Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cFFROZN_Y7sbAl1I74jtZggCTG8.roa
File: cFFROZN_Y7sbAl1I74jtZggCTG8.roa (raw, json)
Hash identifier: InYvnCiiHJwyYctWNboHd6rtW9mlE8oy1wdX6DMdMjI=
Subject key identifier: 70:51:51:39:93:7F:63:BB:1B:02:5D:48:EF:88:ED:66:08:02:4C:6F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019FCEEE0EDF1E1E797D3E4BD85E40C655BA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cFFROZN_Y7sbAl1I74jtZggCTG8.roa
Signing time: Tue 04 Aug 2026 22:38:55 +0000
ROA not before: Tue 04 Aug 2026 22:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 194.124.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:ee:0e:df:1e:1e:79:7d:3e:4b:d8:5e:40:c6:55:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 4 22:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70515139937f63bb1b025d48ef88ed6608024c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:86:16:95:83:83:c5:0e:17:6c:77:bb:23:
f1:03:44:75:69:a2:dd:44:b6:b6:8a:ff:d9:f0:b7:
bb:ce:0d:3b:c2:21:95:68:d5:50:df:00:f4:a8:f3:
d1:9d:17:b9:15:e3:a7:28:47:17:2a:54:ef:75:29:
de:2f:70:9c:3b:aa:1e:9a:f5:ee:37:07:53:fc:4f:
7a:29:29:93:4f:c5:fe:be:a8:d0:f7:7a:f7:22:af:
7b:7a:91:64:98:40:de:1c:be:7a:ef:ec:45:9f:10:
fb:43:3c:c5:82:3e:d9:c1:f0:b7:53:4e:c1:29:80:
5b:63:86:26:09:7f:52:33:3a:ae:dd:b6:79:38:4c:
c8:a9:9f:65:17:1e:ac:0a:98:5b:d9:a4:8a:a6:54:
47:a0:cc:65:f7:7c:0f:bd:64:76:61:8e:3c:e4:ff:
11:f7:ab:9f:3f:c7:5a:bd:4d:d9:12:db:b7:74:4b:
47:38:6c:75:2f:6d:32:55:57:95:23:1f:b1:cd:dc:
8c:b1:dd:12:bc:72:50:fe:d8:fb:70:13:35:c8:d7:
04:0b:d4:b8:fc:84:f5:cb:24:c9:98:80:55:f7:ba:
5c:45:8d:71:52:32:3a:dc:79:14:97:ce:4e:b8:9a:
55:81:77:5c:15:d2:3f:ea:41:9d:7d:50:44:53:17:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:51:39:93:7F:63:BB:1B:02:5D:48:EF:88:ED:66:08:02:4C:6F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cFFROZN_Y7sbAl1I74jtZggCTG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:38:da:f0:54:c5:6e:cf:58:7c:3e:9b:30:e1:a1:55:10:f4:
f7:80:f9:dd:db:9c:8c:fc:1b:28:40:83:92:bd:94:22:67:8a:
c1:63:2c:ed:40:f9:2b:f0:68:5f:ba:93:99:8d:7c:7a:c5:d7:
c0:a8:2b:07:18:5f:45:21:42:e4:96:46:24:58:b1:41:85:54:
da:54:ab:7c:b8:b2:c2:f3:b9:5e:38:81:52:c0:6c:86:5f:39:
e3:12:a2:0e:2d:a6:13:2c:78:d4:67:9b:d7:08:0d:ea:07:8c:
90:e0:67:64:7f:06:e3:23:b2:ea:9e:7c:8f:37:a8:3f:b7:23:
50:b6:94:10:7c:4f:b2:1e:8d:07:61:72:b2:5a:1c:a5:35:bf:
39:49:da:4e:c7:a9:bc:72:78:96:b9:22:7a:6e:97:08:01:54:
be:00:cb:45:95:a0:15:91:d6:a3:17:45:b1:04:38:99:6e:78:
0e:05:8a:30:3a:ff:61:4e:71:55:8a:50:81:fc:a3:d5:c4:15:
7a:15:6f:b3:99:2b:d2:b2:6c:df:41:17:54:0f:1b:8a:48:c5:
df:ca:09:c6:13:3b:00:14:04:df:b8:7a:d8:83:af:60:ba:b8:
41:82:9f:99:4a:6a:ca:b6:d7:7c:73:65:71:2d:88:49:7a:ab:
fd:cc:f5:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/O7g7fHh55fT5L2F5AxlW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwODA0MjIzODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDUxNTEzOTkzN2Y2M2JiMWIwMjVkNDhlZjg4ZWQ2NjA4MDI0YzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uqGFpWDg8UOF2x3uyPxA0R1aaLd
RLa2iv/Z8Le7zg07wiGVaNVQ3wD0qPPRnRe5FeOnKEcXKlTvdSneL3CcO6oemvXu
NwdT/E96KSmTT8X+vqjQ93r3Iq97epFkmEDeHL567+xFnxD7QzzFgj7ZwfC3U07B
KYBbY4YmCX9SMzqu3bZ5OEzIqZ9lFx6sCphb2aSKplRHoMxl93wPvWR2YY485P8R
96ufP8davU3ZEtu3dEtHOGx1L20yVVeVIx+xzdyMsd0SvHJQ/tj7cBM1yNcEC9S4
/IT1yyTJmIBV97pcRY1xUjI63HkUl85OuJpVgXdcFdI/6kGdfVBEUxfW0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBRUTmTf2O7GwJdSO+I7WYIAkxvMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvY0ZGUk9aTl9ZN3NiQWwxSTc0anRaZ2dDVEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnwpMA0G
CSqGSIb3DQEBCwUAA4IBAQCaONrwVMVuz1h8Ppsw4aFVEPT3gPnd25yM/BsoQIOS
vZQiZ4rBYyztQPkr8GhfupOZjXx6xdfAqCsHGF9FIULklkYkWLFBhVTaVKt8uLLC
87leOIFSwGyGXznjEqIOLaYTLHjUZ5vXCA3qB4yQ4GdkfwbjI7LqnnyPN6g/tyNQ
tpQQfE+yHo0HYXKyWhylNb85SdpOx6m8cniWuSJ6bpcIAVS+AMtFlaAVkdajF0Wx
BDiZbngOBYowOv9hTnFVilCB/KPVxBV6FW+zmSvSsmzfQRdUDxuKSMXfygnGEzsA
FATfuHrYg69gurhBgp+ZSmrKttd8c2VxLYhJeqv9zPVk
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:21 2026 by rpki-client