Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/P_w-NRk3sq4FN8wNQZlbDCGKay0.roa
File: P_w-NRk3sq4FN8wNQZlbDCGKay0.roa (raw, json)
Hash identifier: BFcjOL0TTkDSTQE9PAJPoPKs+FESp9oTcwSOntg8xNM=
Subject key identifier: 3F:FC:3E:35:19:37:B2:AE:05:37:CC:0D:41:99:5B:0C:21:8A:6B:2D
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019FA41DA6CA831B01A743D49A5D3ACE0589
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/P_w-NRk3sq4FN8wNQZlbDCGKay0.roa
Signing time: Mon 27 Jul 2026 15:07:14 +0000
ROA not before: Mon 27 Jul 2026 15:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 130.183.0.0/16 maxlen: 16
134.104.0.0/16 maxlen: 16
139.19.0.0/16 maxlen: 16
141.5.0.0/16 maxlen: 24
192.68.254.0/24 maxlen: 24
2a02:d480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:1d:a6:ca:83:1b:01:a7:43:d4:9a:5d:3a:ce:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Jul 27 15:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ffc3e351937b2ae0537cc0d41995b0c218a6b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:0d:7e:47:13:df:a6:cf:d5:89:12:59:dc:
f5:f9:79:cb:e9:a5:b8:29:52:7a:30:e2:5c:2d:4c:
51:83:d7:45:c9:d0:c4:98:3c:9d:40:40:1a:53:ce:
40:e8:42:f1:00:33:36:70:ce:93:a1:1b:ab:c5:c7:
f5:aa:86:a6:55:db:bf:99:6b:ec:70:04:56:a8:b9:
8c:d0:18:c1:cf:7a:dd:a4:84:1f:84:37:18:02:4d:
2e:37:9d:03:35:59:8c:fd:19:64:9b:52:50:37:99:
ce:74:51:e5:68:bc:a0:a4:6b:6b:57:5f:b1:f7:3e:
94:f4:81:02:13:52:05:5b:1b:2b:9b:35:22:45:f7:
7d:eb:d6:9c:c1:62:ee:91:27:7b:b4:dd:47:dd:df:
c4:5b:0d:e6:5c:a6:8a:8e:63:fd:48:22:3d:1f:9e:
6c:f5:53:67:06:fe:ff:3d:12:2a:93:b1:05:eb:49:
ec:0a:04:07:b4:8e:a3:b3:13:25:ef:a7:b3:85:58:
44:50:02:c9:eb:3e:44:e5:ac:db:4e:b4:8c:0d:8b:
e4:db:94:ec:e1:a8:9c:3c:93:27:0a:12:88:a4:69:
7d:d2:ac:26:a1:a8:de:fc:8d:f7:77:23:24:5f:d1:
54:9b:1c:0e:bf:99:76:55:bc:64:41:d2:56:05:2e:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:3E:35:19:37:B2:AE:05:37:CC:0D:41:99:5B:0C:21:8A:6B:2D
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/P_w-NRk3sq4FN8wNQZlbDCGKay0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.183.0.0/16
134.104.0.0/16
139.19.0.0/16
141.5.0.0/16
192.68.254.0/24
IPv6:
2a02:d480::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ba:66:1e:c7:fb:41:ee:34:d1:3b:60:98:6b:8d:84:d4:bf:
2d:88:fe:71:26:38:f6:3f:02:ba:00:f2:5b:6b:82:41:09:c1:
b8:56:fa:fe:50:21:c4:11:c7:c2:72:2d:54:5c:f9:29:3b:1c:
02:31:24:a4:76:bc:d9:4e:7b:9b:ab:42:ff:0a:37:ae:2c:86:
47:92:4e:3c:b6:08:f5:1b:7c:97:f5:31:cc:bf:c8:65:57:3b:
45:32:39:48:18:64:fc:63:3b:08:31:95:be:a7:ac:2f:87:b7:
5a:82:98:21:0b:c6:53:b4:a8:b5:12:c3:a9:ad:51:54:04:97:
9e:df:8c:89:74:8b:20:85:b2:bb:d2:82:2b:34:92:05:f6:00:
96:60:65:a1:ab:13:92:df:91:a7:93:44:fa:ea:b9:14:74:c6:
0a:00:e6:05:36:7a:2b:58:08:a6:ff:37:ed:91:2b:7a:42:e8:
d7:dc:8f:75:43:f6:a3:45:22:0d:89:18:5b:47:17:71:6b:37:
28:71:3b:03:73:a8:9a:4b:ad:1d:a7:8f:9e:a3:7d:44:19:51:
56:2c:1d:bd:66:be:4c:b0:4c:5b:8e:56:0a:c4:16:11:a3:5d:
85:79:e7:a3:70:d7:6c:3e:6e:d1:ca:c2:d7:92:c4:66:ae:1b:
02:20:40:c5
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZ+kHabKgxsBp0PUml06zgWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx
ZDYyNDQwHhcNMjYwNzI3MTUwNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmZjM2UzNTE5MzdiMmFlMDUzN2NjMGQ0MTk5NWIwYzIxOGE2YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunwNfkcT36bP1YkSWdz1+XnL6aW4
KVJ6MOJcLUxRg9dFydDEmDydQEAaU85A6ELxADM2cM6ToRurxcf1qoamVdu/mWvs
cARWqLmM0BjBz3rdpIQfhDcYAk0uN50DNVmM/Rlkm1JQN5nOdFHlaLygpGtrV1+x
9z6U9IECE1IFWxsrmzUiRfd969acwWLukSd7tN1H3d/EWw3mXKaKjmP9SCI9H55s
9VNnBv7/PRIqk7EF60nsCgQHtI6jsxMl76ezhVhEUALJ6z5E5azbTrSMDYvk25Ts
4aicPJMnChKIpGl90qwmoaje/I33dyMkX9FUmxwOv5l2VbxkQdJWBS77TwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFD/8PjUZN7KuBTfMDUGZWwwhimstMB8GA1UdIwQY
MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt
NTBjMTZiZGQ1YzI0LzEvUF93LU5SazNzcTRGTjh3TlFabGJEQ0dLYXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0
LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwMAgrcDAwCG
aAMDAIsTAwMAjQUDBADARP4wDQQCAAIwBwMFACoC1IAwDQYJKoZIhvcNAQELBQAD
ggEBAG26Zh7H+0HuNNE7YJhrjYTUvy2I/nEmOPY/AroA8ltrgkEJwbhW+v5QIcQR
x8JyLVRc+Sk7HAIxJKR2vNlOe5urQv8KN64shkeSTjy2CPUbfJf1Mcy/yGVXO0Uy
OUgYZPxjOwgxlb6nrC+Ht1qCmCELxlO0qLUSw6mtUVQEl57fjIl0iyCFsrvSgis0
kgX2AJZgZaGrE5LfkaeTRPrquRR0xgoA5gU2eitYCKb/N+2RK3pC6Nfcj3VD9qNF
Ig2JGFtHF3FrNyhxOwNzqJpLrR2nj56jfUQZUVYsHb1mvkywTFuOVgrEFhGjXYV5
56Nw12w+btHKwteSxGauGwIgQMU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:16 2026 by rpki-client