Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/RCP333K4MJtEO3BsITmh9W8rq7w.roa
File: RCP333K4MJtEO3BsITmh9W8rq7w.roa (raw, json)
Hash identifier: il0tlrgTDYLWI+q67CvBvdEJyRCFhOmSDTdmlbLDngA=
Subject key identifier: 44:23:F7:DF:72:B8:30:9B:44:3B:70:6C:21:39:A1:F5:6F:2B:AB:BC
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A0A53C017DF162F31C59734CA857D430D3
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/RCP333K4MJtEO3BsITmh9W8rq7w.roa
Signing time: Tue 15 Sep 2026 13:22:48 +0000
ROA not before: Tue 15 Sep 2026 13:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202230
IP address blocks: 185.32.88.0/24 maxlen: 24
185.32.89.0/24 maxlen: 24
185.32.90.0/24 maxlen: 24
185.32.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:3c:01:7d:f1:62:f3:1c:59:73:4c:a8:57:d4:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Sep 15 13:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4423f7df72b8309b443b706c2139a1f56f2babbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:cc:1d:3f:9b:59:f7:52:02:a2:28:e3:ac:
09:77:bd:c0:cc:ba:8b:3e:51:d2:5a:0c:c6:b3:75:
0e:43:2e:a0:ff:42:80:77:c7:f4:d4:fc:e7:20:69:
f4:9d:b5:12:0f:b1:a6:44:62:fe:72:13:0e:c2:4c:
bf:30:bb:ee:bf:a0:91:83:4c:8e:cc:4c:ce:cf:15:
90:b9:28:88:4f:53:15:42:c2:3a:25:a6:e7:10:e9:
e7:08:c4:ae:40:32:b6:03:a1:0c:cf:80:e3:a5:90:
f4:32:b7:c1:95:c5:1c:27:1b:88:bc:fe:a8:99:9e:
e8:d1:93:59:79:a4:90:d8:68:c1:93:67:56:eb:be:
0e:82:f9:87:ca:b4:45:f5:db:92:c1:94:7f:95:93:
9b:92:f0:2a:ee:19:03:0d:df:08:8c:35:f6:69:cb:
47:39:08:c0:ea:3e:39:f1:f6:49:7d:f7:fa:4a:c9:
1e:f6:4b:04:73:5b:ec:9c:34:ab:c5:e6:12:2a:36:
b1:4d:22:8a:75:74:3e:52:3e:e7:e6:59:be:44:2c:
27:3c:ad:30:5c:83:b5:ab:bb:cd:7f:fb:da:ba:e1:
55:1d:3b:0e:e2:97:51:53:81:5a:a8:1f:59:0a:c1:
d6:cb:f4:ac:9d:78:4e:95:83:c6:0d:09:6f:fb:9c:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:23:F7:DF:72:B8:30:9B:44:3B:70:6C:21:39:A1:F5:6F:2B:AB:BC
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/RCP333K4MJtEO3BsITmh9W8rq7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b7:ba:24:c6:31:c2:43:54:d0:c3:4e:e0:ad:bf:4a:d9:26:
8c:9c:30:96:c8:c3:b6:e3:20:7c:e5:24:a1:d3:fa:8c:91:99:
97:a0:6c:81:5e:06:a7:16:7f:65:77:38:34:75:e2:e5:7c:6d:
c5:f8:4b:f9:53:df:15:fb:31:7b:f9:ef:1d:a4:11:f4:29:c1:
b0:31:b6:f2:d1:0e:fb:8e:53:51:f1:41:40:84:5f:a3:8d:70:
68:a8:3c:2a:c5:59:55:f3:e0:05:29:6f:92:25:ca:49:55:d6:
bf:0e:c8:35:2b:13:0b:49:7d:e3:d5:18:a3:43:f2:64:95:2b:
16:11:f0:13:9e:f3:50:a0:c0:2e:b7:2e:85:aa:0b:4f:16:d4:
f2:ce:c2:3b:03:97:73:00:f4:cc:04:43:8d:a5:68:16:d2:8b:
9d:7d:3f:1f:81:ad:75:3d:e0:87:5a:9f:8a:70:52:f4:1a:b7:
61:98:59:95:4a:24:fe:73:80:fe:af:fa:c0:e3:f9:8f:b5:14:
a6:cf:d4:f5:9e:9d:97:f3:94:b5:b6:b6:d6:94:37:fc:51:83:
8d:e2:af:60:59:c3:c0:ab:1c:fe:60:fa:d0:58:65:66:82:29:
66:4b:b5:70:bd:68:61:fa:53:90:f8:05:b2:4d:fa:60:d4:0d:
53:e4:69:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaClPAF98WLzHFlzTKhX1DDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDg5ZjY2MTU5Zjc3YmI1OGQyYmJjN2U0ZmMxZGZkOWRk
Y2IwMzQwHhcNMjYwOTE1MTMyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDIzZjdkZjcyYjgzMDliNDQzYjcwNmMyMTM5YTFmNTZmMmJhYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshjMHT+bWfdSAqIo46wJd73AzLqL
PlHSWgzGs3UOQy6g/0KAd8f01PznIGn0nbUSD7GmRGL+chMOwky/MLvuv6CRg0yO
zEzOzxWQuSiIT1MVQsI6JabnEOnnCMSuQDK2A6EMz4DjpZD0MrfBlcUcJxuIvP6o
mZ7o0ZNZeaSQ2GjBk2dW674OgvmHyrRF9duSwZR/lZObkvAq7hkDDd8IjDX2actH
OQjA6j458fZJfff6Sske9ksEc1vsnDSrxeYSKjaxTSKKdXQ+Uj7n5lm+RCwnPK0w
XIO1q7vNf/vauuFVHTsO4pdRU4FaqB9ZCsHWy/SsnXhOlYPGDQlv+5wNyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQj999yuDCbRDtwbCE5ofVvK6u8MB8GA1UdIwQY
MBaAFE5In2YVn3e7WNK7x+T8Hf2d3LA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQt
YWJkNjFhYTgyNDI2LzEvUkNQMzMzSzRNSnRFTzNCc0lUbWg5VzhycTd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQtYWJkNjFhYTgyNDI2
LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSBYMA0G
CSqGSIb3DQEBCwUAA4IBAQBet7okxjHCQ1TQw07grb9K2SaMnDCWyMO24yB85SSh
0/qMkZmXoGyBXganFn9ldzg0deLlfG3F+Ev5U98V+zF7+e8dpBH0KcGwMbby0Q77
jlNR8UFAhF+jjXBoqDwqxVlV8+AFKW+SJcpJVda/Dsg1KxMLSX3j1RijQ/JklSsW
EfATnvNQoMAuty6FqgtPFtTyzsI7A5dzAPTMBEONpWgW0oudfT8fga11PeCHWp+K
cFL0GrdhmFmVSiT+c4D+r/rA4/mPtRSmz9T1np2X85S1trbWlDf8UYON4q9gWcPA
qxz+YPrQWGVmgilmS7VwvWhh+lOQ+AWyTfpg1A1T5Gl1
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:36:22 2026 by rpki-client