Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ciLuqnEuItzFHWYbIkyfd01WeZ8.roa
File: ciLuqnEuItzFHWYbIkyfd01WeZ8.roa (raw, json)
Hash identifier: 3aEdUFGPFOlNMSwVck7e8tWq5KQzb6Ndkep9cRL6xFM=
Subject key identifier: 72:22:EE:AA:71:2E:22:DC:C5:1D:66:1B:22:4C:9F:77:4D:56:79:9F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019D777BB0C78713B9EA3C1E43D49C4A79E4
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ciLuqnEuItzFHWYbIkyfd01WeZ8.roa
Signing time: Fri 10 Apr 2026 13:01:28 +0000
ROA not before: Fri 10 Apr 2026 13:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199166
IP address blocks: 2a03:5840:154::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:7b:b0:c7:87:13:b9:ea:3c:1e:43:d4:9c:4a:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Apr 10 13:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7222eeaa712e22dcc51d661b224c9f774d56799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:c0:5d:77:d6:c7:1a:1f:a5:7e:56:9f:b0:
25:27:b2:73:75:17:0d:ed:6d:ad:4b:5e:c1:e6:5d:
18:cc:05:3f:65:7c:9d:81:38:fa:9b:cd:67:03:13:
53:9f:c4:f8:c7:42:4a:e4:0f:cc:f9:73:96:ce:4c:
52:c4:b4:36:00:a4:d1:86:a4:0c:7a:48:aa:08:21:
e1:1f:3a:e3:fa:bf:37:97:49:f0:45:3c:ab:62:49:
03:e3:b3:d6:1d:33:8e:e9:55:23:ad:8b:16:42:4e:
1b:1c:79:90:56:8f:51:8e:a1:16:b1:3f:ef:00:b9:
39:0a:60:10:f7:4d:99:ae:3d:45:36:26:91:7a:4c:
5c:55:c3:19:b1:88:31:a3:72:dc:d4:22:77:eb:5e:
3b:58:65:9d:6e:58:0c:d0:f8:0b:b6:fe:82:bd:a7:
b8:0a:91:98:b0:16:22:3b:de:fa:32:7b:1c:1f:41:
ae:d7:d8:19:5e:5b:ae:15:d5:c0:af:4b:bc:c2:c7:
f8:c9:88:d9:c0:e1:8c:e6:37:22:bb:3a:69:c4:76:
2b:ab:01:b6:31:25:36:a6:16:26:0e:99:71:37:20:
cc:3a:9c:73:65:ed:f6:dd:27:84:ec:a2:e8:72:82:
7e:18:c8:fd:7a:a0:6c:e3:52:c1:04:56:4b:cf:7b:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:EE:AA:71:2E:22:DC:C5:1D:66:1B:22:4C:9F:77:4D:56:79:9F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ciLuqnEuItzFHWYbIkyfd01WeZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:154::/48
Signature Algorithm: sha256WithRSAEncryption
3b:93:e5:89:0f:37:a2:d5:1c:0a:ca:6c:e3:3b:c3:49:68:b8:
21:1b:93:03:8d:a0:07:cb:2e:fd:87:1f:1c:5b:b1:ed:1c:a7:
96:3a:f6:31:41:03:05:7c:b7:dc:03:6e:dd:96:14:84:a6:ca:
6f:2e:b7:48:69:29:b3:da:6d:29:1d:71:90:fa:31:b1:7e:a3:
ba:17:72:32:ed:63:9c:9a:f3:1a:10:80:03:54:24:fd:f5:61:
ee:ab:b2:57:a6:2d:2a:0c:19:a3:49:ba:66:00:b5:fd:c0:96:
07:39:c3:02:6a:99:f9:a8:47:d7:5b:c3:67:14:30:8f:8a:ec:
dc:63:a8:b2:b8:11:a9:1c:41:e9:88:82:b3:6c:9b:96:5e:85:
e9:49:36:b9:55:ed:8b:89:bc:45:a7:93:5b:47:a4:79:bf:12:
af:96:df:53:57:19:fd:e4:92:33:e1:ce:56:26:be:9d:35:24:
02:ae:01:a0:f6:f6:fc:03:b0:2b:d4:64:1d:a3:85:1b:b6:76:
23:f1:5c:7d:33:79:09:a4:74:b4:9a:40:b2:2f:26:8d:7c:80:
d3:0a:c1:fa:05:20:e7:6a:26:34:af:3b:78:d5:f8:20:c2:e5:
9b:29:d2:1f:d9:01:13:34:dc:e8:a2:d4:58:cb:28:3c:2b:af:
4f:bc:77:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ13e7DHhxO56jweQ9ScSnnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwNDEwMTMwMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjIyZWVhYTcxMmUyMmRjYzUxZDY2MWIyMjRjOWY3NzRkNTY3OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5/AXXfWxxofpX5Wn7AlJ7JzdRcN
7W2tS17B5l0YzAU/ZXydgTj6m81nAxNTn8T4x0JK5A/M+XOWzkxSxLQ2AKTRhqQM
ekiqCCHhHzrj+r83l0nwRTyrYkkD47PWHTOO6VUjrYsWQk4bHHmQVo9RjqEWsT/v
ALk5CmAQ902Zrj1FNiaRekxcVcMZsYgxo3Lc1CJ36147WGWdblgM0PgLtv6Cvae4
CpGYsBYiO976MnscH0Gu19gZXluuFdXAr0u8wsf4yYjZwOGM5jciuzppxHYrqwG2
MSU2phYmDplxNyDMOpxzZe323SeE7KLocoJ+GMj9eqBs41LBBFZLz3vAmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHIi7qpxLiLcxR1mGyJMn3dNVnmfMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvY2lMdXFuRXVJdHpGSFdZYklreWZkMDFXZVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAFU
MA0GCSqGSIb3DQEBCwUAA4IBAQA7k+WJDzei1RwKymzjO8NJaLghG5MDjaAHyy79
hx8cW7HtHKeWOvYxQQMFfLfcA27dlhSEpspvLrdIaSmz2m0pHXGQ+jGxfqO6F3Iy
7WOcmvMaEIADVCT99WHuq7JXpi0qDBmjSbpmALX9wJYHOcMCapn5qEfXW8NnFDCP
iuzcY6iyuBGpHEHpiIKzbJuWXoXpSTa5Ve2LibxFp5NbR6R5vxKvlt9TVxn95JIz
4c5WJr6dNSQCrgGg9vb8A7Ar1GQdo4UbtnYj8Vx9M3kJpHS0mkCyLyaNfIDTCsH6
BSDnaiY0rzt41fggwuWbKdIf2QETNNzootRYyyg8K69PvHe3
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:57 2026 by rpki-client