Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/cD27THfEVTBDRPJVIC8aL6HTgOI.roa
File: cD27THfEVTBDRPJVIC8aL6HTgOI.roa (raw, json)
Hash identifier: 8QsiPwfbxymOqRYij9JK6ZmrZBwKkuMlfJXJtb/XbMM=
Subject key identifier: 70:3D:BB:4C:77:C4:55:30:43:44:F2:55:20:2F:1A:2F:A1:D3:80:E2
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019DE37A30E68C23F7C9EDA1989E9565CC96
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/cD27THfEVTBDRPJVIC8aL6HTgOI.roa
Signing time: Fri 01 May 2026 12:18:49 +0000
ROA not before: Fri 01 May 2026 12:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274000
IP address blocks: 217.179.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:7a:30:e6:8c:23:f7:c9:ed:a1:98:9e:95:65:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: May 1 12:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=703dbb4c77c455304344f255202f1a2fa1d380e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:3e:39:e5:4c:ba:5f:9e:43:a1:02:cf:16:
05:e8:ca:bf:51:c2:15:d3:00:fa:40:95:18:36:03:
14:10:83:1e:66:78:98:74:2e:4d:5b:aa:ef:c1:d7:
7d:df:7c:1c:41:16:cf:ef:0a:5b:d5:f1:cc:22:a0:
9f:9a:a0:24:52:9b:88:9e:05:df:d8:62:70:b3:f8:
6d:30:a5:91:c5:16:c5:7f:b3:9b:70:3a:ae:d2:0f:
28:1e:bf:0f:71:f8:f5:b8:d6:60:a2:8a:de:99:cd:
a2:31:d1:45:b3:b0:3d:d2:b1:dd:ed:d4:b3:f7:95:
81:5e:53:be:2c:ff:93:1d:67:19:86:43:9c:9d:b7:
3b:66:cb:c8:e3:56:4d:eb:43:a2:3f:a4:a2:19:dd:
6d:88:2a:ec:6c:e3:ac:85:8f:73:40:f3:f6:d0:53:
39:c8:49:91:bc:18:fb:0a:13:bf:64:a6:a5:09:bf:
a7:5b:09:43:e7:2c:a6:0e:0f:49:24:37:98:22:e2:
9d:15:ad:32:06:22:12:3a:be:0b:7f:7b:f2:85:1b:
c4:0d:67:dd:67:dc:c6:dc:1f:72:d9:ea:6d:3a:d2:
49:22:cf:c7:95:e9:e6:6e:a9:c2:6a:ce:17:2a:50:
5f:b1:b3:51:3c:01:00:e3:6d:35:a1:88:d3:37:0d:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:BB:4C:77:C4:55:30:43:44:F2:55:20:2F:1A:2F:A1:D3:80:E2
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/cD27THfEVTBDRPJVIC8aL6HTgOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cc:03:b7:b8:77:ab:19:f7:c8:17:36:59:2e:99:ca:67:07:
f1:e6:e1:d9:92:14:40:2b:28:6e:25:fc:46:f4:c3:d8:bb:14:
c3:5e:9d:8f:e3:ff:50:49:94:80:57:5c:50:36:a0:5c:1d:81:
19:6d:e0:f3:3e:47:39:8a:e5:04:b7:ba:4c:8b:83:af:a8:ca:
3c:37:50:56:56:37:76:da:54:6b:55:89:ac:92:3d:15:8e:2e:
d7:4f:cb:a2:24:65:34:5e:0d:ba:f0:42:b9:db:0d:98:29:e6:
38:f5:63:98:e6:c8:92:b4:44:c5:8a:fb:4d:70:2e:06:ae:98:
15:e1:99:3f:97:70:ef:93:ff:10:7f:b8:e8:02:7f:3b:e0:ad:
1e:8d:d2:c8:74:68:ca:56:9b:11:4a:e3:bf:07:eb:00:31:25:
2d:d4:75:51:a2:b3:dc:94:69:10:89:c4:c7:24:e3:6b:a3:63:
fb:78:8d:3a:7f:87:90:48:78:22:29:46:e2:16:ce:c9:e1:48:
22:7b:44:79:59:38:2d:04:26:b1:31:85:f4:19:14:27:0f:75:
fa:e3:00:a3:f0:e8:56:08:68:bc:72:5a:99:1e:0e:40:fd:77:
5d:9d:8d:fc:d2:e8:cf:b5:cc:e5:23:38:e2:fb:02:8c:c2:1e:
e3:54:44:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3jejDmjCP3ye2hmJ6VZcyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjYwNTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDNkYmI0Yzc3YzQ1NTMwNDM0NGYyNTUyMDJmMWEyZmExZDM4MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy0+OeVMul+eQ6ECzxYF6Mq/UcIV
0wD6QJUYNgMUEIMeZniYdC5NW6rvwdd933wcQRbP7wpb1fHMIqCfmqAkUpuIngXf
2GJws/htMKWRxRbFf7ObcDqu0g8oHr8Pcfj1uNZgooremc2iMdFFs7A90rHd7dSz
95WBXlO+LP+THWcZhkOcnbc7ZsvI41ZN60OiP6SiGd1tiCrsbOOshY9zQPP20FM5
yEmRvBj7ChO/ZKalCb+nWwlD5yymDg9JJDeYIuKdFa0yBiISOr4Lf3vyhRvEDWfd
Z9zG3B9y2eptOtJJIs/HlenmbqnCas4XKlBfsbNRPAEA4201oYjTNw2sXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHA9u0x3xFUwQ0TyVSAvGi+h04DiMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvY0QyN1RIZkVWVEJEUlBKVklDOGFMNkhUZ09JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2bPnMA0G
CSqGSIb3DQEBCwUAA4IBAQCNzAO3uHerGffIFzZZLpnKZwfx5uHZkhRAKyhuJfxG
9MPYuxTDXp2P4/9QSZSAV1xQNqBcHYEZbeDzPkc5iuUEt7pMi4OvqMo8N1BWVjd2
2lRrVYmskj0Vji7XT8uiJGU0Xg268EK52w2YKeY49WOY5siStETFivtNcC4GrpgV
4Zk/l3Dvk/8Qf7joAn874K0ejdLIdGjKVpsRSuO/B+sAMSUt1HVRorPclGkQicTH
JONro2P7eI06f4eQSHgiKUbiFs7J4Ugie0R5WTgtBCaxMYX0GRQnD3X64wCj8OhW
CGi8clqZHg5A/XddnY380ujPtczlIzji+wKMwh7jVETc
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:54 2026 by rpki-client