Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/sv4P0jZR1cWAHiSs8QfBqU_ZqX8.roa
File: sv4P0jZR1cWAHiSs8QfBqU_ZqX8.roa (raw, json)
Hash identifier: bCOQjmGJZ18ZpZiewWwMCbtMOH9JIrByIfWbxJzOPfQ=
Subject key identifier: B2:FE:0F:D2:36:51:D5:C5:80:1E:24:AC:F1:07:C1:A9:4F:D9:A9:7F
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A13B073FFE2A677EC3BFF8A2D62EB22ED4
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/sv4P0jZR1cWAHiSs8QfBqU_ZqX8.roa
Signing time: Wed 14 Oct 2026 15:28:13 +0000
ROA not before: Wed 14 Oct 2026 15:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 132.243.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:07:3f:fe:2a:67:7e:c3:bf:f8:a2:d6:2e:b2:2e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Oct 14 15:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2fe0fd23651d5c5801e24acf107c1a94fd9a97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:b1:e7:f5:5f:a5:d9:4d:c0:a4:7a:ab:d5:
91:0f:9f:77:00:09:39:45:55:6d:54:b6:30:e4:c9:
81:22:fd:bf:87:68:06:6c:6e:28:e2:73:b5:1f:67:
92:27:24:0c:54:49:7c:c3:de:80:7f:e1:04:87:d7:
e2:b4:8c:24:b9:1e:d6:8d:2b:e4:22:f4:20:0c:c6:
dc:ae:db:6c:09:81:e6:04:6d:f7:94:79:b6:e2:a1:
f1:29:01:e0:1a:f5:7a:d7:66:6c:19:8c:ef:be:1a:
04:6c:c4:6b:89:05:cc:88:4f:dc:de:9f:99:ee:29:
ea:79:ce:e9:70:10:d4:ec:60:4d:e8:c7:7d:1b:ea:
bc:7c:b7:2e:79:aa:2b:73:c6:08:cf:b8:84:8b:a8:
df:aa:67:1d:d5:b6:fd:9b:ac:3c:87:eb:be:d7:4e:
88:85:e6:c6:2d:a6:d8:d8:23:c6:4b:aa:4a:e7:e8:
10:09:3e:b5:e1:79:76:9f:f4:07:95:74:bc:a3:0f:
6f:d2:b4:07:36:03:77:fb:bc:3a:6c:fc:c2:d2:a4:
4c:1a:00:e4:6d:51:3f:94:c1:9e:da:68:67:d8:f1:
bb:cf:22:4d:ae:3a:54:5a:f7:fd:36:7a:1d:84:17:
8b:36:f1:51:52:70:0d:c3:03:e5:b2:24:e0:db:73:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:0F:D2:36:51:D5:C5:80:1E:24:AC:F1:07:C1:A9:4F:D9:A9:7F
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/sv4P0jZR1cWAHiSs8QfBqU_ZqX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.215.0/24
Signature Algorithm: sha256WithRSAEncryption
18:65:62:26:94:81:60:f0:e1:fc:8c:d1:45:f7:1b:79:87:0a:
f6:9a:c9:f5:63:ad:5c:fe:f3:90:c1:38:95:d4:21:ab:79:5f:
e4:dd:9d:b2:67:43:f2:f0:c0:34:bf:b7:46:14:14:4a:29:ce:
f3:4d:b6:49:e6:08:2f:91:04:b1:86:9c:39:84:66:7b:57:0d:
0d:f8:ea:40:02:b5:b4:5e:49:9b:76:62:df:67:96:01:10:d0:
c2:63:35:df:79:36:67:01:aa:e1:b6:5b:52:22:3a:13:1f:8e:
55:4e:4e:15:5b:2b:b0:a6:25:05:75:d5:1d:14:a7:b6:e0:58:
6b:eb:3e:1a:5b:7a:26:94:98:0b:33:10:01:6f:07:3e:f2:c2:
93:bd:bb:43:a9:16:94:be:cc:9f:8f:2e:c0:27:25:70:f4:de:
8f:91:f7:d9:08:15:04:05:3c:46:9e:3b:79:25:32:18:6b:24:
61:7a:8c:ed:fa:c3:65:8d:83:e2:25:bc:a7:37:f6:26:80:00:
b7:24:df:44:d5:e5:db:7f:57:3e:f8:51:5d:d6:47:96:25:11:
22:5e:f4:c2:41:39:3c:5a:5b:24:47:af:1d:13:49:88:d9:2b:
85:b0:99:0f:32:f1:90:b6:49:66:88:ca:de:c4:9a:90:f4:20:
e1:95:d1:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE7Bz/+Kmd+w7/4otYusi7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYxMDE0MTUyODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmZlMGZkMjM2NTFkNWM1ODAxZTI0YWNmMTA3YzFhOTRmZDlhOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRmx5/VfpdlNwKR6q9WRD593AAk5
RVVtVLYw5MmBIv2/h2gGbG4o4nO1H2eSJyQMVEl8w96Af+EEh9fitIwkuR7WjSvk
IvQgDMbcrttsCYHmBG33lHm24qHxKQHgGvV612ZsGYzvvhoEbMRriQXMiE/c3p+Z
7inqec7pcBDU7GBN6Md9G+q8fLcueaorc8YIz7iEi6jfqmcd1bb9m6w8h+u+106I
hebGLabY2CPGS6pK5+gQCT614Xl2n/QHlXS8ow9v0rQHNgN3+7w6bPzC0qRMGgDk
bVE/lMGe2mhn2PG7zyJNrjpUWvf9NnodhBeLNvFRUnANwwPlsiTg23PaCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLL+D9I2UdXFgB4krPEHwalP2al/MB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvc3Y0UDBqWlIxY1dBSGlTczhRZkJxVV9acVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhPPXMA0G
CSqGSIb3DQEBCwUAA4IBAQAYZWImlIFg8OH8jNFF9xt5hwr2msn1Y61c/vOQwTiV
1CGreV/k3Z2yZ0Py8MA0v7dGFBRKKc7zTbZJ5ggvkQSxhpw5hGZ7Vw0N+OpAArW0
XkmbdmLfZ5YBENDCYzXfeTZnAarhtltSIjoTH45VTk4VWyuwpiUFddUdFKe24Fhr
6z4aW3omlJgLMxABbwc+8sKTvbtDqRaUvsyfjy7AJyVw9N6PkffZCBUEBTxGnjt5
JTIYayRheozt+sNljYPiJbynN/YmgAC3JN9E1eXbf1c++FFd1keWJREiXvTCQTk8
WlskR68dE0mI2SuFsJkPMvGQtklmiMrexJqQ9CDhldFp
-----END CERTIFICATE-----
Generated at Sun Oct 18 18:29:03 2026 by rpki-client