Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/sCp-ic69EDxQ8ZLfJ7taL1pp0CE.roa
File: sCp-ic69EDxQ8ZLfJ7taL1pp0CE.roa (raw, json)
Hash identifier: xaCYWU/obHtmqJSwbSvW3HJlolsUeKexX3oOqFczu6g=
Subject key identifier: B0:2A:7E:89:CE:BD:10:3C:50:F1:92:DF:27:BB:5A:2F:5A:69:D0:21
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF342DA0E238BDFAF5CFD6333F47AB6
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/sCp-ic69EDxQ8ZLfJ7taL1pp0CE.roa
Signing time: Thu 10 Sep 2026 20:12:27 +0000
ROA not before: Thu 10 Sep 2026 20:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:42:da:0e:23:8b:df:af:5c:fd:63:33:f4:7a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b02a7e89cebd103c50f192df27bb5a2f5a69d021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:b2:a2:b0:5d:67:80:86:09:9b:3a:70:a4:
63:35:d1:89:6b:61:e7:e0:fb:4c:1b:e1:2b:7b:b0:
40:ce:fa:1a:9d:d8:2d:fe:cd:10:35:5a:3c:e3:f6:
76:83:75:54:d0:6a:91:b3:2f:32:3b:8b:d2:f3:17:
27:1e:92:a0:a9:d6:9f:2d:eb:89:62:69:28:4d:5c:
df:c3:53:b5:6b:3b:04:50:5b:b1:b2:dc:14:ca:dd:
8e:fe:83:22:f5:d0:fa:67:71:d9:30:63:2a:ea:25:
20:30:52:69:f4:e6:3f:b8:c9:a7:e7:81:81:c2:34:
7c:2e:be:e3:45:43:87:b9:cc:9d:cf:75:29:cb:c8:
e6:74:53:5c:da:9d:31:51:e7:01:0d:5f:f4:4a:a0:
80:3d:0a:8a:9b:76:90:8e:71:36:dd:5b:41:c0:c1:
0f:c2:fb:0e:1d:c9:73:35:0c:a3:e2:b0:8b:f9:e8:
52:e1:e4:0b:9b:c6:8b:68:4f:7e:7f:c3:a2:4d:4c:
35:bc:30:d7:0e:e8:5c:2a:2f:ac:d9:ec:0f:01:c9:
bc:f8:05:23:24:39:53:c2:b9:b5:e2:73:57:d4:c3:
0d:74:b0:cd:52:1b:b1:e0:04:fa:bf:1a:b6:ef:eb:
09:53:d4:1b:24:97:95:88:7f:6f:a2:c2:10:93:37:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:7E:89:CE:BD:10:3C:50:F1:92:DF:27:BB:5A:2F:5A:69:D0:21
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/sCp-ic69EDxQ8ZLfJ7taL1pp0CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8f:49:7a:14:3b:58:ac:64:48:25:e6:4b:4a:36:e7:7d:cd:
34:c5:0c:02:f4:ff:f9:8b:3e:3c:87:63:52:5e:16:4f:13:78:
56:09:0e:20:f9:57:ce:19:ed:2a:aa:ad:aa:da:7f:8a:8b:6a:
a4:9c:60:62:46:f4:5d:ca:c3:5a:0e:09:23:ec:ff:a5:fb:56:
36:83:71:93:be:0d:4e:5d:15:ea:bd:6f:94:7c:01:af:19:ec:
1c:cc:7d:2b:54:98:8c:9b:62:6f:61:2f:06:b9:51:78:c9:41:
93:7f:a1:45:84:d3:8d:20:4f:ac:c3:d8:c6:d6:a2:41:b2:b0:
0c:ff:e2:ea:06:ee:1f:63:84:62:f4:e2:f6:f8:0d:9b:c6:b0:
36:a6:bc:75:de:ee:09:fe:cd:46:96:00:88:74:88:c6:89:02:
1e:41:4f:0f:86:ba:05:a7:ea:f7:cd:a5:42:fa:6e:a9:b3:30:
fd:20:22:ac:91:1e:0f:ad:a8:60:6a:f3:59:36:4c:a4:0f:79:
df:2c:24:85:a9:67:8e:58:50:61:80:f2:3e:32:cd:45:f3:64:
d5:91:85:00:16:69:c5:73:a8:3f:bc:6a:e3:ab:a5:36:ec:e9:
ff:3e:16:83:bc:f6:c6:5c:99:7e:d1:a9:27:3f:dc:5c:7c:14:
bd:42:42:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCM80LaDiOL369c/WMz9Hq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwOTEwMjAxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDJhN2U4OWNlYmQxMDNjNTBmMTkyZGYyN2JiNWEyZjVhNjlkMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSuyorBdZ4CGCZs6cKRjNdGJa2Hn
4PtMG+Ere7BAzvoandgt/s0QNVo84/Z2g3VU0GqRsy8yO4vS8xcnHpKgqdafLeuJ
YmkoTVzfw1O1azsEUFuxstwUyt2O/oMi9dD6Z3HZMGMq6iUgMFJp9OY/uMmn54GB
wjR8Lr7jRUOHucydz3Upy8jmdFNc2p0xUecBDV/0SqCAPQqKm3aQjnE23VtBwMEP
wvsOHclzNQyj4rCL+ehS4eQLm8aLaE9+f8OiTUw1vDDXDuhcKi+s2ewPAcm8+AUj
JDlTwrm14nNX1MMNdLDNUhux4AT6vxq27+sJU9QbJJeViH9vosIQkzch2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAqfonOvRA8UPGS3ye7Wi9aadAhMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvc0NwLWljNjlFRHhROFpMZko3dGFMMXBwMENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiYyMA0G
CSqGSIb3DQEBCwUAA4IBAQADj0l6FDtYrGRIJeZLSjbnfc00xQwC9P/5iz48h2NS
XhZPE3hWCQ4g+VfOGe0qqq2q2n+Ki2qknGBiRvRdysNaDgkj7P+l+1Y2g3GTvg1O
XRXqvW+UfAGvGewczH0rVJiMm2JvYS8GuVF4yUGTf6FFhNONIE+sw9jG1qJBsrAM
/+LqBu4fY4Ri9OL2+A2bxrA2prx13u4J/s1GlgCIdIjGiQIeQU8PhroFp+r3zaVC
+m6pszD9ICKskR4PrahgavNZNkykD3nfLCSFqWeOWFBhgPI+Ms1F82TVkYUAFmnF
c6g/vGrjq6U27On/PhaDvPbGXJl+0aknP9xcfBS9QkKz
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:40 2026 by rpki-client