Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/cV7dC0pNAKEULz7tUevMHVPoO2I.roa
File: cV7dC0pNAKEULz7tUevMHVPoO2I.roa (raw, json)
Hash identifier: adieXG5yJS9ZLy1/S1WWQwhI/4aQn97j+i1QEsFv1q4=
Subject key identifier: 71:5E:DD:0B:4A:4D:00:A1:14:2F:3E:ED:51:EB:CC:1D:53:E8:3B:62
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 019C9442B71C243C86F20EA5F4F5FF2CA57B
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/cV7dC0pNAKEULz7tUevMHVPoO2I.roa
Signing time: Wed 25 Feb 2026 10:05:26 +0000
ROA not before: Wed 25 Feb 2026 10:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34471
IP address blocks: 194.104.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:42:b7:1c:24:3c:86:f2:0e:a5:f4:f5:ff:2c:a5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Feb 25 10:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=715edd0b4a4d00a1142f3eed51ebcc1d53e83b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:3d:e1:20:51:50:76:8b:aa:a0:34:28:2d:
a4:7b:86:64:b4:85:f9:43:0c:a3:6e:9b:07:70:b2:
aa:fe:04:6d:cb:bb:0b:0e:79:29:f9:aa:2e:3c:c3:
ca:35:3d:28:fc:2a:b5:46:58:ce:7e:8b:4a:9a:39:
63:72:36:c8:b4:17:df:65:12:d8:ea:a2:1e:66:90:
43:92:ca:c5:5c:4b:53:d3:c1:32:32:96:8a:12:d4:
c9:90:d7:e6:c2:00:47:a7:f9:8a:66:a0:9a:a8:8d:
07:72:94:1a:27:c1:00:23:3f:2d:cf:dd:d6:bb:4a:
9a:09:33:2d:9d:20:4e:21:6e:3f:b8:16:2f:d3:50:
d2:f7:85:5e:aa:3b:b9:54:83:c2:8b:00:4e:80:23:
08:72:ad:02:be:1a:33:ca:b4:44:ec:04:e2:98:c0:
a3:2b:c7:1d:3a:c0:28:11:86:29:72:4a:f7:da:61:
38:3a:c1:9a:30:7d:d8:39:23:3b:ba:72:e0:3b:58:
82:a3:46:48:c7:e2:2c:c1:65:98:99:70:99:73:5f:
62:1e:86:61:72:23:22:bd:c9:40:18:e7:db:bd:21:
e2:8c:a2:b4:d1:eb:00:c6:37:ea:85:9b:5d:55:2f:
40:83:d4:0e:ce:38:81:3d:da:17:aa:d3:1d:07:14:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:DD:0B:4A:4D:00:A1:14:2F:3E:ED:51:EB:CC:1D:53:E8:3B:62
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/cV7dC0pNAKEULz7tUevMHVPoO2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:84:b7:1d:a8:38:03:1b:6a:02:bc:58:e6:92:81:d2:27:16:
ae:47:3a:bd:86:1e:4d:6c:0d:cb:10:f4:03:57:44:29:39:7c:
d4:17:d2:c7:3d:3c:8e:69:ab:54:03:e9:96:31:9b:da:9f:ee:
e2:ad:16:5e:5e:f7:be:a6:be:93:19:20:79:e5:09:e0:cb:82:
14:a0:9e:6c:b7:02:7b:5e:fc:52:d5:70:9a:02:d7:d3:95:a5:
ec:21:1f:4f:f0:e3:dc:0b:39:9f:4d:08:4d:f9:51:71:03:e7:
f5:61:47:97:37:79:de:30:57:c3:57:ae:f1:c2:4a:14:cd:af:
62:cc:76:66:8d:3f:a1:cc:9e:87:5c:6c:38:b0:65:20:c2:55:
9c:d2:09:b0:ad:06:6a:22:e6:6f:96:06:bd:8e:d3:eb:90:dd:
0e:c5:42:d5:94:c0:ac:ad:aa:a0:08:f9:ab:68:fe:3b:d7:a3:
aa:64:47:5a:19:b8:54:18:84:11:23:2a:b7:73:f5:0b:97:48:
92:b6:42:2a:c4:7c:bf:1f:c8:e3:3c:66:ca:d8:63:45:52:63:
45:c7:0e:02:dd:64:f1:88:4b:b2:49:c3:e6:c5:ea:4c:40:ee:
a2:6d:58:16:60:5f:17:d6:ea:c5:13:e6:af:6c:27:33:32:be:
57:75:a2:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyUQrccJDyG8g6l9PX/LKV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjYwMjI1MTAwNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTVlZGQwYjRhNGQwMGExMTQyZjNlZWQ1MWViY2MxZDUzZTgzYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphs94SBRUHaLqqA0KC2ke4ZktIX5
QwyjbpsHcLKq/gRty7sLDnkp+aouPMPKNT0o/Cq1RljOfotKmjljcjbItBffZRLY
6qIeZpBDksrFXEtT08EyMpaKEtTJkNfmwgBHp/mKZqCaqI0HcpQaJ8EAIz8tz93W
u0qaCTMtnSBOIW4/uBYv01DS94Veqju5VIPCiwBOgCMIcq0CvhozyrRE7ATimMCj
K8cdOsAoEYYpckr32mE4OsGaMH3YOSM7unLgO1iCo0ZIx+IswWWYmXCZc19iHoZh
ciMivclAGOfbvSHijKK00esAxjfqhZtdVS9Ag9QOzjiBPdoXqtMdBxSDqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHFe3QtKTQChFC8+7VHrzB1T6DtiMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvY1Y3ZEMwcE5BS0VVTHo3dFVldk1IVlBvTzJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjnMA0G
CSqGSIb3DQEBCwUAA4IBAQBahLcdqDgDG2oCvFjmkoHSJxauRzq9hh5NbA3LEPQD
V0QpOXzUF9LHPTyOaatUA+mWMZvan+7irRZeXve+pr6TGSB55Qngy4IUoJ5stwJ7
XvxS1XCaAtfTlaXsIR9P8OPcCzmfTQhN+VFxA+f1YUeXN3neMFfDV67xwkoUza9i
zHZmjT+hzJ6HXGw4sGUgwlWc0gmwrQZqIuZvlga9jtPrkN0OxULVlMCsraqgCPmr
aP4716OqZEdaGbhUGIQRIyq3c/ULl0iStkIqxHy/H8jjPGbK2GNFUmNFxw4C3WTx
iEuyScPmxepMQO6ibVgWYF8X1urFE+avbCczMr5XdaJf
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:36:16 2026 by rpki-client