Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/zLw7aMwn607x8vxmIg6VtK7HJJM.roa
File: zLw7aMwn607x8vxmIg6VtK7HJJM.roa (raw, json)
Hash identifier: euhY80+gJEGpQTsQ1MwZVM2lEY+F5+lgqAWR+9u8d90=
Subject key identifier: CC:BC:3B:68:CC:27:EB:4E:F1:F2:FC:66:22:0E:95:B4:AE:C7:24:93
Certificate issuer: /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial: 019E1BB3017CDDDE1CB2F0C1A7409C2FBED1
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/zLw7aMwn607x8vxmIg6VtK7HJJM.roa
Signing time: Tue 12 May 2026 10:19:36 +0000
ROA not before: Tue 12 May 2026 10:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214248
IP address blocks: 31.171.213.0/24 maxlen: 24
185.221.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:b3:01:7c:dd:de:1c:b2:f0:c1:a7:40:9c:2f:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
Validity
Not Before: May 12 10:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccbc3b68cc27eb4ef1f2fc66220e95b4aec72493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:97:57:d8:04:70:01:eb:c5:49:7a:5f:c1:
31:8a:0c:27:75:57:66:f5:84:5e:fa:c3:13:80:30:
cf:5d:57:58:24:01:d3:de:32:06:25:45:e2:10:28:
d2:8d:f9:e6:3b:22:e0:92:fb:35:90:55:cb:9f:a9:
23:fb:a9:70:f8:91:92:b8:3e:3d:9c:be:27:70:1b:
89:bb:f8:df:9b:1c:79:77:83:02:33:3c:0b:0a:e5:
78:85:fa:48:c5:50:66:21:ac:94:c4:3e:82:4e:7b:
59:4c:19:02:00:e3:e9:67:b6:22:67:4d:8a:19:30:
3b:45:71:f1:65:c7:51:8e:6e:a0:03:56:4f:6a:2a:
46:cc:01:f0:9a:f9:e0:4d:ec:b0:c7:fa:62:52:62:
4b:da:9e:e9:29:cd:8f:b7:79:9e:82:0f:6a:47:bf:
8e:e1:87:4d:9f:6b:3c:29:38:0b:0b:e4:40:70:75:
ad:ef:cf:cb:9d:41:eb:c2:71:4f:89:2e:f9:63:ba:
ae:75:49:c6:47:b9:2d:70:c9:0e:e3:ed:1d:ea:2b:
28:e3:ae:13:ec:4d:d1:8a:87:27:3b:d1:8c:8a:64:
0d:50:bb:0e:a4:ac:b3:a8:01:1f:d8:e9:7c:51:f8:
65:25:2d:2e:58:c9:de:05:f8:d9:2b:aa:b8:a6:c3:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BC:3B:68:CC:27:EB:4E:F1:F2:FC:66:22:0E:95:B4:AE:C7:24:93
X509v3 Authority Key Identifier:
keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/zLw7aMwn607x8vxmIg6VtK7HJJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.213.0/24
185.221.190.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5d:4f:7d:ee:25:83:0c:86:e7:1e:75:33:3a:62:1d:86:9b:
2f:46:38:09:c8:8e:ef:c2:39:9b:9e:59:38:08:21:65:f4:24:
00:d1:d8:68:0e:1c:7a:4b:83:73:31:2d:48:fb:a5:93:c7:d9:
8d:7b:53:bb:66:dc:bb:d0:ac:f1:3e:17:e7:a7:c6:63:4b:f0:
3d:e6:31:2f:1d:f6:a7:87:09:96:4c:54:97:a6:2b:58:ab:0f:
01:1d:aa:97:bd:f6:2e:be:c5:b4:2c:9c:44:63:07:3d:36:22:
c5:79:8f:46:46:64:f8:61:32:07:e9:e3:36:df:8b:42:79:cd:
ef:bd:b5:54:f5:28:8b:00:b9:d4:48:90:95:7d:8e:ac:db:f1:
47:50:e0:cc:e9:65:a5:b8:61:53:b5:6c:1d:5c:a9:a9:1b:f2:
c4:e4:f3:b3:2b:18:b8:93:3d:3b:7f:b2:a7:fa:be:52:31:75:
46:9e:f3:94:d4:3f:30:5a:bc:cc:b7:37:b0:2b:c9:0a:61:ce:
13:a1:38:f9:6b:56:e5:29:54:77:ca:86:e8:76:ce:d0:15:3b:
fd:79:fd:56:77:9d:b7:9f:dd:8b:ac:6f:18:b7:87:9e:40:19:
d2:78:fb:16:c0:9d:8a:00:c9:b8:b5:e5:34:a1:e2:83:55:fc:
ca:f2:2f:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4bswF83d4csvDBp0CcL77RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTcyY2U3ZjhjNDk0MjM1YTA4NDgyMzk2NWI5MDQ3MDRi
YzgyNDAwHhcNMjYwNTEyMTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2JjM2I2OGNjMjdlYjRlZjFmMmZjNjYyMjBlOTViNGFlYzcyNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdKXV9gEcAHrxUl6X8ExigwndVdm
9YRe+sMTgDDPXVdYJAHT3jIGJUXiECjSjfnmOyLgkvs1kFXLn6kj+6lw+JGSuD49
nL4ncBuJu/jfmxx5d4MCMzwLCuV4hfpIxVBmIayUxD6CTntZTBkCAOPpZ7YiZ02K
GTA7RXHxZcdRjm6gA1ZPaipGzAHwmvngTeywx/piUmJL2p7pKc2Pt3megg9qR7+O
4YdNn2s8KTgLC+RAcHWt78/LnUHrwnFPiS75Y7qudUnGR7ktcMkO4+0d6iso464T
7E3RiocnO9GMimQNULsOpKyzqAEf2Ol8UfhlJS0uWMneBfjZK6q4psOyswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMy8O2jMJ+tO8fL8ZiIOlbSuxySTMB8GA1UdIwQY
MBaAFFfnLOf4xJQjWghII5ZbkEcEvIJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQt
MmEwZjg3NDNjMmMyLzEvekx3N2FNd242MDd4OHZ4bUlnNlZ0SzdISkpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQtMmEwZjg3NDNjMmMy
LzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH6vVAwQA
ud2+MA0GCSqGSIb3DQEBCwUAA4IBAQAwXU997iWDDIbnHnUzOmIdhpsvRjgJyI7v
wjmbnlk4CCFl9CQA0dhoDhx6S4NzMS1I+6WTx9mNe1O7Zty70KzxPhfnp8ZjS/A9
5jEvHfanhwmWTFSXpitYqw8BHaqXvfYuvsW0LJxEYwc9NiLFeY9GRmT4YTIH6eM2
34tCec3vvbVU9SiLALnUSJCVfY6s2/FHUODM6WWluGFTtWwdXKmpG/LE5POzKxi4
kz07f7Kn+r5SMXVGnvOU1D8wWrzMtzewK8kKYc4ToTj5a1blKVR3yobods7QFTv9
ef1Wd523n92LrG8Yt4eeQBnSePsWwJ2KAMm4teU0oeKDVfzK8i97
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:37 2026 by rpki-client