Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/pCxUrX3JS6C-vwjylp3PoHtHz9o.roa
File: pCxUrX3JS6C-vwjylp3PoHtHz9o.roa (raw, json)
Hash identifier: HU3ykSkKtwWdnQCYdZshRCL8vy57v9FukL0OXuPtRS0=
Subject key identifier: A4:2C:54:AD:7D:C9:4B:A0:BE:BF:08:F2:96:9D:CF:A0:7B:47:CF:DA
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D927CB7FA9C92E373DD2C31EF0C55F4B8
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/pCxUrX3JS6C-vwjylp3PoHtHz9o.roa
Signing time: Wed 15 Apr 2026 18:52:20 +0000
ROA not before: Wed 15 Apr 2026 18:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 132.243.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:7c:b7:fa:9c:92:e3:73:dd:2c:31:ef:0c:55:f4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 15 18:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a42c54ad7dc94ba0bebf08f2969dcfa07b47cfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:18:e0:f0:62:e5:61:20:80:d5:65:3f:21:
f2:56:53:94:7c:03:e5:ec:14:fe:d1:fe:32:f5:fb:
fd:3b:6b:e4:f2:40:79:37:dc:d3:aa:78:31:d1:bd:
b9:6a:e3:cd:70:4d:24:6b:16:6d:2d:e5:02:6d:27:
2f:17:b4:1d:ab:21:ee:a4:7d:fc:5b:96:49:b1:6b:
e1:9a:64:35:ef:cd:9e:30:c9:ee:9b:7c:5e:f9:03:
1c:8d:fc:2a:6a:b3:30:5f:0b:e7:05:86:e4:d7:78:
d9:b1:67:2d:d3:e9:33:7f:6d:ed:84:10:72:d5:fb:
93:ae:9f:8c:36:33:8a:ae:30:15:d0:ab:26:b7:12:
87:a9:6a:07:08:fa:c4:f2:ab:50:f3:f6:f5:c6:65:
d3:51:f5:71:bf:90:42:df:db:d8:78:a4:65:a4:19:
a5:b8:2f:15:39:7d:d9:17:af:55:8b:74:36:c9:12:
4c:bf:09:8e:fc:3c:5a:a4:54:0d:8f:b8:12:b6:26:
7e:33:e4:ae:25:e1:19:29:6f:2b:97:e1:3e:da:98:
54:02:56:e3:1c:c7:3d:9e:8c:5e:0a:e4:3d:a7:63:
02:e2:97:7d:9d:9d:41:85:33:4d:18:dd:8f:a2:fb:
8a:95:03:3b:b3:46:ac:2a:88:aa:bd:1f:ca:6c:e9:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:54:AD:7D:C9:4B:A0:BE:BF:08:F2:96:9D:CF:A0:7B:47:CF:DA
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/pCxUrX3JS6C-vwjylp3PoHtHz9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.197.0/24
Signature Algorithm: sha256WithRSAEncryption
33:de:4a:37:b0:42:19:3a:50:31:f9:56:b9:fa:58:53:b3:0c:
6f:fa:5a:90:c0:e3:59:48:0a:4e:fd:db:ec:58:fd:be:ea:1f:
76:2b:e8:c9:a3:21:3c:76:a3:a8:b5:c2:24:9c:cd:13:28:ef:
3b:11:64:81:00:b1:18:5f:47:a4:f2:88:a2:6d:d1:33:17:2d:
dd:ac:46:8a:52:d0:d8:c1:d3:67:fb:52:3f:33:07:ce:64:e3:
76:14:fe:b6:f7:dd:73:33:94:fd:69:64:a7:9e:0d:85:8b:ab:
86:ba:f2:37:69:ed:20:ee:d9:79:63:75:66:ac:44:cb:64:a3:
40:dd:4f:aa:66:bf:3c:f6:f1:4c:f0:26:ac:3a:3d:96:7e:31:
7b:84:5c:ef:41:4a:cb:bd:56:61:9a:9b:56:72:8d:ed:03:7c:
1c:d1:03:e0:08:75:a3:2b:3e:2f:0e:04:a1:d8:eb:75:0b:58:
93:75:40:78:90:3c:9d:96:44:8e:6d:89:3b:75:f6:df:ee:71:
98:3f:64:84:56:45:bb:75:1b:e1:df:e7:52:e8:b0:5e:ce:95:
e9:a4:43:38:19:39:15:0b:f8:0e:ea:6c:99:16:16:22:87:77:
56:7d:c9:f6:0c:27:cd:90:42:dd:b2:6a:f1:07:bd:63:5f:f4:
89:77:a2:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2SfLf6nJLjc90sMe8MVfS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwNDE1MTg1MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDJjNTRhZDdkYzk0YmEwYmViZjA4ZjI5NjlkY2ZhMDdiNDdjZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3cY4PBi5WEggNVlPyHyVlOUfAPl
7BT+0f4y9fv9O2vk8kB5N9zTqngx0b25auPNcE0kaxZtLeUCbScvF7QdqyHupH38
W5ZJsWvhmmQ1782eMMnum3xe+QMcjfwqarMwXwvnBYbk13jZsWct0+kzf23thBBy
1fuTrp+MNjOKrjAV0KsmtxKHqWoHCPrE8qtQ8/b1xmXTUfVxv5BC39vYeKRlpBml
uC8VOX3ZF69Vi3Q2yRJMvwmO/DxapFQNj7gStiZ+M+SuJeEZKW8rl+E+2phUAlbj
HMc9noxeCuQ9p2MC4pd9nZ1BhTNNGN2PovuKlQM7s0asKoiqvR/KbOmTKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQsVK19yUugvr8I8padz6B7R8/aMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvcEN4VXJYM0pTNkMtdndqeWxwM1BvSHRIejlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhPPFMA0G
CSqGSIb3DQEBCwUAA4IBAQAz3ko3sEIZOlAx+Va5+lhTswxv+lqQwONZSApO/dvs
WP2+6h92K+jJoyE8dqOotcIknM0TKO87EWSBALEYX0ek8oiibdEzFy3drEaKUtDY
wdNn+1I/MwfOZON2FP62991zM5T9aWSnng2Fi6uGuvI3ae0g7tl5Y3VmrETLZKNA
3U+qZr889vFM8CasOj2WfjF7hFzvQUrLvVZhmptWco3tA3wc0QPgCHWjKz4vDgSh
2Ot1C1iTdUB4kDydlkSObYk7dfbf7nGYP2SEVkW7dRvh3+dS6LBezpXppEM4GTkV
C/gO6myZFhYih3dWfcn2DCfNkELdsmrxB71jX/SJd6Jx
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:02 2026 by rpki-client