Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/lVW5cOzHzGbnaaY9bfysyMM8RLA.roa
File: lVW5cOzHzGbnaaY9bfysyMM8RLA.roa (raw, json)
Hash identifier: Z4jVG7nZlFXbL2sZ28GZ6ljZQBH0cl0vSkz1KiaxwyQ=
Subject key identifier: 95:55:B9:70:EC:C7:CC:66:E7:69:A6:3D:6D:FC:AC:C8:C3:3C:44:B0
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019FA3AB61B7CB817491399D48879C565105
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/lVW5cOzHzGbnaaY9bfysyMM8RLA.roa
Signing time: Mon 27 Jul 2026 13:02:25 +0000
ROA not before: Mon 27 Jul 2026 13:02:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215599
IP address blocks: 46.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:ab:61:b7:cb:81:74:91:39:9d:48:87:9c:56:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 27 13:02:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9555b970ecc7cc66e769a63d6dfcacc8c33c44b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:0a:0c:21:db:b5:67:a9:7d:1a:48:08:61:
13:da:e7:b5:cb:01:20:8d:62:a2:ee:f6:de:a7:2a:
02:2d:c6:b5:80:4a:68:1d:9d:04:13:03:3e:56:7a:
ed:c5:d6:5c:b8:50:6c:9f:aa:b1:eb:9b:8a:39:e7:
98:e2:32:ba:b5:e1:77:0e:d1:51:c8:ad:f0:d2:ff:
f9:7b:87:00:c1:5a:ea:46:e0:cd:35:99:b5:f7:2a:
90:63:64:21:46:d7:17:00:ee:76:bb:1e:5e:a6:48:
ea:97:b3:e0:ef:8c:a1:f0:92:32:3e:89:dc:3e:9a:
c2:90:b7:c7:7c:94:96:7e:d9:db:0f:86:3f:c6:60:
0d:28:b1:5a:2c:6b:b7:56:1c:27:70:60:9a:8e:8c:
4a:5a:9d:80:df:be:27:07:a7:2b:14:a4:af:86:9e:
11:1a:1c:e8:b9:5e:f8:2a:f3:9e:5b:81:22:be:5a:
55:d6:04:1e:8c:a8:71:54:7e:2b:6a:6e:5e:e3:5e:
f7:20:16:3c:e3:dd:90:45:b4:d3:ed:3d:3f:b7:bf:
3f:e7:a9:74:e5:6c:5c:56:f0:ee:06:4d:1f:57:d6:
55:e8:31:5c:57:d8:ab:d3:8f:aa:1b:75:2d:99:4b:
23:f9:cc:e8:8b:86:86:01:e0:62:03:e1:7b:0a:ea:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:B9:70:EC:C7:CC:66:E7:69:A6:3D:6D:FC:AC:C8:C3:3C:44:B0
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/lVW5cOzHzGbnaaY9bfysyMM8RLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e6:ac:06:ca:fc:52:c4:8e:bb:36:25:e1:ff:71:eb:5b:2d:
29:03:9b:01:28:83:72:08:4d:4a:e0:9b:c7:55:4b:04:2f:66:
24:95:40:1e:5d:1e:68:71:f8:05:13:85:c1:bd:9a:0b:b6:4d:
5e:92:25:b4:08:c6:22:70:94:15:03:46:13:0a:4a:8f:51:4c:
b7:00:d1:a8:be:32:a2:f0:72:8f:4d:18:3e:97:aa:db:97:34:
92:84:ce:de:79:05:9f:af:ca:b8:07:bb:92:a0:dc:ea:79:14:
92:d1:6d:fe:5f:02:b5:f1:9c:60:e0:a9:b9:63:e0:38:da:50:
af:8a:14:cd:8d:65:fd:c1:e3:88:40:96:25:72:c5:3d:6e:51:
6f:e3:2e:40:00:51:0f:90:d3:21:ff:c1:36:80:79:b9:47:bb:
10:78:fe:0f:aa:6e:98:d4:b7:25:9c:89:6d:60:d7:72:b3:e6:
86:1e:3b:83:16:20:11:38:b2:55:b5:c3:d5:56:34:6d:0c:c9:
8d:1a:9d:77:88:0e:91:c5:bb:c0:39:b1:34:cf:24:e6:1e:96:
26:e5:40:a4:c5:a1:46:67:08:60:9d:76:72:85:9f:49:42:8c:
44:b8:3b:da:f2:6d:72:11:3b:4c:15:10:70:25:2d:58:ae:aa:
f1:da:9a:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+jq2G3y4F0kTmdSIecVlEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjYwNzI3MTMwMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTU1Yjk3MGVjYzdjYzY2ZTc2OWE2M2Q2ZGZjYWNjOGMzM2M0NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn8KDCHbtWepfRpICGET2ue1ywEg
jWKi7vbepyoCLca1gEpoHZ0EEwM+VnrtxdZcuFBsn6qx65uKOeeY4jK6teF3DtFR
yK3w0v/5e4cAwVrqRuDNNZm19yqQY2QhRtcXAO52ux5epkjql7Pg74yh8JIyPonc
PprCkLfHfJSWftnbD4Y/xmANKLFaLGu3VhwncGCajoxKWp2A374nB6crFKSvhp4R
GhzouV74KvOeW4EivlpV1gQejKhxVH4ram5e4173IBY8492QRbTT7T0/t78/56l0
5WxcVvDuBk0fV9ZV6DFcV9ir04+qG3UtmUsj+czoi4aGAeBiA+F7CurvXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVVuXDsx8xm52mmPW38rMjDPESwMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvbFZXNWNPekh6R2JuYWFZOWJmeXN5TU04UkxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALujrMA0G
CSqGSIb3DQEBCwUAA4IBAQCT5qwGyvxSxI67NiXh/3HrWy0pA5sBKINyCE1K4JvH
VUsEL2YklUAeXR5ocfgFE4XBvZoLtk1ekiW0CMYicJQVA0YTCkqPUUy3ANGovjKi
8HKPTRg+l6rblzSShM7eeQWfr8q4B7uSoNzqeRSS0W3+XwK18Zxg4Km5Y+A42lCv
ihTNjWX9weOIQJYlcsU9blFv4y5AAFEPkNMh/8E2gHm5R7sQeP4Pqm6Y1LclnIlt
YNdys+aGHjuDFiAROLJVtcPVVjRtDMmNGp13iA6RxbvAObE0zyTmHpYm5UCkxaFG
ZwhgnXZyhZ9JQoxEuDva8m1yETtMFRBwJS1Yrqrx2prI
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:43 2026 by rpki-client