Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cFl5ywq_13udVfRgQTEhw9bpSjU.roa
File: cFl5ywq_13udVfRgQTEhw9bpSjU.roa (raw, json)
Hash identifier: TsFLhPPc4CKImjOhB5y40oTij5TztHWmIPHSHN3U630=
Subject key identifier: 70:59:79:CB:0A:BF:D7:7B:9D:55:F4:60:41:31:21:C3:D6:E9:4A:35
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F8E95435312CC53DA635C4723956A1693
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cFl5ywq_13udVfRgQTEhw9bpSjU.roa
Signing time: Thu 23 Jul 2026 10:46:14 +0000
ROA not before: Thu 23 Jul 2026 10:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219146
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:95:43:53:12:cc:53:da:63:5c:47:23:95:6a:16:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 23 10:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=705979cb0abfd77b9d55f460413121c3d6e94a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:bc:d3:f1:d8:ed:b4:31:6b:07:01:40:ad:
54:9a:3f:51:f7:05:49:bc:6f:2f:ea:43:1c:39:57:
1e:6e:27:86:69:82:bb:88:60:14:03:df:04:b2:bf:
cf:c6:b5:45:58:b1:04:ba:17:b6:18:4f:a4:99:fb:
e1:2e:64:79:25:6c:08:05:47:41:1c:4f:35:42:9d:
f7:51:88:f3:7e:f4:07:2d:b8:9d:b0:59:d0:b2:44:
c0:5b:5a:f3:4a:0c:26:0f:64:62:7c:65:02:62:9d:
a8:80:fb:29:bc:c7:5a:fb:1b:f9:ab:6e:c8:1a:7d:
3b:45:c9:6f:e8:9d:b1:f3:14:46:ca:15:c1:08:2a:
c7:bc:42:05:7f:56:43:34:e9:1e:69:75:ef:9c:26:
4f:02:62:ec:52:e1:64:88:ad:28:51:57:cf:29:97:
b1:e2:04:61:81:9c:03:64:d6:8f:44:fe:64:e7:bb:
08:f3:6e:64:ef:69:a1:6d:e7:f9:c6:e9:97:fc:97:
58:45:56:78:86:0d:0d:81:1a:76:cf:83:74:ab:5c:
72:32:6c:54:e6:b4:26:87:14:f8:7e:08:42:ae:1d:
e4:7b:22:34:ca:30:d5:bf:91:d4:98:f1:1c:34:65:
e7:a1:d8:ae:fe:55:cf:71:09:ca:d2:f4:d6:1e:61:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:79:CB:0A:BF:D7:7B:9D:55:F4:60:41:31:21:C3:D6:E9:4A:35
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/cFl5ywq_13udVfRgQTEhw9bpSjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
07:34:54:60:33:e4:a0:ef:6d:d0:5a:07:12:af:5f:9a:08:30:
48:43:89:4c:6e:2b:c0:65:cb:18:b6:f9:8a:4e:20:db:ad:90:
30:0c:9c:32:4c:d6:d5:79:86:e3:e2:a3:f2:4d:30:2e:39:96:
39:9b:7a:06:9e:90:4f:9d:ce:66:52:0f:9a:99:b4:95:ac:e6:
7c:95:e8:ab:23:46:65:a3:a9:ee:48:b8:d8:99:6f:ce:2e:1f:
5c:6b:f6:a4:e0:55:82:33:e1:c1:d9:81:ae:b0:cd:60:82:fa:
26:12:60:19:e5:2c:c6:a6:61:de:ba:87:fd:a4:6e:bd:90:22:
09:63:9c:9f:79:5a:4a:ab:f2:59:98:c5:d6:2c:29:d7:67:24:
6b:75:02:01:db:9f:5f:c0:7c:2f:4a:cb:40:85:f1:5e:83:87:
09:30:31:72:8a:bc:b4:47:5a:6c:16:f1:60:57:6f:0a:3b:7f:
31:87:23:52:bb:2a:b4:d2:ca:c9:23:0e:0a:27:e4:26:6f:a3:
b5:76:cb:35:74:f8:ab:e7:19:a8:38:74:c1:f8:f9:38:4c:91:
ed:49:e8:ea:17:ee:33:3b:43:5f:d9:47:21:d0:af:dc:24:c2:
2d:7a:59:7c:dd:f8:6f:81:6c:b3:12:1e:cf:10:0d:71:ee:3d:
08:a7:d1:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+OlUNTEsxT2mNcRyOVahaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwNzIzMTA0NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDU5NzljYjBhYmZkNzdiOWQ1NWY0NjA0MTMxMjFjM2Q2ZTk0YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB+80/HY7bQxawcBQK1Umj9R9wVJ
vG8v6kMcOVcebieGaYK7iGAUA98Esr/PxrVFWLEEuhe2GE+kmfvhLmR5JWwIBUdB
HE81Qp33UYjzfvQHLbidsFnQskTAW1rzSgwmD2RifGUCYp2ogPspvMda+xv5q27I
Gn07Rclv6J2x8xRGyhXBCCrHvEIFf1ZDNOkeaXXvnCZPAmLsUuFkiK0oUVfPKZex
4gRhgZwDZNaPRP5k57sI825k72mhbef5xumX/JdYRVZ4hg0NgRp2z4N0q1xyMmxU
5rQmhxT4fghCrh3keyI0yjDVv5HUmPEcNGXnodiu/lXPcQnK0vTWHmFPRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBZecsKv9d7nVX0YEExIcPW6Uo1MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvY0ZsNXl3cV8xM3VkVmZSZ1FURWh3OWJwU2pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTlMA0G
CSqGSIb3DQEBCwUAA4IBAQAHNFRgM+Sg723QWgcSr1+aCDBIQ4lMbivAZcsYtvmK
TiDbrZAwDJwyTNbVeYbj4qPyTTAuOZY5m3oGnpBPnc5mUg+ambSVrOZ8leirI0Zl
o6nuSLjYmW/OLh9ca/ak4FWCM+HB2YGusM1ggvomEmAZ5SzGpmHeuof9pG69kCIJ
Y5yfeVpKq/JZmMXWLCnXZyRrdQIB259fwHwvSstAhfFeg4cJMDFyiry0R1psFvFg
V28KO38xhyNSuyq00srJIw4KJ+Qmb6O1dss1dPir5xmoOHTB+Pk4TJHtSejqF+4z
O0Nf2Uch0K/cJMItell83fhvgWyzEh7PEA1x7j0Ip9FZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:05 2026 by rpki-client