Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/whybmoJ3UH-tZcQj28IxhxnuNWU.roa
File: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (raw, json)
Hash identifier: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=
Subject key identifier: C2:1C:9B:9A:82:77:50:7F:AD:65:C4:23:DB:C2:31:87:19:EE:35:65
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 019F46A50DD41F2FC52C8441FE6C4867ED62
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/whybmoJ3UH-tZcQj28IxhxnuNWU.roa
Signing time: Thu 09 Jul 2026 11:30:49 +0000
ROA not before: Thu 09 Jul 2026 11:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210820
IP address blocks: 193.134.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:a5:0d:d4:1f:2f:c5:2c:84:41:fe:6c:48:67:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Jul 9 11:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21c9b9a8277507fad65c423dbc2318719ee3565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:0f:c3:15:73:45:b6:da:e8:2c:c7:95:c2:
8b:8c:3c:5c:c0:5f:11:53:60:9f:ab:84:6e:b8:7f:
61:9c:3e:53:e9:d7:3a:35:01:fd:20:89:83:67:8d:
65:4a:42:2a:37:b5:cc:82:00:aa:ea:3c:88:64:56:
66:02:f4:22:1a:38:e6:2e:42:14:72:08:30:ad:8b:
9b:48:f3:c9:66:35:50:e6:33:0a:2c:93:63:1b:02:
57:77:23:1a:3d:a5:5e:f0:84:c9:df:c9:70:b7:8c:
b7:b4:23:83:72:0d:c8:61:76:d2:d0:52:dc:7f:5b:
6f:74:ba:1c:8b:af:35:6e:b2:46:5c:a5:ac:42:3f:
ac:24:7c:8a:13:60:29:28:2f:5a:cc:ef:0f:92:1d:
be:aa:cd:2b:a9:31:f5:ec:9f:82:70:07:34:3b:89:
25:bd:c0:54:76:42:a2:b6:3c:f6:5e:65:7c:0b:c4:
2f:83:b3:7f:64:96:71:1d:fe:ff:b8:d4:8b:32:77:
45:35:90:38:7f:25:f0:c0:9a:4e:b6:b9:28:18:df:
ca:5b:7a:bb:47:66:9c:c1:ea:dc:ca:cd:1f:0a:ed:
c0:69:f8:7d:28:11:7d:c2:64:66:b0:82:7c:b2:8a:
01:dc:fb:64:ec:d3:20:1a:e6:57:3c:96:24:e1:cf:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:9B:9A:82:77:50:7F:AD:65:C4:23:DB:C2:31:87:19:EE:35:65
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/whybmoJ3UH-tZcQj28IxhxnuNWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c9:2e:1d:82:6c:9c:a0:67:89:25:ef:fb:c1:01:71:28:5c:
b8:d7:f2:d4:0b:c4:61:34:0b:c7:49:93:02:43:f5:34:e2:80:
d5:21:2e:b6:d0:b8:79:8b:46:47:44:2e:2d:6d:a8:ff:64:c0:
d7:0f:0b:c9:7a:f2:a7:60:09:5b:a3:dc:43:bc:bf:98:52:f1:
e8:4e:04:23:4e:bf:88:64:98:1b:09:4e:05:79:4f:25:08:f5:
74:3f:21:29:e6:6e:b1:5b:d2:e8:9d:35:09:b9:c0:8e:64:37:
71:5d:90:3a:aa:20:9c:72:e4:44:f2:74:6f:5d:19:12:4e:cb:
ff:76:03:1b:a3:09:a8:f7:47:c7:bc:4b:58:f1:5c:50:21:ae:
8e:b7:4a:b9:ca:6e:3c:8b:a1:9a:d4:a3:99:a3:42:d8:d8:8d:
06:95:39:71:99:59:b0:b1:89:8e:ba:07:13:0b:a2:af:e9:b4:
c0:25:fc:61:9a:a7:37:d7:75:3d:3a:33:b3:38:54:66:5b:b5:
86:fc:1e:9b:c0:7d:20:42:c2:ad:3b:a5:85:55:19:53:e9:c8:
82:aa:01:b8:b8:be:e5:d1:68:b7:c4:05:93:c1:ee:3b:0c:99:
5e:44:6d:22:f5:c2:16:a4:26:21:90:15:b9:a6:6c:6c:fd:ef:
d9:b1:f2:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9GpQ3UHy/FLIRB/mxIZ+1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2IwMDg5OGQ5YTk0NDVjNmNlZTYzN2EzNThmZTMyZmRk
ODU3MjEwHhcNMjYwNzA5MTEzMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjFjOWI5YTgyNzc1MDdmYWQ2NWM0MjNkYmMyMzE4NzE5ZWUzNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAgPwxVzRbba6CzHlcKLjDxcwF8R
U2Cfq4RuuH9hnD5T6dc6NQH9IImDZ41lSkIqN7XMggCq6jyIZFZmAvQiGjjmLkIU
cggwrYubSPPJZjVQ5jMKLJNjGwJXdyMaPaVe8ITJ38lwt4y3tCODcg3IYXbS0FLc
f1tvdLoci681brJGXKWsQj+sJHyKE2ApKC9azO8Pkh2+qs0rqTH17J+CcAc0O4kl
vcBUdkKitjz2XmV8C8Qvg7N/ZJZxHf7/uNSLMndFNZA4fyXwwJpOtrkoGN/KW3q7
R2acwercys0fCu3Aafh9KBF9wmRmsIJ8sooB3Ptk7NMgGuZXPJYk4c9qkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIcm5qCd1B/rWXEI9vCMYcZ7jVlMB8GA1UdIwQY
MBaAFF3LAImNmpRFxs7mN6NY/jL92FchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEt
YTA0OTI1OTc1NzU0LzEvd2h5Ym1vSjNVSC10WmNRajI4SXhoeG51TldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEtYTA0OTI1OTc1NzU0
LzEvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYZlMA0G
CSqGSIb3DQEBCwUAA4IBAQAtyS4dgmycoGeJJe/7wQFxKFy41/LUC8RhNAvHSZMC
Q/U04oDVIS620Lh5i0ZHRC4tbaj/ZMDXDwvJevKnYAlbo9xDvL+YUvHoTgQjTr+I
ZJgbCU4FeU8lCPV0PyEp5m6xW9LonTUJucCOZDdxXZA6qiCccuRE8nRvXRkSTsv/
dgMbowmo90fHvEtY8VxQIa6Ot0q5ym48i6Ga1KOZo0LY2I0GlTlxmVmwsYmOugcT
C6Kv6bTAJfxhmqc313U9OjOzOFRmW7WG/B6bwH0gQsKtO6WFVRlT6ciCqgG4uL7l
0Wi3xAWTwe47DJleRG0i9cIWpCYhkBW5pmxs/e/ZsfKc
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:07 2026 by rpki-client