Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ldw4ioHmIijQ6bCyxYWiPrxQGrE.roa
File: ldw4ioHmIijQ6bCyxYWiPrxQGrE.roa (raw, json)
Hash identifier: Bq7kjO6bG4ajwoA9Mwx1iwLqEfduvyDFSVFyaOVDGjM=
Subject key identifier: 95:DC:38:8A:81:E6:22:28:D0:E9:B0:B2:C5:85:A2:3E:BC:50:1A:B1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D6926241C97489339B3F0CD055E92A599
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ldw4ioHmIijQ6bCyxYWiPrxQGrE.roa
Signing time: Tue 07 Apr 2026 18:13:20 +0000
ROA not before: Tue 07 Apr 2026 18:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:26:24:1c:97:48:93:39:b3:f0:cd:05:5e:92:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 7 18:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95dc388a81e62228d0e9b0b2c585a23ebc501ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:f4:5d:92:6f:7d:4f:86:72:de:b9:6b:ba:
a8:15:f8:2d:8d:44:88:da:47:d0:5a:33:9c:f9:30:
d5:41:48:5d:a1:19:53:df:11:e2:c9:3b:c4:ae:0f:
07:e8:c2:81:ec:32:25:d6:69:80:e0:61:18:a6:d6:
a8:e6:db:8f:84:98:72:09:5a:bb:eb:4d:db:fd:71:
32:b0:ea:ef:bf:09:ba:4d:3e:2a:66:5c:94:8f:43:
0a:b9:c6:4b:54:76:ee:ce:f3:fb:58:09:81:17:23:
65:9b:e2:a5:1e:25:b0:9b:1c:56:ab:bf:e6:d9:de:
25:46:cc:be:78:9c:0b:52:c7:26:ad:a2:fe:12:3d:
8c:86:55:58:74:8f:8e:6a:db:8a:98:07:65:50:c8:
6a:f6:5d:d3:5b:02:e5:81:21:97:bb:73:8e:53:43:
52:26:2c:01:87:d0:9a:4a:c4:82:24:65:d1:d5:3b:
1e:de:2d:02:61:4d:39:a2:63:54:9e:30:cb:59:45:
33:fa:19:91:11:ab:2b:1f:d9:f3:7c:46:53:75:54:
a4:89:81:73:30:48:0d:b1:f5:b1:ae:7f:7f:d8:94:
23:c0:5d:14:92:63:c6:4d:b2:f7:4e:ce:41:ad:ed:
db:10:e2:a7:71:1b:30:44:c6:8f:52:c5:b1:79:95:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DC:38:8A:81:E6:22:28:D0:E9:B0:B2:C5:85:A2:3E:BC:50:1A:B1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ldw4ioHmIijQ6bCyxYWiPrxQGrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ef:05:d0:72:99:1d:9e:f0:1c:3e:35:c0:ce:e5:96:98:a0:
b5:20:c3:7e:63:db:0a:a9:8c:25:de:22:ae:0f:ee:83:74:a5:
eb:fc:3c:41:f3:06:86:2f:95:6a:cb:89:e5:5b:4c:d4:2f:3f:
da:1d:5a:d3:89:c2:5b:34:dc:6d:eb:c8:88:4b:4b:82:20:a1:
03:82:78:1a:cc:4c:ae:aa:e8:28:32:bc:fa:ff:60:44:53:7a:
35:c8:46:ad:4c:c4:65:c4:29:09:e7:06:1b:72:41:6e:0c:4a:
ad:d2:37:55:12:c8:01:03:c2:ed:08:c3:ff:e3:45:27:0e:d3:
97:53:6b:36:76:fb:4e:69:9f:5f:e6:6e:06:47:3a:c9:84:3a:
25:7b:1c:88:02:23:44:f7:ed:28:51:b2:7b:73:13:53:9b:d6:
f5:fb:c7:5b:e6:ab:22:95:e9:11:75:80:3d:05:6c:fc:89:dc:
48:0a:b3:b5:25:cf:67:d1:ae:d8:0a:53:4d:4f:a5:97:99:e1:
fb:75:4c:83:e2:64:62:15:56:5c:c4:a1:77:a4:d6:b9:43:30:
66:0e:bb:02:9f:05:6c:e9:5e:a5:07:a7:5f:17:06:9f:9a:15:
c7:83:87:1d:b3:24:b7:d3:13:e0:bc:f5:6b:63:2d:de:0c:20:
e3:9e:11:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1pJiQcl0iTObPwzQVekqWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwNDA3MTgxMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWRjMzg4YTgxZTYyMjI4ZDBlOWIwYjJjNTg1YTIzZWJjNTAxYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspX0XZJvfU+Gct65a7qoFfgtjUSI
2kfQWjOc+TDVQUhdoRlT3xHiyTvErg8H6MKB7DIl1mmA4GEYptao5tuPhJhyCVq7
603b/XEysOrvvwm6TT4qZlyUj0MKucZLVHbuzvP7WAmBFyNlm+KlHiWwmxxWq7/m
2d4lRsy+eJwLUscmraL+Ej2MhlVYdI+OatuKmAdlUMhq9l3TWwLlgSGXu3OOU0NS
JiwBh9CaSsSCJGXR1Tse3i0CYU05omNUnjDLWUUz+hmREasrH9nzfEZTdVSkiYFz
MEgNsfWxrn9/2JQjwF0UkmPGTbL3Ts5Bre3bEOKncRswRMaPUsWxeZXnhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXcOIqB5iIo0OmwssWFoj68UBqxMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvbGR3NGlvSG1JaWpRNmJDeXhZV2lQcnhRR3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwajSMA0G
CSqGSIb3DQEBCwUAA4IBAQC77wXQcpkdnvAcPjXAzuWWmKC1IMN+Y9sKqYwl3iKu
D+6DdKXr/DxB8waGL5Vqy4nlW0zULz/aHVrTicJbNNxt68iIS0uCIKEDgngazEyu
qugoMrz6/2BEU3o1yEatTMRlxCkJ5wYbckFuDEqt0jdVEsgBA8LtCMP/40UnDtOX
U2s2dvtOaZ9f5m4GRzrJhDolexyIAiNE9+0oUbJ7cxNTm9b1+8db5qsilekRdYA9
BWz8idxICrO1Jc9n0a7YClNNT6WXmeH7dUyD4mRiFVZcxKF3pNa5QzBmDrsCnwVs
6V6lB6dfFwafmhXHg4cdsyS30xPgvPVrYy3eDCDjnhEu
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:36 2026 by rpki-client