Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/cWh_BcmThw599F5wiigriGAYqtY.roa
File: cWh_BcmThw599F5wiigriGAYqtY.roa (raw, json)
Hash identifier: W6nwTyuddG1xaZDQy43lXxKOCjzItktymZ7EkVbRS7k=
Subject key identifier: 71:68:7F:05:C9:93:87:0E:7D:F4:5E:70:8A:28:2B:88:60:18:AA:D6
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 01A1B08241D55964583C6C22993778D44F83
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/cWh_BcmThw599F5wiigriGAYqtY.roa
Signing time: Fri 06 Nov 2026 10:58:08 +0000
ROA not before: Fri 06 Nov 2026 10:58:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56630
IP address blocks: 185.37.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:82:41:d5:59:64:58:3c:6c:22:99:37:78:d4:4f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Nov 6 10:58:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71687f05c993870e7df45e708a282b886018aad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:70:6c:61:39:5f:3b:ca:bb:fc:69:9a:86:
53:92:b1:fd:18:38:ea:fd:83:6b:09:4d:16:51:71:
7c:9f:3c:51:59:93:9c:ec:82:e3:a3:c7:d6:25:3a:
b4:3a:d1:55:5d:f2:5c:9f:3f:c1:4d:07:6c:a3:5e:
ec:c1:e0:c1:c2:a2:44:0f:b8:48:f8:9a:f3:d9:4a:
9e:45:b0:a9:cd:39:34:aa:c2:70:86:d6:f3:8b:bf:
80:50:f9:a1:f8:13:06:c4:31:31:e4:f6:f4:31:97:
ee:b5:53:94:6a:6a:62:c4:90:30:dd:35:0c:24:c7:
f1:e9:0c:77:ee:53:fc:8c:89:ca:0c:aa:60:90:4f:
f5:50:29:26:10:d3:14:b6:e6:1d:b6:be:5b:41:50:
3d:75:59:d6:84:e2:88:51:c3:af:ee:ac:db:b3:1f:
93:b5:c4:35:0e:4c:8d:3b:09:95:46:bd:6a:0f:04:
51:0b:85:04:ae:22:2d:8c:ec:0c:3c:4f:55:13:46:
10:bd:b9:df:a9:c9:33:f3:71:5d:38:87:a7:33:5d:
9d:bd:9c:25:87:c5:57:b4:9a:9f:cb:a3:52:65:b3:
83:63:df:a6:e6:ae:f8:1f:7e:4b:0b:49:62:92:fe:
9d:f2:4f:70:47:03:aa:97:71:96:2b:a1:b7:c1:f9:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:7F:05:C9:93:87:0E:7D:F4:5E:70:8A:28:2B:88:60:18:AA:D6
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/cWh_BcmThw599F5wiigriGAYqtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.0.0/23
Signature Algorithm: sha256WithRSAEncryption
01:46:11:18:ae:3f:74:e1:8b:be:b5:7d:20:f0:f8:11:31:2f:
77:a2:d9:f7:26:ee:60:e4:96:70:4a:73:b1:db:ce:02:30:9e:
04:34:83:07:71:39:42:cc:90:5e:c3:48:f0:c6:37:26:23:6d:
e6:03:dd:f6:bd:8a:e6:60:62:fd:40:3e:3c:d7:a8:96:6f:cc:
f7:91:35:ec:b3:04:f9:f3:0c:da:31:a9:e8:d1:6e:3a:1b:6e:
7c:98:99:54:3e:05:c4:1b:5b:83:1c:72:11:58:cd:c3:5b:70:
10:34:7d:8c:8b:10:a4:ac:42:da:35:05:cb:ee:3c:04:1a:f2:
cc:a2:69:88:45:50:7c:1a:3a:ae:86:d6:33:e8:05:b6:bf:1b:
41:bd:c5:29:80:51:8a:3a:15:bb:82:be:09:85:fa:ff:c3:4e:
d3:e5:d0:7f:0c:2e:6d:57:ea:74:62:38:f4:88:f7:95:d4:42:
8e:8c:87:e4:03:99:68:1e:bd:16:f9:32:0e:5e:6c:d8:fe:0c:
76:03:a8:5e:a7:9c:63:c7:89:e9:9f:0c:72:88:a4:d1:b2:a8:
78:72:d3:98:ae:ff:5d:6b:d4:c6:e8:d7:13:f9:a5:69:9c:a7:
21:8b:b2:11:32:6b:1f:df:0c:4e:b4:dd:ad:d6:f4:72:65:bb:
0f:d5:13:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGwgkHVWWRYPGwimTd41E+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjYxMTA2MTA1ODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTY4N2YwNWM5OTM4NzBlN2RmNDVlNzA4YTI4MmI4ODYwMThhYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dVwbGE5XzvKu/xpmoZTkrH9GDjq
/YNrCU0WUXF8nzxRWZOc7ILjo8fWJTq0OtFVXfJcnz/BTQdso17sweDBwqJED7hI
+Jrz2UqeRbCpzTk0qsJwhtbzi7+AUPmh+BMGxDEx5Pb0MZfutVOUampixJAw3TUM
JMfx6Qx37lP8jInKDKpgkE/1UCkmENMUtuYdtr5bQVA9dVnWhOKIUcOv7qzbsx+T
tcQ1DkyNOwmVRr1qDwRRC4UEriItjOwMPE9VE0YQvbnfqckz83FdOIenM12dvZwl
h8VXtJqfy6NSZbODY9+m5q74H35LC0likv6d8k9wRwOql3GWK6G3wflXeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHFofwXJk4cOffRecIooK4hgGKrWMB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvY1doX0JjbVRodzU5OUY1d2lpZ3JpR0FZcXRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSUAMA0G
CSqGSIb3DQEBCwUAA4IBAQABRhEYrj904Yu+tX0g8PgRMS93otn3Ju5g5JZwSnOx
284CMJ4ENIMHcTlCzJBew0jwxjcmI23mA932vYrmYGL9QD4816iWb8z3kTXsswT5
8wzaMano0W46G258mJlUPgXEG1uDHHIRWM3DW3AQNH2MixCkrELaNQXL7jwEGvLM
ommIRVB8GjquhtYz6AW2vxtBvcUpgFGKOhW7gr4Jhfr/w07T5dB/DC5tV+p0Yjj0
iPeV1EKOjIfkA5loHr0W+TIOXmzY/gx2A6hep5xjx4npnwxyiKTRsqh4ctOYrv9d
a9TG6NcT+aVpnKchi7IRMmsf3wxOtN2t1vRyZbsP1ROm
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:24 2026 by rpki-client