Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa
File: CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa (raw, json)
Hash identifier: EZnthEIUE9SeMIsjqwd3wJXvbqbZ76IbJjPCTSp53A8=
Subject key identifier: 08:0B:C3:66:5D:2A:30:57:71:67:C2:D5:66:87:01:2A:D7:4B:CC:72
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019E448300F75F0F0A8AC97EB3C33142F197
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa
Signing time: Wed 20 May 2026 08:31:36 +0000
ROA not before: Wed 20 May 2026 08:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203092
IP address blocks: 185.218.24.0/22 maxlen: 24
185.218.26.0/24 maxlen: 24
2a0b:d040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:83:00:f7:5f:0f:0a:8a:c9:7e:b3:c3:31:42:f1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: May 20 08:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=080bc3665d2a30577167c2d56687012ad74bcc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:c7:87:3f:29:3c:59:bd:5d:da:c5:17:5a:
80:e4:be:15:13:bf:39:f3:b0:c1:89:60:bd:ae:ef:
e2:05:35:44:06:7d:f8:78:1a:4b:2f:cd:25:9e:c0:
1a:22:97:cb:0a:05:d7:c1:83:94:1c:64:b9:a0:18:
7e:17:15:26:72:4e:b4:a4:33:5a:5a:a1:42:c7:0d:
ac:61:42:9a:65:22:58:33:6b:6f:ab:5a:f7:35:fc:
f7:e0:56:7c:fe:e5:2e:c1:99:f7:40:88:0d:a7:a6:
22:c3:87:8a:11:fc:13:79:59:af:a1:04:00:6a:f1:
61:8f:e3:cf:23:ee:fd:c5:85:f8:c7:3f:a6:ed:c1:
3f:e2:5b:4c:00:37:df:e7:71:86:68:01:33:32:65:
fe:e4:55:96:a8:46:27:a2:1d:04:d3:b0:d8:5c:c0:
8c:47:6f:6a:8c:3e:07:51:dc:25:57:dc:96:a6:7f:
6d:65:cc:28:38:cf:48:3c:b0:6b:29:72:b8:9d:23:
c3:18:69:05:c1:6d:0e:7a:b1:ba:3f:e4:43:f7:0d:
56:2f:22:25:e5:c1:4d:4e:b2:d8:42:2f:2e:ee:8b:
80:a9:db:8e:06:11:16:5f:b0:5f:12:11:7c:24:b2:
0e:8c:09:ab:af:4e:2f:cc:0b:9c:19:a6:76:4d:c1:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:C3:66:5D:2A:30:57:71:67:C2:D5:66:87:01:2A:D7:4B:CC:72
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.24.0/22
IPv6:
2a0b:d040::/29
Signature Algorithm: sha256WithRSAEncryption
37:99:a2:da:73:80:46:08:90:cb:b2:82:15:66:4c:50:55:25:
a2:73:c0:3c:2e:3b:ae:cc:ad:a7:69:d1:08:cf:c6:f7:11:eb:
f0:8d:80:31:f5:c5:1e:81:e8:a3:d1:33:57:93:91:1a:91:38:
ba:af:92:2d:1c:0b:4e:aa:ee:68:19:d4:42:d1:4e:a2:fc:1e:
11:5c:e4:f9:33:de:db:ee:b1:e7:57:5a:1a:02:99:a3:b9:43:
db:d3:7e:85:a5:e1:08:d5:09:67:5e:13:8e:b8:d6:9c:0f:0b:
ed:a3:9c:ba:a9:18:30:94:c7:e8:ab:dc:3a:28:52:27:0e:cf:
96:5e:27:49:2b:8a:e0:af:9b:68:24:69:29:8f:25:d2:9c:11:
24:56:b2:f9:59:6b:d1:27:d5:00:0d:bd:df:a5:ae:5f:1f:82:
cf:1f:78:bc:fe:9e:04:b6:63:ed:7a:c8:10:cf:b5:ff:9b:64:
fe:af:13:8e:b5:7f:1c:fb:7a:65:d2:95:51:81:34:f6:05:cb:
15:ac:1d:df:e1:07:bd:96:96:e9:2b:1c:9f:da:a3:55:cb:96:
69:0c:d2:16:21:0f:87:7d:27:ce:51:7f:6b:0b:1d:cc:01:7e:
bf:48:e2:cb:11:64:00:a6:4f:cc:ba:9e:4f:d3:aa:f7:e1:6a:
71:07:88:ba
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ5EgwD3Xw8Kisl+s8MxQvGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm
M2VjNmYwHhcNMjYwNTIwMDgzMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBiYzM2NjVkMmEzMDU3NzE2N2MyZDU2Njg3MDEyYWQ3NGJjYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtbHhz8pPFm9XdrFF1qA5L4VE785
87DBiWC9ru/iBTVEBn34eBpLL80lnsAaIpfLCgXXwYOUHGS5oBh+FxUmck60pDNa
WqFCxw2sYUKaZSJYM2tvq1r3Nfz34FZ8/uUuwZn3QIgNp6Yiw4eKEfwTeVmvoQQA
avFhj+PPI+79xYX4xz+m7cE/4ltMADff53GGaAEzMmX+5FWWqEYnoh0E07DYXMCM
R29qjD4HUdwlV9yWpn9tZcwoOM9IPLBrKXK4nSPDGGkFwW0OerG6P+RD9w1WLyIl
5cFNTrLYQi8u7ouAqduOBhEWX7BfEhF8JLIOjAmrr04vzAucGaZ2TcFKrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAgLw2ZdKjBXcWfC1WaHASrXS8xyMB8GA1UdIwQY
MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt
ZGY1Y2U1NmU3YjRiLzEvQ0F2RFpsMHFNRmR4WjhMVlpvY0JLdGRMekhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi
LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudoYMA0E
AgACMAcDBQMqC9BAMA0GCSqGSIb3DQEBCwUAA4IBAQA3maLac4BGCJDLsoIVZkxQ
VSWic8A8LjuuzK2nadEIz8b3EevwjYAx9cUegeij0TNXk5EakTi6r5ItHAtOqu5o
GdRC0U6i/B4RXOT5M97b7rHnV1oaApmjuUPb036FpeEI1QlnXhOOuNacDwvto5y6
qRgwlMfoq9w6KFInDs+WXidJK4rgr5toJGkpjyXSnBEkVrL5WWvRJ9UADb3fpa5f
H4LPH3i8/p4EtmPtesgQz7X/m2T+rxOOtX8c+3pl0pVRgTT2BcsVrB3f4Qe9lpbp
Kxyf2qNVy5ZpDNIWIQ+HfSfOUX9rCx3MAX6/SOLLEWQApk/Mup5P06r34WpxB4i6
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:43 2026 by rpki-client