Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/cB7PC28F3bY-m09DAAeWUi3RUiA.roa
File: cB7PC28F3bY-m09DAAeWUi3RUiA.roa (raw, json)
Hash identifier: 3lEL6EkP5eBl9884xVL0N/vy5L6Tqe95mpKiy8EOZ7s=
Subject key identifier: 70:1E:CF:0B:6F:05:DD:B6:3E:9B:4F:43:00:07:96:52:2D:D1:52:20
Certificate issuer: /CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Certificate serial: 019FB2DA4016F274AC8352FB5D49FAADC287
Authority key identifier: 84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/cB7PC28F3bY-m09DAAeWUi3RUiA.roa
Signing time: Thu 30 Jul 2026 11:47:55 +0000
ROA not before: Thu 30 Jul 2026 11:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 156.35.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:da:40:16:f2:74:ac:83:52:fb:5d:49:fa:ad:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Validity
Not Before: Jul 30 11:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=701ecf0b6f05ddb63e9b4f43000796522dd15220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:99:22:b5:07:a6:41:e6:68:d0:ac:66:b2:
39:01:28:e5:6d:62:e3:33:56:e5:44:31:61:83:0d:
ad:92:54:e8:10:84:57:98:2c:ec:05:c4:81:9f:71:
89:33:6f:93:de:17:6a:d2:be:b8:8d:d8:10:f1:c4:
7f:41:2d:d3:c5:ea:7f:ff:b6:3b:3f:a2:53:4e:ea:
0f:04:bc:bc:b2:f8:5d:f6:7a:fc:c6:9f:2e:63:29:
d5:0a:5c:84:26:06:5c:91:2b:cb:42:36:73:05:ae:
7d:94:b8:93:ac:aa:3b:88:40:e9:51:85:02:8e:a2:
d1:f0:62:e0:a3:d8:e1:f2:c2:a7:c6:bf:0c:e2:c9:
e3:36:96:8b:f2:5b:83:f5:83:d3:09:bd:31:bb:f5:
a1:a6:35:0c:8b:c7:87:4f:38:08:62:44:03:6d:81:
96:2a:85:5a:0d:40:7c:f1:11:1a:02:e0:cd:ee:77:
c4:6a:95:25:8c:2d:77:9c:65:30:74:2f:ea:98:a3:
04:80:55:24:b4:02:d2:7f:f2:a7:fa:52:9c:b0:7a:
c2:7d:3e:4f:fa:f3:3a:23:1c:49:68:9e:5b:a8:e2:
d9:71:59:71:7b:67:94:60:5c:96:02:b0:3c:c6:20:
a7:b7:c6:22:d8:9e:e3:29:83:48:ef:3e:56:76:af:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:CF:0B:6F:05:DD:B6:3E:9B:4F:43:00:07:96:52:2D:D1:52:20
X509v3 Authority Key Identifier:
keyid:84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/cB7PC28F3bY-m09DAAeWUi3RUiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:28:80:57:b7:96:a1:b3:29:29:ac:4d:ec:ea:a2:11:81:24:
65:a6:e3:62:44:42:69:8e:40:4a:08:02:42:be:c1:13:de:c6:
bb:55:40:f7:51:46:60:6f:f3:9f:88:28:f6:eb:73:90:bf:22:
5b:93:7e:6b:13:19:04:fa:eb:4a:cc:a9:07:f3:ec:7b:78:a1:
e7:e0:7c:2c:b7:4d:98:0d:fa:c8:64:21:7e:d7:50:d0:cc:a7:
5e:09:81:92:e3:1f:7f:43:68:7b:ca:3a:2e:64:17:fd:3f:98:
fc:54:01:b1:2e:28:d4:e5:cb:83:97:f4:6a:07:00:fd:0f:16:
3a:eb:96:2b:8f:2c:c4:79:b5:79:f7:93:6b:57:7c:d2:1b:44:
b7:51:7f:59:02:d0:e6:b7:50:7d:cf:18:3a:3e:ea:cc:16:8f:
bd:ad:27:be:b0:2a:f9:cc:d6:36:3f:ab:a4:12:61:f8:92:d6:
5a:81:b7:f2:73:50:e9:d4:b5:79:fc:d6:be:e2:ae:47:6d:5c:
a2:6f:bd:04:02:7c:10:0e:81:9b:d3:2f:c8:2b:c9:d6:b2:a2:
8f:30:cd:8c:c0:36:db:1c:83:9b:3d:2c:7c:61:97:c7:5a:f1:
6b:42:91:dd:1b:65:f7:17:eb:d0:d7:23:46:16:2d:ec:58:40:
f2:e5:e1:19
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ+y2kAW8nSsg1L7XUn6rcKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0N2M5MWI3NjI2YjE3MDQxZmU4YTc1ZjM5NTgxZGEzYTJm
ZmU1ZGEwHhcNMjYwNzMwMTE0NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDFlY2YwYjZmMDVkZGI2M2U5YjRmNDMwMDA3OTY1MjJkZDE1MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAOZIrUHpkHmaNCsZrI5ASjlbWLj
M1blRDFhgw2tklToEIRXmCzsBcSBn3GJM2+T3hdq0r64jdgQ8cR/QS3Txep//7Y7
P6JTTuoPBLy8svhd9nr8xp8uYynVClyEJgZckSvLQjZzBa59lLiTrKo7iEDpUYUC
jqLR8GLgo9jh8sKnxr8M4snjNpaL8luD9YPTCb0xu/WhpjUMi8eHTzgIYkQDbYGW
KoVaDUB88REaAuDN7nfEapUljC13nGUwdC/qmKMEgFUktALSf/Kn+lKcsHrCfT5P
+vM6IxxJaJ5bqOLZcVlxe2eUYFyWArA8xiCnt8Yi2J7jKYNI7z5Wdq+fLQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHAezwtvBd22PptPQwAHllIt0VIgMB8GA1UdIwQY
MBaAFIR8kbdiaxcEH+inXzlYHaOi/+XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEh5UnQySnJGd1FmNktkZk9WZ2RvNkxfNWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83ZDcxM2ItMTJiMy00MTkwLTgyMGEt
NzFjNDU1NTc0MTc5LzEvY0I3UEMyOEYzYlktbTA5REFBZVdVaTNSVWlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83ZDcxM2ItMTJiMy00MTkwLTgyMGEtNzFjNDU1NTc0MTc5
LzEvaEh5UnQySnJGd1FmNktkZk9WZ2RvNkxfNWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnCMwDQYJ
KoZIhvcNAQELBQADggEBAAwogFe3lqGzKSmsTezqohGBJGWm42JEQmmOQEoIAkK+
wRPexrtVQPdRRmBv85+IKPbrc5C/IluTfmsTGQT660rMqQfz7Ht4oefgfCy3TZgN
+shkIX7XUNDMp14JgZLjH39DaHvKOi5kF/0/mPxUAbEuKNTly4OX9GoHAP0PFjrr
liuPLMR5tXn3k2tXfNIbRLdRf1kC0Oa3UH3PGDo+6swWj72tJ76wKvnM1jY/q6QS
YfiS1lqBt/JzUOnUtXn81r7irkdtXKJvvQQCfBAOgZvTL8grydayoo8wzYzANtsc
g5s9LHxhl8da8WtCkd0bZfcX69DXI0YWLexYQPLl4Rk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:21 2026 by rpki-client