Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ctWVYfgxBVVk8SvZN-n37UkHhVo.roa
File: ctWVYfgxBVVk8SvZN-n37UkHhVo.roa (raw, json)
Hash identifier: w0w627OuNLM3TEeTieLI1X0GUmajZlJvuLJrXx8vd7Y=
Subject key identifier: 72:D5:95:61:F8:31:05:55:64:F1:2B:D9:37:E9:F7:ED:49:07:85:5A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019CF5F5269A7E9B2DEBAF5EB4BBF7AD9E11
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ctWVYfgxBVVk8SvZN-n37UkHhVo.roa
Signing time: Mon 16 Mar 2026 09:23:30 +0000
ROA not before: Mon 16 Mar 2026 09:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:f5:26:9a:7e:9b:2d:eb:af:5e:b4:bb:f7:ad:9e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 16 09:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d59561f831055564f12bd937e9f7ed4907855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:2d:ca:e9:5b:d8:01:40:1e:67:87:e5:1f:
ed:17:e4:ea:a9:49:70:04:7d:8b:c9:65:22:bf:b3:
f6:a2:b1:d2:9c:25:b2:c1:dc:be:04:f9:b4:dd:7b:
57:43:00:90:fe:68:2c:bb:31:af:16:22:a1:93:3a:
6b:64:3d:e0:39:8f:d4:55:0c:cf:04:50:a2:39:10:
65:4c:8b:7a:fb:b6:6f:f0:7f:65:84:63:8e:f5:68:
29:31:10:1a:55:6e:d4:87:d9:24:c2:88:fd:14:9a:
8d:6a:96:17:72:e3:50:47:03:ec:02:ef:62:84:f5:
93:85:3f:da:6d:78:8a:b7:41:b2:5b:5d:0b:cd:62:
aa:fe:e7:6e:69:f1:a7:00:a6:bb:63:5b:81:37:03:
04:71:39:11:70:c3:52:b7:ec:91:5e:31:06:92:f7:
e2:75:41:9a:ee:64:20:e6:52:ce:97:a1:f3:73:c8:
0a:9b:c9:dc:09:c5:74:3a:6d:7b:bb:46:29:78:9c:
fb:dd:5b:9b:bb:37:4d:0d:3a:6e:9f:21:02:bc:cb:
26:ba:06:c4:61:63:9e:21:db:fc:a8:0d:cf:c9:23:
b6:03:2c:7d:72:96:8a:db:41:8c:52:ab:76:1a:bf:
94:d0:1c:82:4b:28:b9:8a:ae:cf:35:88:12:6a:80:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:95:61:F8:31:05:55:64:F1:2B:D9:37:E9:F7:ED:49:07:85:5A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ctWVYfgxBVVk8SvZN-n37UkHhVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fe:7e:fd:0a:eb:67:f1:55:da:ad:52:e9:f6:6a:eb:4d:52:
57:58:7c:c9:78:a0:69:45:d3:5c:53:28:8d:b0:7c:e6:c6:2e:
a4:c4:b6:35:54:d9:f1:b2:6b:b0:ba:54:05:be:02:a4:a2:d6:
ad:e6:b8:a6:c1:7d:b4:c3:af:01:b4:a4:4c:67:7d:d8:ac:8d:
59:e6:e5:09:80:8d:59:37:2a:f6:86:21:a0:d8:48:de:38:2f:
ff:d5:5b:25:38:28:bb:bf:7d:9e:d5:b1:3a:8c:d8:77:da:d4:
21:8f:e8:e2:01:b0:8e:3e:c0:8a:38:2d:8b:50:07:1e:8f:31:
39:8a:9b:b3:33:f0:41:4f:f2:ef:d0:da:df:f3:40:f7:6f:c4:
88:b1:e2:fa:f6:37:b6:15:47:15:d1:44:c9:2e:84:ce:ff:65:
ca:64:b5:f0:c4:c6:de:64:72:09:a0:bb:da:f9:19:db:08:07:
92:a1:0e:03:82:fc:2b:36:6f:72:2d:7d:e7:02:8c:3a:a0:26:
59:e1:97:9b:77:d2:70:16:d7:f0:1d:6e:e3:8c:22:da:a9:b3:
37:42:a2:18:02:88:83:1e:7d:73:3b:00:57:63:0d:57:19:3f:
6e:00:da:b3:0e:a4:23:1d:35:1d:cb:2e:dd:a0:e8:20:25:97:
d9:24:df:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz19Saafpst669etLv3rZ4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjYwMzE2MDkyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQ1OTU2MWY4MzEwNTU1NjRmMTJiZDkzN2U5ZjdlZDQ5MDc4NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUAtyulb2AFAHmeH5R/tF+TqqUlw
BH2LyWUiv7P2orHSnCWywdy+BPm03XtXQwCQ/mgsuzGvFiKhkzprZD3gOY/UVQzP
BFCiORBlTIt6+7Zv8H9lhGOO9WgpMRAaVW7Uh9kkwoj9FJqNapYXcuNQRwPsAu9i
hPWThT/abXiKt0GyW10LzWKq/uduafGnAKa7Y1uBNwMEcTkRcMNSt+yRXjEGkvfi
dUGa7mQg5lLOl6Hzc8gKm8ncCcV0Om17u0YpeJz73VubuzdNDTpunyECvMsmugbE
YWOeIdv8qA3PySO2Ayx9cpaK20GMUqt2Gr+U0ByCSyi5iq7PNYgSaoDF9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLVlWH4MQVVZPEr2Tfp9+1JB4VaMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvY3RXVllmZ3hCVlZrOFN2Wk4tbjM3VWtIaFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27oMA0G
CSqGSIb3DQEBCwUAA4IBAQBL/n79Cutn8VXarVLp9mrrTVJXWHzJeKBpRdNcUyiN
sHzmxi6kxLY1VNnxsmuwulQFvgKkotat5rimwX20w68BtKRMZ33YrI1Z5uUJgI1Z
Nyr2hiGg2EjeOC//1VslOCi7v32e1bE6jNh32tQhj+jiAbCOPsCKOC2LUAcejzE5
ipuzM/BBT/Lv0Nrf80D3b8SIseL69je2FUcV0UTJLoTO/2XKZLXwxMbeZHIJoLva
+RnbCAeSoQ4DgvwrNm9yLX3nAow6oCZZ4Zebd9JwFtfwHW7jjCLaqbM3QqIYAoiD
Hn1zOwBXYw1XGT9uANqzDqQjHTUdyy7doOggJZfZJN8a
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:58 2026 by rpki-client