Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_ClwpctvZr6LSQzkjlKMcGJVLeo.roa
File: _ClwpctvZr6LSQzkjlKMcGJVLeo.roa (raw, json)
Hash identifier: hRidM08aMbL6s9ym4Su20U2WvVbbXCNflOh3Jtp84QU=
Subject key identifier: FC:29:70:A5:CB:6F:66:BE:8B:49:0C:E4:8E:52:8C:70:62:55:2D:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A17295409423F882EBF712E3D01637ED14
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_ClwpctvZr6LSQzkjlKMcGJVLeo.roa
Signing time: Sun 25 Oct 2026 10:22:26 +0000
ROA not before: Sun 25 Oct 2026 10:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216309
IP address blocks: 94.249.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:95:40:94:23:f8:82:eb:f7:12:e3:d0:16:37:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 10:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc2970a5cb6f66be8b490ce48e528c7062552dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:fa:f3:1e:c8:1f:01:50:33:44:f0:58:83:
3c:de:b7:c9:eb:ad:23:e0:bc:5c:52:cc:91:7a:96:
31:fe:91:cb:b1:df:be:77:ea:8d:6c:bb:7a:fd:bc:
fb:1a:39:7b:f3:19:49:c9:11:fb:a5:d6:cc:8e:ab:
75:5a:9e:5e:a5:b2:9d:4e:6b:e1:b7:50:e1:21:34:
6d:d7:22:9d:46:13:ea:58:65:95:06:c0:af:12:3f:
6a:9b:48:b2:7f:b4:c0:d6:e5:a8:3b:46:df:2e:40:
d3:9b:75:b1:56:30:45:c7:bb:4f:c6:d0:c3:25:20:
e7:2e:32:73:4d:db:01:90:a2:49:25:89:a5:1e:a7:
5a:52:78:d6:79:c5:43:71:86:44:7a:f7:43:5a:71:
c3:75:39:12:49:63:f2:a9:66:8c:c2:a8:e0:a3:da:
36:34:d2:92:b2:31:e7:e4:87:75:62:8e:61:39:1e:
d5:20:76:ed:b6:99:8b:91:24:06:25:bb:7e:3d:41:
46:88:00:8e:d9:ef:ea:9d:94:f8:a2:94:fd:76:b5:
22:61:03:af:56:de:20:a3:5d:7a:f5:37:93:35:1b:
2e:33:b3:cc:e9:72:32:bf:25:e3:a7:d3:2b:30:5c:
4d:ba:97:36:ce:e1:ee:c9:69:e0:c7:4e:23:ad:ce:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:70:A5:CB:6F:66:BE:8B:49:0C:E4:8E:52:8C:70:62:55:2D:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_ClwpctvZr6LSQzkjlKMcGJVLeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2a:c0:66:8a:b4:58:71:9b:27:b5:ae:18:c4:19:cb:e0:32:
59:ac:bb:93:bd:1b:a5:44:d6:a6:0b:75:86:26:7f:e7:82:06:
a0:b3:b7:8e:30:a3:3a:a1:d3:bd:c1:be:16:0b:f7:3c:1d:a4:
ec:1e:17:e0:95:40:ed:bd:b6:fc:d2:8e:2a:ed:d7:89:dd:b6:
71:eb:db:64:78:b7:f4:bb:2a:be:57:0b:6b:08:ed:39:b7:72:
0c:64:02:7e:24:b5:a7:d1:ef:d9:d4:10:69:16:19:3e:4f:ed:
63:f6:e4:ad:96:fe:f2:af:5b:b4:2f:93:36:d3:53:94:aa:dc:
b4:85:42:af:2f:26:c8:37:92:e6:e9:bb:1d:54:49:c6:47:15:
c2:fc:40:7e:57:eb:4f:12:0b:d4:09:98:f4:ff:18:10:f0:3d:
1e:73:2c:58:69:79:b0:92:ec:76:26:be:0d:e0:aa:db:7a:72:
d9:35:24:5d:74:a1:3c:4a:12:6a:c0:2e:00:2b:25:86:9f:eb:
2c:29:58:50:15:f4:a9:e8:2e:47:54:89:8c:b4:60:cc:ef:38:
48:a4:da:b0:e5:b9:de:2e:58:d5:22:6b:a4:30:ba:ef:83:ad:
fe:0f:bf:83:ad:9a:4d:06:da:55:b8:17:34:5e:29:71:87:ab:
59:8e:8c:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFylUCUI/iC6/cS49AWN+0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDI1MTAyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzI5NzBhNWNiNmY2NmJlOGI0OTBjZTQ4ZTUyOGM3MDYyNTUyZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYn68x7IHwFQM0TwWIM83rfJ660j
4LxcUsyRepYx/pHLsd++d+qNbLt6/bz7Gjl78xlJyRH7pdbMjqt1Wp5epbKdTmvh
t1DhITRt1yKdRhPqWGWVBsCvEj9qm0iyf7TA1uWoO0bfLkDTm3WxVjBFx7tPxtDD
JSDnLjJzTdsBkKJJJYmlHqdaUnjWecVDcYZEevdDWnHDdTkSSWPyqWaMwqjgo9o2
NNKSsjHn5Id1Yo5hOR7VIHbttpmLkSQGJbt+PUFGiACO2e/qnZT4opT9drUiYQOv
Vt4go1169TeTNRsuM7PM6XIyvyXjp9MrMFxNupc2zuHuyWngx04jrc7XTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwpcKXLb2a+i0kM5I5SjHBiVS3qMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvX0Nsd3BjdHZacjZMU1F6a2psS01jR0pWTGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvnnMA0G
CSqGSIb3DQEBCwUAA4IBAQAMKsBmirRYcZsnta4YxBnL4DJZrLuTvRulRNamC3WG
Jn/nggags7eOMKM6odO9wb4WC/c8HaTsHhfglUDtvbb80o4q7deJ3bZx69tkeLf0
uyq+VwtrCO05t3IMZAJ+JLWn0e/Z1BBpFhk+T+1j9uStlv7yr1u0L5M201OUqty0
hUKvLybIN5Lm6bsdVEnGRxXC/EB+V+tPEgvUCZj0/xgQ8D0ecyxYaXmwkux2Jr4N
4KrbenLZNSRddKE8ShJqwC4AKyWGn+ssKVhQFfSp6C5HVImMtGDM7zhIpNqw5bne
LljVImukMLrvg63+D7+DrZpNBtpVuBc0Xilxh6tZjoyo
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:09 2026 by rpki-client