Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/rvS__rQw015TaaBOkmW4cBz1bug.roa
File: rvS__rQw015TaaBOkmW4cBz1bug.roa (raw, json)
Hash identifier: cmcSpRFZSlnzP6e1K+AHDm2VAfZoIyqsC7lkkFh0sCs=
Subject key identifier: AE:F4:BF:FE:B4:30:D3:5E:53:69:A0:4E:92:65:B8:70:1C:F5:6E:E8
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019EAD68DECCDA42800850E077D81B9174A2
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/rvS__rQw015TaaBOkmW4cBz1bug.roa
Signing time: Tue 09 Jun 2026 17:23:11 +0000
ROA not before: Tue 09 Jun 2026 17:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134176
IP address blocks: 209.33.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:68:de:cc:da:42:80:08:50:e0:77:d8:1b:91:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Jun 9 17:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aef4bffeb430d35e5369a04e9265b8701cf56ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:f4:24:2a:58:34:d5:b3:b1:ad:9b:04:3d:
5f:01:61:85:f1:94:da:9d:f0:ea:f3:b7:0c:06:36:
e1:aa:4f:22:a3:6a:c6:7b:0a:bc:3e:78:a1:d2:18:
ed:93:7e:a3:fe:9a:0f:26:52:2a:53:5f:a7:cc:9d:
e4:d1:d6:c1:79:27:ae:bd:db:55:e4:34:d2:c1:7d:
aa:9f:17:82:3b:bc:c8:c1:1b:f6:b0:05:8e:ec:79:
c5:12:70:1f:df:34:9b:08:a2:fd:7d:c2:23:61:bb:
17:50:10:c0:27:5d:32:5b:df:4e:74:25:84:8e:a0:
83:6f:de:51:4c:26:ce:b6:53:b5:ee:b9:5a:18:1b:
41:1e:14:fb:3f:e6:9e:cc:1c:1e:5b:48:ca:b8:21:
42:63:fe:39:cf:3c:d1:71:45:6e:b1:bd:34:5a:82:
5b:f1:5d:6d:95:1f:31:a2:d5:72:49:2d:4b:b4:a8:
83:a0:14:39:93:0a:c0:5a:91:8a:0e:82:02:9b:ff:
82:36:65:5a:c1:07:5b:e3:b5:d2:f6:01:86:a6:53:
c6:ca:0f:87:ae:b0:77:ee:63:80:f9:29:1b:4b:99:
c0:03:6d:f7:47:af:e2:47:a9:56:f9:4f:c7:e4:56:
78:fc:a9:11:bb:44:74:88:ce:e5:55:3a:de:e2:8c:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:BF:FE:B4:30:D3:5E:53:69:A0:4E:92:65:B8:70:1C:F5:6E:E8
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/rvS__rQw015TaaBOkmW4cBz1bug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.33.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b2:f2:03:2e:d9:78:e4:fe:c4:e4:c3:7c:e5:f3:8d:90:12:
ba:79:5d:ec:e6:bc:b6:ab:76:ba:41:8f:18:a6:d5:f4:ae:be:
a7:36:db:8b:78:b4:b5:94:3e:84:17:5c:22:38:10:01:fa:ae:
41:c1:b8:fe:cc:83:97:d5:1e:d6:a4:5b:fb:d9:77:37:a4:26:
3d:ea:9f:b2:78:90:53:30:24:fb:48:e1:66:6a:02:f0:e8:e3:
e3:a3:64:88:0c:35:38:6a:75:f4:dd:f4:82:20:2b:79:3c:61:
4d:d9:1b:24:9e:d3:1d:3a:33:b6:8e:ce:d2:e7:7b:d8:3b:15:
18:a5:1b:9f:ef:54:84:66:bc:28:ef:aa:0b:b4:17:0d:28:40:
99:4b:c8:3f:97:67:c7:d5:e1:19:88:d9:0e:15:9d:d9:f6:dc:
11:83:8b:ec:74:da:05:6e:71:e1:3f:17:55:49:63:57:b9:e0:
08:bf:0c:1c:a9:2c:bf:26:1e:b7:76:3c:b8:36:83:57:97:84:
31:80:0f:68:63:78:30:dc:55:de:2b:88:2f:19:e3:ae:32:35:
03:0c:54:85:78:10:9f:32:13:43:db:0d:f8:20:78:72:b3:a8:
68:d6:f2:5d:fa:dc:72:48:09:a9:64:42:1b:4d:2c:7a:d5:d9:
df:79:bc:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6taN7M2kKACFDgd9gbkXSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjYwNjA5MTcyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWY0YmZmZWI0MzBkMzVlNTM2OWEwNGU5MjY1Yjg3MDFjZjU2ZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYT0JCpYNNWzsa2bBD1fAWGF8ZTa
nfDq87cMBjbhqk8io2rGewq8Pnih0hjtk36j/poPJlIqU1+nzJ3k0dbBeSeuvdtV
5DTSwX2qnxeCO7zIwRv2sAWO7HnFEnAf3zSbCKL9fcIjYbsXUBDAJ10yW99OdCWE
jqCDb95RTCbOtlO17rlaGBtBHhT7P+aezBweW0jKuCFCY/45zzzRcUVusb00WoJb
8V1tlR8xotVySS1LtKiDoBQ5kwrAWpGKDoICm/+CNmVawQdb47XS9gGGplPGyg+H
rrB37mOA+SkbS5nAA233R6/iR6lW+U/H5FZ4/KkRu0R0iM7lVTre4oxMqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK70v/60MNNeU2mgTpJluHAc9W7oMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvcnZTX19yUXcwMTVUYWFCT2ttVzRjQnoxYnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SGwMA0G
CSqGSIb3DQEBCwUAA4IBAQBrsvIDLtl45P7E5MN85fONkBK6eV3s5ry2q3a6QY8Y
ptX0rr6nNtuLeLS1lD6EF1wiOBAB+q5Bwbj+zIOX1R7WpFv72Xc3pCY96p+yeJBT
MCT7SOFmagLw6OPjo2SIDDU4anX03fSCICt5PGFN2RskntMdOjO2js7S53vYOxUY
pRuf71SEZrwo76oLtBcNKECZS8g/l2fH1eEZiNkOFZ3Z9twRg4vsdNoFbnHhPxdV
SWNXueAIvwwcqSy/Jh63djy4NoNXl4QxgA9oY3gw3FXeK4gvGeOuMjUDDFSFeBCf
MhND2w34IHhys6ho1vJd+txySAmpZEIbTSx61dnfebz0
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:14 2026 by rpki-client