Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/38IcWrFWJbqE37FYpFMigdsHVdo.roa
File: 38IcWrFWJbqE37FYpFMigdsHVdo.roa (raw, json)
Hash identifier: jTZcDNir5nH2T9oJuhPtVnEcZ5OgfBAR2idpIej2Fr4=
Subject key identifier: DF:C2:1C:5A:B1:56:25:BA:84:DF:B1:58:A4:53:22:81:DB:07:55:DA
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 019B76EAEFE75F5B81FFA1A7744E153D6837
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/38IcWrFWJbqE37FYpFMigdsHVdo.roa
Signing time: Thu 01 Jan 2026 00:17:46 +0000
ROA not before: Thu 01 Jan 2026 00:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59489
IP address blocks: 193.32.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ef:e7:5f:5b:81:ff:a1:a7:74:4e:15:3d:68:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jan 1 00:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfc21c5ab15625ba84dfb158a4532281db0755da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:a3:25:ae:92:c7:fc:81:7a:04:7c:e0:a4:
6f:23:64:9e:46:b1:99:56:86:7a:9f:ee:8c:4c:c8:
aa:3a:cc:7e:52:4a:4f:84:3f:ac:2f:c0:82:18:e5:
66:fb:f7:8f:4a:51:51:d7:c5:29:f1:be:f5:c9:cd:
a4:43:62:bf:ed:16:eb:a4:26:ae:d2:48:f0:4a:21:
63:02:86:7b:d1:91:f5:d7:d4:a2:3b:15:f0:49:f0:
52:30:08:26:b1:7a:97:02:1c:4d:2d:eb:e6:73:eb:
a8:bd:ff:ed:a3:de:e2:34:df:30:5c:4c:a0:fd:3c:
02:30:bd:4c:28:42:b4:c5:6b:e0:f8:91:80:1b:de:
8c:f3:af:4b:2b:73:aa:ed:6e:a3:7c:83:8d:88:c2:
0b:5f:b9:e8:02:98:7f:86:09:e5:4a:83:8d:a3:50:
4f:df:08:f0:86:24:4a:cd:11:98:36:a7:3e:72:00:
7e:75:49:88:cc:f8:1f:50:98:72:ea:56:45:67:f2:
22:96:ac:7b:14:2b:8c:6b:4a:03:fb:d9:04:29:4f:
04:b1:a5:e3:22:57:0a:e5:2a:ad:d3:50:43:cc:f0:
9c:2c:4c:af:fa:73:6b:0d:68:91:01:ab:f3:9a:85:
30:a0:cd:18:46:60:17:9d:39:2c:0f:d1:50:c5:95:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:1C:5A:B1:56:25:BA:84:DF:B1:58:A4:53:22:81:DB:07:55:DA
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/38IcWrFWJbqE37FYpFMigdsHVdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.57.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f9:5b:6e:6e:36:c8:3d:56:cd:6f:40:f5:08:35:bf:f6:85:
e3:0c:48:b6:e6:c7:59:5e:24:f2:3f:41:f9:fd:00:6c:33:a0:
d6:f6:12:ca:0c:8c:9d:49:02:48:a4:e6:ed:3e:ce:81:9c:dd:
79:f7:1d:25:29:af:48:3a:9d:28:b1:50:6c:39:f1:d3:c2:f0:
ef:95:35:bc:5c:87:a7:c2:10:bf:25:2d:52:d3:17:1d:cf:31:
b6:51:94:3b:bd:03:d0:0a:4d:dc:dc:a8:e3:98:53:6a:8c:e1:
54:1d:0a:40:92:49:c3:5e:ab:ed:9b:eb:9c:2e:86:9a:8c:8a:
f4:ba:8d:57:c1:48:24:ac:cb:55:42:05:78:d4:46:fe:fb:42:
2a:90:76:10:74:9d:7f:6f:29:a5:cc:1e:9b:0b:c5:f4:7b:9b:
9c:05:9c:48:f9:a6:71:ba:a8:01:ad:a6:40:8a:88:16:91:f2:
df:90:60:c5:24:a2:37:77:6f:7a:5d:28:b0:c1:ad:9b:02:96:
0b:a9:c0:5f:df:3c:eb:20:65:27:7c:b3:fa:b8:38:1d:65:e4:
e0:61:e8:0b:9a:68:94:b4:a5:89:0f:b1:5e:65:01:39:9e:93:
a4:e4:ec:16:3a:85:0a:18:b8:c8:c2:19:25:2f:e5:26:11:33:
75:3d:66:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26u/nX1uB/6GndE4VPWg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4
ZDI5MmMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmMyMWM1YWIxNTYyNWJhODRkZmIxNThhNDUzMjI4MWRiMDc1NWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCijJa6Sx/yBegR84KRvI2SeRrGZ
VoZ6n+6MTMiqOsx+UkpPhD+sL8CCGOVm+/ePSlFR18Up8b71yc2kQ2K/7RbrpCau
0kjwSiFjAoZ70ZH119SiOxXwSfBSMAgmsXqXAhxNLevmc+uovf/to97iNN8wXEyg
/TwCML1MKEK0xWvg+JGAG96M869LK3Oq7W6jfIONiMILX7noAph/hgnlSoONo1BP
3wjwhiRKzRGYNqc+cgB+dUmIzPgfUJhy6lZFZ/Iilqx7FCuMa0oD+9kEKU8EsaXj
IlcK5Sqt01BDzPCcLEyv+nNrDWiRAavzmoUwoM0YRmAXnTksD9FQxZVEvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/CHFqxViW6hN+xWKRTIoHbB1XaMB8GA1UdIwQY
MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt
MDRjODJlZDZlZDRjLzEvMzhJY1dyRldKYnFFMzdGWXBGTWlnZHNIVmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj
LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSA5MA0G
CSqGSIb3DQEBCwUAA4IBAQBi+VtubjbIPVbNb0D1CDW/9oXjDEi25sdZXiTyP0H5
/QBsM6DW9hLKDIydSQJIpObtPs6BnN159x0lKa9IOp0osVBsOfHTwvDvlTW8XIen
whC/JS1S0xcdzzG2UZQ7vQPQCk3c3KjjmFNqjOFUHQpAkknDXqvtm+ucLoaajIr0
uo1XwUgkrMtVQgV41Eb++0IqkHYQdJ1/bymlzB6bC8X0e5ucBZxI+aZxuqgBraZA
iogWkfLfkGDFJKI3d296XSiwwa2bApYLqcBf3zzrIGUnfLP6uDgdZeTgYegLmmiU
tKWJD7FeZQE5npOk5OwWOoUKGLjIwhklL+UmETN1PWbW
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:19:27 2026 by rpki-client