Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa
File: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (raw, json)
Hash identifier: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=
Subject key identifier: C3:99:06:02:59:17:BB:54:76:6A:EF:CF:15:47:5E:2C:3F:89:20:54
Certificate issuer: /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial: 019F2368F443D1D4B26DAF74ED0DD723C4F2
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 194.26.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:43:d1:d4:b2:6d:af:74:ed:0d:d7:23:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c39906025917bb54766aefcf15475e2c3f892054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:b9:17:15:47:72:e7:96:02:a3:fb:c6:6c:
48:75:1c:24:3a:6f:73:c3:ef:ed:06:13:0d:ae:3d:
25:23:29:f4:30:3d:1a:91:9b:f4:ee:26:4e:a2:f9:
6b:17:31:c7:e0:7a:fe:62:42:fb:bc:0f:be:72:62:
64:de:9c:f1:99:ad:23:3d:8b:dd:6b:99:9b:d8:16:
e9:36:d5:10:81:bb:14:a7:04:a2:a1:ac:9c:3e:c2:
5c:77:7a:bd:2e:e7:08:61:ca:bc:38:8d:70:fb:fd:
bb:53:eb:0b:d0:f6:12:e0:dd:35:d4:f3:70:74:ba:
47:fc:79:d3:ad:4d:ff:5e:ab:f9:b7:e1:ad:0c:05:
76:1a:a6:98:39:2f:68:fd:2b:3d:ff:5d:91:bd:17:
8e:78:3a:f6:35:72:58:f8:0d:63:bc:d6:7c:9d:2f:
35:ef:d8:30:99:f6:61:7b:6e:76:85:4d:eb:4b:d6:
53:2f:b7:b1:0e:cd:42:94:cf:63:fd:3d:82:12:32:
2b:3d:cf:1d:61:00:93:27:c2:eb:f7:83:eb:de:e0:
aa:37:0f:d4:1c:52:c9:22:07:9f:5d:0d:78:16:1d:
06:8e:da:89:3e:53:b3:83:fb:6d:3f:71:f5:df:20:
aa:e4:5c:23:e5:f8:a7:79:1c:84:d4:16:50:82:86:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:06:02:59:17:BB:54:76:6A:EF:CF:15:47:5E:2C:3F:89:20:54
X509v3 Authority Key Identifier:
keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:8a:43:b2:e6:1d:7f:4e:d6:87:88:fc:29:14:c9:2d:e1:91:
89:a8:b1:a8:b8:39:28:ed:02:3e:73:b1:a7:c1:f7:a4:1e:4c:
b6:58:68:f7:f7:62:fc:a5:a1:00:40:39:b9:3c:77:e4:9d:39:
38:92:89:ed:25:aa:9d:31:b4:4e:f0:3f:a3:55:ba:53:65:20:
80:d1:60:0f:c5:5b:fe:4d:1e:8d:3f:c8:3f:71:6a:c5:ce:0f:
9c:89:22:ee:dc:48:af:28:26:0b:f1:f2:bb:c5:f5:72:57:60:
82:ea:a4:3c:ad:96:9c:2a:b4:ca:e5:6f:d6:6f:a8:3f:e6:cd:
7e:dd:27:96:a8:52:cc:dd:5a:1f:ad:37:83:75:e2:da:9e:ef:
09:21:25:21:b3:a6:51:ca:04:94:b4:7d:07:b5:ce:e7:81:3f:
88:99:4a:c5:76:70:18:5e:fe:5c:3d:d6:cd:99:06:13:7a:9e:
d6:75:37:c0:0e:14:b1:63:8d:54:d8:3e:ff:53:f2:bf:71:be:
a4:48:5a:c1:bc:57:8f:9d:45:cc:32:a9:0e:0a:5c:ee:cb:70:
71:6e:f5:ab:c1:4c:16:d9:80:5f:63:95:04:82:b9:fc:7c:77:
ad:df:fc:1b:1d:06:4c:1e:cb:8a:eb:a6:e8:a9:80:8e:52:6b:
04:c2:84:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPRD0dSyba907Q3XI8TyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYjMyYTY1YTZjYzdlZTIzMDY5ZmQyYjA5MzBmNzgxOGYz
ZDE2NzcwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzk5MDYwMjU5MTdiYjU0NzY2YWVmY2YxNTQ3NWUyYzNmODkyMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wK5FxVHcueWAqP7xmxIdRwkOm9z
w+/tBhMNrj0lIyn0MD0akZv07iZOovlrFzHH4Hr+YkL7vA++cmJk3pzxma0jPYvd
a5mb2BbpNtUQgbsUpwSioaycPsJcd3q9LucIYcq8OI1w+/27U+sL0PYS4N011PNw
dLpH/HnTrU3/Xqv5t+GtDAV2GqaYOS9o/Ss9/12RvReOeDr2NXJY+A1jvNZ8nS81
79gwmfZhe252hU3rS9ZTL7exDs1ClM9j/T2CEjIrPc8dYQCTJ8Lr94Pr3uCqNw/U
HFLJIgefXQ14Fh0GjtqJPlOzg/ttP3H13yCq5Fwj5fineRyE1BZQgoYa/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOZBgJZF7tUdmrvzxVHXiw/iSBUMB8GA1UdIwQY
MBaAFDKzKmWmzH7iMGn9Kwkw94GPPRZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXJNcVphYk1mdUl3YWYwckNURDNnWTg5Rm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jN2RiZGYtMWUyYy00ZmJhLTg0MTEt
YzY3ZDcxM2NkYWJjLzEvdzVrR0Fsa1h1MVIyYXVfUEZVZGVMRC1KSUZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9jN2RiZGYtMWUyYy00ZmJhLTg0MTEtYzY3ZDcxM2NkYWJj
LzEvTXJNcVphYk1mdUl3YWYwckNURDNnWTg5Rm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwhogMA0G
CSqGSIb3DQEBCwUAA4IBAQBbikOy5h1/TtaHiPwpFMkt4ZGJqLGouDko7QI+c7Gn
wfekHky2WGj392L8paEAQDm5PHfknTk4kontJaqdMbRO8D+jVbpTZSCA0WAPxVv+
TR6NP8g/cWrFzg+ciSLu3EivKCYL8fK7xfVyV2CC6qQ8rZacKrTK5W/Wb6g/5s1+
3SeWqFLM3VofrTeDdeLanu8JISUhs6ZRygSUtH0Htc7ngT+ImUrFdnAYXv5cPdbN
mQYTep7WdTfADhSxY41U2D7/U/K/cb6kSFrBvFePnUXMMqkOClzuy3BxbvWrwUwW
2YBfY5UEgrn8fHet3/wbHQZMHsuK66boqYCOUmsEwoQp
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:44 2026 by rpki-client