Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/v7WcqpRYWHh239LPGmTnapW7Q_w.roa
File: v7WcqpRYWHh239LPGmTnapW7Q_w.roa (raw, json)
Hash identifier: xmjmImowRyBXLpG11gkpyM1tBT1YhUEBnShnhTtDYrk=
Subject key identifier: BF:B5:9C:AA:94:58:58:78:76:DF:D2:CF:1A:64:E7:6A:95:BB:43:FC
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019F5AEDD65C7B8A9F0BE4127F868C58C0C0
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/v7WcqpRYWHh239LPGmTnapW7Q_w.roa
Signing time: Mon 13 Jul 2026 10:02:44 +0000
ROA not before: Mon 13 Jul 2026 10:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203210
IP address blocks: 94.24.79.0/24 maxlen: 24
178.251.121.0/24 maxlen: 24
178.251.122.0/24 maxlen: 24
178.251.123.0/24 maxlen: 24
193.43.100.0/24 maxlen: 24
193.43.110.0/24 maxlen: 24
193.43.126.0/24 maxlen: 24
193.43.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:ed:d6:5c:7b:8a:9f:0b:e4:12:7f:86:8c:58:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jul 13 10:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfb59caa9458587876dfd2cf1a64e76a95bb43fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:08:42:d3:69:76:bc:fe:5c:d7:59:02:dd:
a8:88:99:ca:6b:15:22:87:ca:2a:c8:06:57:e6:24:
44:90:c9:bb:ff:fd:ec:cd:d8:b4:2c:0a:da:2d:c8:
d0:a8:70:ba:f8:ac:42:9e:93:7f:10:9e:91:4c:6a:
c6:c1:bf:59:2c:37:cf:0f:9f:f0:62:20:52:36:1d:
a1:c2:b8:ee:06:0e:ff:75:9f:8a:a7:42:30:53:42:
d9:3d:dd:e5:b3:68:1d:f9:d1:d1:87:e1:98:b1:4b:
a6:6c:48:03:e5:d9:75:f8:b6:ec:35:83:b6:16:58:
ff:41:96:0d:ca:ed:c4:4c:5f:3c:39:42:90:2b:55:
34:06:11:7c:76:e5:b1:22:12:1a:59:75:00:30:cb:
5d:4e:d5:15:84:32:48:39:12:ca:7c:02:bf:7b:01:
02:e9:3a:d0:10:e4:08:f7:7b:d7:be:f3:3a:11:6f:
7f:70:c4:01:08:88:83:17:e8:8f:e6:d4:3d:78:ef:
0d:c4:45:2e:07:ba:e1:9e:45:55:b9:00:40:ef:9e:
14:d5:12:d8:06:f0:04:26:dd:cf:d9:26:df:82:72:
0d:da:eb:43:dd:fa:8d:70:b4:6a:9d:e1:0f:8b:9e:
e2:25:1e:de:3d:c3:2a:99:33:4d:3f:42:35:45:60:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:9C:AA:94:58:58:78:76:DF:D2:CF:1A:64:E7:6A:95:BB:43:FC
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/v7WcqpRYWHh239LPGmTnapW7Q_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.79.0/24
178.251.121.0-178.251.123.255
193.43.100.0/24
193.43.110.0/24
193.43.126.0/24
193.43.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:ff:8d:d6:ed:02:6e:de:36:1f:df:e7:3b:46:61:d6:42:
38:f6:50:cb:70:08:a2:9b:a7:03:68:53:82:ea:e6:18:e6:3d:
07:6d:61:98:53:3f:a8:24:74:57:c3:8f:98:60:99:3b:bd:aa:
58:87:a3:1b:01:f7:34:b3:34:18:ba:1a:ac:31:be:82:f5:6c:
40:b6:da:b4:b7:d9:ec:4d:70:bf:9d:89:2a:08:d0:8f:85:17:
04:07:b7:1f:c4:b4:71:c7:26:a3:68:40:ae:91:28:f4:5b:12:
f1:f9:e5:24:51:54:2a:e3:e2:bb:c2:ae:0d:50:df:6f:eb:9b:
24:39:7b:8a:22:f2:5c:21:68:35:58:56:f6:da:08:b7:c7:c8:
21:73:4f:e6:f2:45:73:94:61:ce:b9:c9:3e:61:ca:26:fa:2e:
00:3e:f1:9d:9d:1c:9a:10:24:b3:38:e5:46:da:39:d4:28:65:
f9:f1:68:69:37:c5:fd:c3:f5:18:5f:8b:2f:9c:74:de:66:5d:
96:98:ac:fc:2a:41:73:1f:a2:56:75:b2:40:43:b8:ce:68:cc:
8b:78:da:c6:96:c5:74:30:17:49:cc:81:85:a7:37:95:a3:fa:
f2:99:7c:90:50:33:bf:4e:5e:1d:d4:7d:a5:18:e6:2d:ae:3b:
5d:38:86:2d
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ9a7dZce4qfC+QSf4aMWMDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjYwNzEzMTAwMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmI1OWNhYTk0NTg1ODc4NzZkZmQyY2YxYTY0ZTc2YTk1YmI0M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAIIQtNpdrz+XNdZAt2oiJnKaxUi
h8oqyAZX5iREkMm7//3szdi0LAraLcjQqHC6+KxCnpN/EJ6RTGrGwb9ZLDfPD5/w
YiBSNh2hwrjuBg7/dZ+Kp0IwU0LZPd3ls2gd+dHRh+GYsUumbEgD5dl1+LbsNYO2
Flj/QZYNyu3ETF88OUKQK1U0BhF8duWxIhIaWXUAMMtdTtUVhDJIORLKfAK/ewEC
6TrQEOQI93vXvvM6EW9/cMQBCIiDF+iP5tQ9eO8NxEUuB7rhnkVVuQBA754U1RLY
BvAEJt3P2SbfgnIN2utD3fqNcLRqneEPi57iJR7ePcMqmTNNP0I1RWDmRwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFL+1nKqUWFh4dt/Szxpk52qVu0P8MB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvdjdXY3FwUllXSGgyMzlMUEdtVG5hcFc3UV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAXhhPMAwD
BACy+3kDBAKy+3gDBADBK2QDBADBK24DBADBK34DBADBK4gwDQYJKoZIhvcNAQEL
BQADggEBAGy0/43W7QJu3jYf3+c7RmHWQjj2UMtwCKKbpwNoU4Lq5hjmPQdtYZhT
P6gkdFfDj5hgmTu9qliHoxsB9zSzNBi6GqwxvoL1bEC22rS32exNcL+diSoI0I+F
FwQHtx/EtHHHJqNoQK6RKPRbEvH55SRRVCrj4rvCrg1Q32/rmyQ5e4oi8lwhaDVY
VvbaCLfHyCFzT+byRXOUYc65yT5hyib6LgA+8Z2dHJoQJLM45UbaOdQoZfnxaGk3
xf3D9Rhfiy+cdN5mXZaYrPwqQXMfolZ1skBDuM5ozIt42saWxXQwF0nMgYWnN5Wj
+vKZfJBQM79OXh3UfaUY5i2uO104hi0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:35 2026 by rpki-client