Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/atw7N8cmGaWOYVduk-OBLDCcVKE.roa
File: atw7N8cmGaWOYVduk-OBLDCcVKE.roa (raw, json)
Hash identifier: MwnNiFLGFDC8Dt40xdm47IwpGSiPw8kVjA87/loNFaE=
Subject key identifier: 6A:DC:3B:37:C7:26:19:A5:8E:61:57:6E:93:E3:81:2C:30:9C:54:A1
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A1BF35121E84306E028EF56613FDBEE051
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/atw7N8cmGaWOYVduk-OBLDCcVKE.roa
Signing time: Mon 09 Nov 2026 07:28:08 +0000
ROA not before: Mon 09 Nov 2026 07:28:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 14.102.8.0/24 maxlen: 24
14.102.9.0/24 maxlen: 24
14.102.11.0/24 maxlen: 24
91.200.254.0/24 maxlen: 24
110.172.191.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:35:12:1e:84:30:6e:02:8e:f5:66:13:fd:be:e0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Nov 9 07:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6adc3b37c72619a58e61576e93e3812c309c54a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:6e:b0:7e:f7:ca:e8:dc:05:08:7d:d2:28:
74:41:fd:10:c5:20:50:d0:b6:b0:ee:24:d4:3c:48:
76:14:7a:2b:78:12:24:06:28:ed:79:6b:63:18:2c:
39:03:e1:7f:d0:96:37:cf:c3:4b:0c:a1:99:aa:ce:
8d:8f:89:61:93:28:4e:f1:0f:2f:79:0f:73:71:b0:
75:03:13:5e:b4:25:18:d6:34:f0:7b:e3:cb:14:43:
11:a7:97:24:1d:8f:bb:fe:0f:77:32:c6:9f:4f:23:
1a:7e:af:e0:b7:97:d1:c7:96:81:7d:73:06:65:e9:
a4:7f:f5:88:fe:f0:65:31:af:83:13:4d:97:6a:e5:
5b:3c:a6:89:4a:db:eb:04:e5:94:f9:6d:ab:39:ae:
56:cb:b8:4c:3a:1d:38:1e:dd:5d:7b:0e:a7:ad:e8:
ae:90:8e:a5:0a:8d:68:d0:20:3f:23:ef:3c:b1:29:
10:a0:34:d8:c1:8e:cc:3a:70:d3:c0:0e:3b:88:c9:
b7:b4:55:a6:05:48:96:41:05:28:37:bb:7b:27:24:
d7:f1:2c:63:b6:3b:08:0b:98:72:c9:8f:89:a1:c7:
5c:c4:25:4b:c7:64:db:3a:46:56:dc:5d:e7:51:e3:
8e:76:f1:74:95:ce:b7:c5:59:0a:a7:59:58:75:fb:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DC:3B:37:C7:26:19:A5:8E:61:57:6E:93:E3:81:2C:30:9C:54:A1
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/atw7N8cmGaWOYVduk-OBLDCcVKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.8.0/23
14.102.11.0/24
91.200.254.0/24
110.172.191.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3a:47:24:66:53:0b:95:3a:cd:97:9b:6f:90:fc:a7:1d:3c:
f5:14:ff:fe:aa:74:32:54:10:30:50:0b:41:97:c7:42:8d:b6:
ad:50:ea:71:d8:46:08:ec:29:d5:65:c2:e5:a3:61:61:58:71:
00:00:69:82:d8:60:70:90:f3:82:0b:dd:6e:8b:74:0b:a1:00:
31:9c:b6:62:4d:6d:53:a5:f1:58:5b:dd:8f:48:9c:20:14:52:
ba:0f:6b:b4:f4:e7:e5:69:1b:44:2f:e1:3d:e6:5a:5e:bf:4a:
3a:a9:45:ed:21:e4:43:04:36:44:25:24:6d:cf:5c:f9:f8:f3:
fe:37:24:c4:7f:b4:43:9b:58:be:9f:2d:40:c0:c9:a5:d6:26:
35:ea:da:47:06:4d:85:64:e3:f2:f1:cd:bd:99:aa:e4:b9:9b:
41:8e:d2:e6:5d:14:66:bd:7a:e7:ac:72:04:98:16:66:6b:d7:
e1:ce:9c:2f:5f:00:91:f5:97:67:34:10:97:c7:81:38:69:7b:
99:cb:3f:c0:4c:36:71:6c:19:3a:d1:b3:27:3c:ad:47:fb:9c:
03:15:30:00:1b:b3:26:21:57:8a:91:f2:10:ff:f8:2e:c2:a1:
1d:97:65:77:fd:ea:fc:3e:e4:49:40:ed:8d:17:4c:0a:70:df:
9e:45:cd:17
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaG/NRIehDBuAo71ZhP9vuBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx
ZWUyZDMwHhcNMjYxMTA5MDcyODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWRjM2IzN2M3MjYxOWE1OGU2MTU3NmU5M2UzODEyYzMwOWM1NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NNusH73yujcBQh90ih0Qf0QxSBQ
0Law7iTUPEh2FHoreBIkBijteWtjGCw5A+F/0JY3z8NLDKGZqs6Nj4lhkyhO8Q8v
eQ9zcbB1AxNetCUY1jTwe+PLFEMRp5ckHY+7/g93MsafTyMafq/gt5fRx5aBfXMG
Zemkf/WI/vBlMa+DE02XauVbPKaJStvrBOWU+W2rOa5Wy7hMOh04Ht1dew6nreiu
kI6lCo1o0CA/I+88sSkQoDTYwY7MOnDTwA47iMm3tFWmBUiWQQUoN7t7JyTX8Sxj
tjsIC5hyyY+JocdcxCVLx2TbOkZW3F3nUeOOdvF0lc63xVkKp1lYdft+XwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGrcOzfHJhmljmFXbpPjgSwwnFShMB8GA1UdIwQY
MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt
NTFmNWZmODFjMTE3LzEvYXR3N044Y21HYVdPWVZkdWstT0JMRENjVktFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3
LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBDmYIAwQA
DmYLAwQAW8j+AwQAbqy/AwQAckX1MA0GCSqGSIb3DQEBCwUAA4IBAQBEOkckZlML
lTrNl5tvkPynHTz1FP/+qnQyVBAwUAtBl8dCjbatUOpx2EYI7CnVZcLlo2FhWHEA
AGmC2GBwkPOCC91ui3QLoQAxnLZiTW1TpfFYW92PSJwgFFK6D2u09OflaRtEL+E9
5lpev0o6qUXtIeRDBDZEJSRtz1z5+PP+NyTEf7RDm1i+ny1AwMml1iY16tpHBk2F
ZOPy8c29markuZtBjtLmXRRmvXrnrHIEmBZma9fhzpwvXwCR9ZdnNBCXx4E4aXuZ
yz/ATDZxbBk60bMnPK1H+5wDFTAAG7MmIVeKkfIQ//guwqEdl2V3/er8PuRJQO2N
F0wKcN+eRc0X
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:54 2026 by rpki-client