d:
c0:32:8f:46:0c:c1:a1:69:c9:f2:d1:64:1e:11:88:b9:37:e9:
00:6e:b1:d0:5a:bb:29:3c:5b:e3:6f:e9:b7:ad:82:1d:ac:41:
be:92:bc:4b:60:d5:5e:5c:3f:cf:fa:11:96:c8:9b:23:70:4d:
2a:64:d0:7e:32:7f:3d:ff:f1:91:5d:f1:8d:a1:67:ba:77:90:
77:5c:fb:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaG7ZR58bni7Cdq1m87yNmk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGQ5YmEyZTM5Njg0MjNiZWZjNWVlZDA1NzE5YjMwMDA1
N2Q3Y2IwHhcNMjYxMTA4MTM0MjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzU1ODFjN2EwYzBjMmQ4ZGIxNmJlZjliNDNhMDMxMTY0YTc0ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWqY9/yYF6HwUPcZmVzI6pLS51ha
Gw9xo6iPVWU9NqY/btnipgh6R+Rjo+4M0ATIkmcJxFm0C9gwr1KrC7KpCY5gnx/w
nIBxIrV3wgOR8MjaFSUJgyaUytftZt2tMP/LZTyqzYi0wUjLVzBKDiODiAIrYzsw
a/OG5HmDppgMeL2zR30LshRgxN+AMI8tMRw/fmL/rUxQn0J4Yt2aZcUV8We53jQG
lMk+ETW8pl6H4myLU1LfA6BhD3YWRQwIQrWt/TBNgRm3XmCIRLFQ1tjT8/LtWbck
NyYa1ywhDKdfrnNuyzfVjbVW9iGIYoqMJvKZY6BOmG8e7cGhlHmV2EUNYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdVgcegwMLY2xa++bQ6AxFkp0+bMB8GA1UdIwQY
MBaAFGeNm6LjloQjvvxe7QVxmzAAV9fLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kMTViN2YtNzA4Zi00MTU1LThkMzEt
YzgwYTcyM2QzNGY3LzEveDFXQng2REF3dGpiRnI3NXREb0RFV1NuVDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kMTViN2YtNzA4Zi00MTU1LThkMzEtYzgwYTcyM2QzNGY3
LzEvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+pYMA0G
CSqGSIb3DQEBCwUAA4IBAQBZhN8jjUSDRhRc5sgxKAyMNi86lWQ8B6Y2J2MHZ/JO
+MDK8AtXCw711snrgY+q1PIr+5urFmWN5i8n5J517mrdDJuPAZa5mhPmA2UUb5pA
g/VZeuur5SDhQLTYwsoijJtxBzWcl0xUgCV/KJ0Y+ibLePnvCsRak/zd8/lKCOJ7
DaqDutp1qtyWuN93X7EM3aleEEzRx3dh4gHva4JLSqPRBiFJUS6184KrVcyTt5tH
8LzN9n3AMo9GDMGhacny0WQeEYi5N+kAbrHQWrspPFvjb+m3rYIdrEG+krxLYNVe
XD/P+hGWyJsjcE0qZNB+Mn89//GRXfGNoWe6d5B3XPuD
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:38:35 2026 by rpki-client