Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cw32mQUu9N5LemNb8nabq99WmVI.roa
File: Cw32mQUu9N5LemNb8nabq99WmVI.roa (raw, json)
Hash identifier: DnQF/AlxbCxiA0bPejrXp12aS1lxxoSPGE2EUoo4xu4=
Subject key identifier: 0B:0D:F6:99:05:2E:F4:DE:4B:7A:63:5B:F2:76:9B:AB:DF:56:99:52
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D2AECD86EB10EC63EDCA3DA26BB693BF4
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cw32mQUu9N5LemNb8nabq99WmVI.roa
Signing time: Thu 26 Mar 2026 16:14:18 +0000
ROA not before: Thu 26 Mar 2026 16:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 95.155.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:ec:d8:6e:b1:0e:c6:3e:dc:a3:da:26:bb:69:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Mar 26 16:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b0df699052ef4de4b7a635bf2769babdf569952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:ac:3c:d8:8e:10:d1:3d:bf:ac:64:93:96:
57:ae:4e:2d:f0:d8:76:10:71:72:e1:c7:df:a6:53:
d6:01:30:10:1b:61:4d:d6:f3:33:d0:8a:0d:1a:6d:
99:a1:cf:e1:21:4a:e8:ef:2a:26:ec:f9:42:95:ce:
03:78:af:77:b5:aa:3c:09:37:45:ce:a5:1e:18:97:
9c:95:02:b6:61:f5:bc:52:05:44:39:10:b7:08:2e:
55:78:3a:58:78:b5:4c:b7:37:3b:95:91:01:b7:80:
be:19:c7:60:9d:81:5f:38:fb:b7:3c:57:95:fe:ed:
d7:92:9a:65:0b:9d:99:6b:64:2f:b3:1f:d5:15:66:
3d:60:bc:a0:0d:e3:28:c1:15:35:fe:17:6b:e5:98:
60:69:e5:31:dc:4f:c4:ce:24:c4:c9:31:bd:af:c6:
18:4b:68:d4:d5:fc:2f:9c:76:04:2b:73:c1:71:c0:
5a:66:2b:d7:53:e7:be:23:ac:f4:fc:7c:57:bb:74:
a6:47:72:5b:59:9e:78:76:4a:d2:e1:b7:45:13:39:
b7:d5:79:05:95:aa:e2:6f:d9:56:76:d6:7d:b9:ef:
cd:e4:56:44:a2:d9:65:e2:ec:90:26:91:11:63:bb:
9a:a3:c2:6a:42:f2:f3:eb:1b:13:9a:3c:d2:90:d8:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:F6:99:05:2E:F4:DE:4B:7A:63:5B:F2:76:9B:AB:DF:56:99:52
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Cw32mQUu9N5LemNb8nabq99WmVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.136.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7d:09:ed:de:9f:39:a9:13:4c:de:1c:bd:8c:c7:c1:b0:a8:
a6:49:cd:a2:3f:f8:46:93:0a:d0:41:a0:f5:ca:ad:15:8c:fa:
e8:30:01:dc:ed:b3:5b:aa:b1:0f:d0:f4:1e:1d:25:00:b6:4c:
ea:03:60:b3:c9:ec:ee:6a:da:53:cb:1f:a3:b2:3d:e6:08:5a:
14:f8:2c:e3:80:5e:32:23:15:05:9e:2c:6c:c4:8a:20:ab:a7:
e9:2f:25:ed:17:21:79:3b:05:c5:18:cf:c2:ba:70:53:73:34:
a2:79:8f:11:4a:d9:6c:00:4d:53:e0:3b:a7:eb:da:54:87:12:
64:e2:4d:e7:c3:54:db:8f:a1:fb:e1:4e:93:bb:52:3d:ff:82:
f9:90:39:76:8b:bc:02:84:de:5f:38:9e:a3:9c:51:42:d2:4e:
84:b4:60:5e:34:93:cb:94:08:72:d7:c4:48:42:3f:51:6c:3c:
be:28:bb:0c:fe:aa:0b:50:51:d8:b1:f3:6b:4b:66:fe:e0:7b:
c8:83:2a:96:e6:dc:51:b0:c2:49:54:98:22:38:6f:01:c6:fe:
92:59:74:7e:0a:f4:c7:26:9c:dd:d1:d7:08:3f:80:15:94:dd:
f6:0d:8b:c2:22:8c:d7:44:d1:76:d3:ef:f6:ec:23:00:11:00:
62:9d:54:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0q7NhusQ7GPtyj2ia7aTv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMzI2MTYxNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjBkZjY5OTA1MmVmNGRlNGI3YTYzNWJmMjc2OWJhYmRmNTY5OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEOsPNiOENE9v6xkk5ZXrk4t8Nh2
EHFy4cffplPWATAQG2FN1vMz0IoNGm2Zoc/hIUro7yom7PlClc4DeK93tao8CTdF
zqUeGJeclQK2YfW8UgVEORC3CC5VeDpYeLVMtzc7lZEBt4C+GcdgnYFfOPu3PFeV
/u3XkpplC52Za2Qvsx/VFWY9YLygDeMowRU1/hdr5ZhgaeUx3E/EziTEyTG9r8YY
S2jU1fwvnHYEK3PBccBaZivXU+e+I6z0/HxXu3SmR3JbWZ54dkrS4bdFEzm31XkF
larib9lWdtZ9ue/N5FZEotll4uyQJpERY7uao8JqQvLz6xsTmjzSkNiBMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAsN9pkFLvTeS3pjW/J2m6vfVplSMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvQ3czMm1RVXU5TjVMZW1OYjhuYWJxOTlXbVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5uIMA0G
CSqGSIb3DQEBCwUAA4IBAQAlfQnt3p85qRNM3hy9jMfBsKimSc2iP/hGkwrQQaD1
yq0VjProMAHc7bNbqrEP0PQeHSUAtkzqA2CzyezuatpTyx+jsj3mCFoU+CzjgF4y
IxUFnixsxIogq6fpLyXtFyF5OwXFGM/CunBTczSieY8RStlsAE1T4Dun69pUhxJk
4k3nw1Tbj6H74U6Tu1I9/4L5kDl2i7wChN5fOJ6jnFFC0k6EtGBeNJPLlAhy18RI
Qj9RbDy+KLsM/qoLUFHYsfNrS2b+4HvIgyqW5txRsMJJVJgiOG8Bxv6SWXR+CvTH
Jpzd0dcIP4AVlN32DYvCIozXRNF20+/27CMAEQBinVQl
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:40:28 2026 by rpki-client