Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa
File: cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa (raw, json)
Hash identifier: MJoA4QKvMfD128eHraMg34YoNGsOhXAw8I0h2v8nSz4=
Subject key identifier: 71:9F:C2:1A:DF:09:DB:6B:6B:93:B7:C1:20:3F:CB:C3:F5:05:41:E4
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019E399AA7ADF8CFB8AD3FABAED3A3B36700
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa
Signing time: Mon 18 May 2026 05:41:37 +0000
ROA not before: Mon 18 May 2026 05:41:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:39:9a:a7:ad:f8:cf:b8:ad:3f:ab:ae:d3:a3:b3:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: May 18 05:41:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=719fc21adf09db6b6b93b7c1203fcbc3f50541e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:86:8e:20:90:45:e1:9e:a1:f7:ab:51:e2:
6c:ef:18:a2:e3:4e:cf:b8:bf:99:04:3d:9a:4b:cd:
51:6e:8d:15:bd:e7:17:ba:47:46:27:02:89:48:97:
d5:e9:e2:94:04:2b:be:55:60:b5:5f:44:3b:87:88:
fc:23:38:da:ab:cd:15:db:bd:b6:e4:62:14:8f:03:
79:f5:16:36:d4:34:77:aa:2f:20:4d:80:95:1f:9a:
62:8a:0c:5d:d5:8e:6b:df:60:4f:70:28:f4:5f:6c:
ee:d0:12:08:a6:86:85:62:35:c7:cb:df:60:ad:f6:
cc:bd:fc:51:e9:fd:b2:9f:7b:fc:ea:88:5a:38:8e:
f2:1d:14:da:67:12:4c:d1:c3:11:71:8d:bb:6c:45:
ce:a5:a6:2d:b8:07:7c:4d:71:f2:64:67:8e:36:7e:
dc:c7:39:2b:de:ba:ac:04:bc:1b:6c:d4:dc:c8:12:
fc:2e:ca:6f:f6:38:e6:34:80:97:88:87:8d:d6:ad:
8a:76:ed:76:17:6e:12:3c:5e:30:5f:05:54:88:88:
48:4e:11:1b:da:2e:bd:0c:89:27:98:b2:81:ca:6d:
bb:fd:c3:a5:bf:65:12:9c:61:34:be:1d:f3:80:06:
5c:26:2d:bd:ee:f2:b0:d6:53:2b:0c:4f:c6:c8:36:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:C2:1A:DF:09:DB:6B:6B:93:B7:C1:20:3F:CB:C3:F5:05:41:E4
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f3:91:3a:5a:62:00:50:7f:c0:94:e9:49:cc:d3:15:a3:5c:
70:a6:cf:a8:2a:94:09:24:e1:89:f9:93:85:31:d3:fc:4b:24:
d5:d7:53:f7:78:0c:62:51:62:13:57:4c:8b:e1:ed:8e:4d:85:
04:a9:9c:a9:75:ce:ea:cb:60:21:65:16:b8:06:ff:27:79:1f:
fb:87:65:4f:85:d6:8a:02:38:4f:8c:41:b6:d6:83:7a:24:58:
1c:18:7e:37:6b:3c:48:90:82:e2:ff:1b:85:05:da:73:df:8b:
0f:11:34:d5:30:16:da:22:d4:74:86:4b:a3:fe:18:23:a8:66:
9f:48:da:7e:a3:85:2a:c8:a6:29:b5:1d:d2:a8:e3:df:07:27:
08:b9:85:94:e8:e3:42:f5:d3:38:dd:99:f2:65:82:11:80:a4:
21:5e:68:62:84:84:e4:1e:f0:c9:2c:f6:1f:af:e9:c5:fe:04:
42:91:c7:74:31:d2:45:cc:5a:6b:2f:48:c3:49:a5:44:ac:21:
2f:ba:ae:fc:38:cc:b8:fb:a9:5a:4b:9c:fa:3a:8c:ab:04:27:
d2:47:05:45:db:8e:9c:77:e3:b8:66:65:47:6e:6f:1f:79:af:
f7:68:10:2d:01:42:31:36:86:8c:35:28:27:6e:30:f3:29:fb:
73:35:ba:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ45mqet+M+4rT+rrtOjs2cAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwNTE4MDU0MTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTlmYzIxYWRmMDlkYjZiNmI5M2I3YzEyMDNmY2JjM2Y1MDU0MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUWGjiCQReGeoferUeJs7xii407P
uL+ZBD2aS81Rbo0VvecXukdGJwKJSJfV6eKUBCu+VWC1X0Q7h4j8Izjaq80V2722
5GIUjwN59RY21DR3qi8gTYCVH5piigxd1Y5r32BPcCj0X2zu0BIIpoaFYjXHy99g
rfbMvfxR6f2yn3v86ohaOI7yHRTaZxJM0cMRcY27bEXOpaYtuAd8TXHyZGeONn7c
xzkr3rqsBLwbbNTcyBL8Lspv9jjmNICXiIeN1q2Kdu12F24SPF4wXwVUiIhIThEb
2i69DIknmLKBym27/cOlv2USnGE0vh3zgAZcJi297vKw1lMrDE/GyDboKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHGfwhrfCdtra5O3wSA/y8P1BUHkMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvY1pfQ0d0OEoyMnRyazdmQklEX0x3X1VGUWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVei3MA0G
CSqGSIb3DQEBCwUAA4IBAQA+85E6WmIAUH/AlOlJzNMVo1xwps+oKpQJJOGJ+ZOF
MdP8SyTV11P3eAxiUWITV0yL4e2OTYUEqZypdc7qy2AhZRa4Bv8neR/7h2VPhdaK
AjhPjEG21oN6JFgcGH43azxIkILi/xuFBdpz34sPETTVMBbaItR0hkuj/hgjqGaf
SNp+o4UqyKYptR3SqOPfBycIuYWU6ONC9dM43ZnyZYIRgKQhXmhihITkHvDJLPYf
r+nF/gRCkcd0MdJFzFprL0jDSaVErCEvuq78OMy4+6laS5z6OoyrBCfSRwVF246c
d+O4ZmVHbm8fea/3aBAtAUIxNoaMNSgnbjDzKftzNboJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:05 2026 by rpki-client