Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/CLu-hJp8E1jp1UI5mxQRTW3Ttr8.roa
File: CLu-hJp8E1jp1UI5mxQRTW3Ttr8.roa (raw, json)
Hash identifier: SqhKPPUpmk1ZIvkYjxjSqQ87oLQ+aw2o3t/ut561QO0=
Subject key identifier: 08:BB:BE:84:9A:7C:13:58:E9:D5:42:39:9B:14:11:4D:6D:D3:B6:BF
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A0B5324AED8543A9B99536CE5A9C6FB3FB
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/CLu-hJp8E1jp1UI5mxQRTW3Ttr8.roa
Signing time: Fri 18 Sep 2026 15:46:07 +0000
ROA not before: Fri 18 Sep 2026 15:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218767
IP address blocks: 87.192.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:32:4a:ed:85:43:a9:b9:95:36:ce:5a:9c:6f:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 18 15:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08bbbe849a7c1358e9d542399b14114d6dd3b6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:c6:f5:c8:a9:db:e5:74:c4:a0:e4:d0:50:
36:a3:1b:4e:3d:d2:30:65:b3:bb:d8:cb:f3:8c:e9:
2a:77:e5:a8:6b:b1:c8:d3:45:27:4c:e0:96:14:c2:
31:2f:19:90:04:d7:84:f1:bb:fd:8e:89:c4:59:b5:
ba:0a:0a:34:fc:eb:ca:7f:aa:6a:8d:1a:f0:5d:e1:
e7:64:54:91:0d:fd:a9:30:ae:71:64:1a:97:be:f0:
04:55:d8:a7:28:12:e8:ce:ad:6a:7c:4b:3c:d9:e7:
4b:f8:25:d3:e3:49:05:fc:ac:0c:98:55:3e:34:9a:
b8:86:d0:c5:3e:1f:89:b0:b4:64:de:d9:dc:d3:ff:
bb:08:0f:45:90:d2:68:b6:6b:91:0f:86:43:d0:b7:
18:01:f3:c3:bd:4b:22:f7:aa:f1:56:f7:3b:87:fe:
97:0a:fb:4a:f6:bb:5a:10:c5:6f:d2:40:a3:e2:5f:
e5:32:4d:91:2b:97:6b:87:ee:32:81:59:ae:25:55:
dd:88:6f:7c:40:fe:1e:56:34:67:85:f6:73:f4:20:
3e:5f:eb:db:a9:4a:11:93:07:45:52:99:bc:bf:84:
25:94:03:f4:0d:3f:91:94:34:1f:1e:e6:cb:b9:16:
bc:a6:70:89:ae:f4:e5:1f:14:c6:49:66:f9:0f:2d:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BB:BE:84:9A:7C:13:58:E9:D5:42:39:9B:14:11:4D:6D:D3:B6:BF
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/CLu-hJp8E1jp1UI5mxQRTW3Ttr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:60:20:b1:46:5a:46:90:9c:73:d1:66:3b:ab:8f:65:5c:bc:
28:0f:9a:25:90:af:8e:07:99:5d:df:bf:c9:8e:73:cb:1d:ea:
fa:3e:5d:b5:30:f8:75:85:0c:ae:b6:ff:dd:b8:5f:74:3f:ef:
6f:41:dc:c4:39:ba:0a:7e:22:73:5b:53:a0:63:8a:58:69:9b:
10:14:1b:98:e6:75:1d:4c:56:8d:0a:e6:8b:c8:23:ee:c4:b1:
68:97:d0:eb:ae:eb:bb:9b:23:f0:5d:8e:72:00:72:51:57:3f:
ed:7b:38:ec:8e:86:45:91:4a:ad:cf:58:8a:b8:a0:1a:b7:6f:
db:66:46:70:2a:42:8b:25:d3:ba:4c:7f:53:ef:a5:25:36:66:
11:78:13:68:ac:23:7b:7b:c1:11:c5:8d:36:7b:88:80:dc:b5:
e9:c5:c5:58:e2:e7:d5:10:f5:ae:62:c1:36:52:37:7b:86:f7:
2d:ed:1f:3f:5d:be:ca:eb:4e:51:d3:71:ac:de:b5:5c:4c:ac:
b5:d7:d6:ac:e6:22:45:0f:b3:2a:a9:1f:e5:cd:41:d8:f3:68:
cc:3f:14:03:27:51:d9:4a:b4:49:2f:d6:72:ea:14:1b:f1:fb:
0b:77:12:7d:2e:44:b7:9c:3b:ee:2d:05:50:db:f7:a1:84:81:
b8:7a:90:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC1MkrthUOpuZU2zlqcb7P7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQzNWQ0ZDY0NTllZjVmMzU1M2VhMzEwZTBjNjViYjNi
MGYwZDkwHhcNMjYwOTE4MTU0NjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGJiYmU4NDlhN2MxMzU4ZTlkNTQyMzk5YjE0MTE0ZDZkZDNiNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvHG9cip2+V0xKDk0FA2oxtOPdIw
ZbO72MvzjOkqd+Woa7HI00UnTOCWFMIxLxmQBNeE8bv9jonEWbW6Cgo0/OvKf6pq
jRrwXeHnZFSRDf2pMK5xZBqXvvAEVdinKBLozq1qfEs82edL+CXT40kF/KwMmFU+
NJq4htDFPh+JsLRk3tnc0/+7CA9FkNJotmuRD4ZD0LcYAfPDvUsi96rxVvc7h/6X
CvtK9rtaEMVv0kCj4l/lMk2RK5drh+4ygVmuJVXdiG98QP4eVjRnhfZz9CA+X+vb
qUoRkwdFUpm8v4QllAP0DT+RlDQfHubLuRa8pnCJrvTlHxTGSWb5Dy3RNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAi7voSafBNY6dVCOZsUEU1t07a/MB8GA1UdIwQY
MBaAFOhNNdTWRZ7181U+oxDgxluzsPDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQt
YTUyNDgzODc3NmJkLzEvQ0x1LWhKcDhFMWpwMVVJNW14UVJUVzNUdHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQtYTUyNDgzODc3NmJk
LzEvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV8AqMA0G
CSqGSIb3DQEBCwUAA4IBAQCdYCCxRlpGkJxz0WY7q49lXLwoD5olkK+OB5ld37/J
jnPLHer6Pl21MPh1hQyutv/duF90P+9vQdzEOboKfiJzW1OgY4pYaZsQFBuY5nUd
TFaNCuaLyCPuxLFol9Drruu7myPwXY5yAHJRVz/tezjsjoZFkUqtz1iKuKAat2/b
ZkZwKkKLJdO6TH9T76UlNmYReBNorCN7e8ERxY02e4iA3LXpxcVY4ufVEPWuYsE2
Ujd7hvct7R8/Xb7K605R03Gs3rVcTKy119as5iJFD7MqqR/lzUHY82jMPxQDJ1HZ
SrRJL9Zy6hQb8fsLdxJ9LkS3nDvuLQVQ2/ehhIG4epCW
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:37:00 2026 by rpki-client