Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cueu0wsxUyLLO3H0wOKn5q3CR4c.roa
File: cueu0wsxUyLLO3H0wOKn5q3CR4c.roa (raw, json)
Hash identifier: gtIawHT2IpmeyATCg9jRonulFwZcyTTMzIRvGBSFPOA=
Subject key identifier: 72:E7:AE:D3:0B:31:53:22:CB:3B:71:F4:C0:E2:A7:E6:AD:C2:47:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E2A4FDE7A5635A7DC798A7705BE4BF840
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cueu0wsxUyLLO3H0wOKn5q3CR4c.roa
Signing time: Fri 15 May 2026 06:25:37 +0000
ROA not before: Fri 15 May 2026 06:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:4f:de:7a:56:35:a7:dc:79:8a:77:05:be:4b:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 06:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72e7aed30b315322cb3b71f4c0e2a7e6adc24787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:ba:b5:94:9c:d0:3c:e4:98:9b:8f:24:15:
ac:2f:f0:e9:46:38:36:01:61:6b:7d:d0:f0:b6:4d:
bf:19:4e:2b:64:b4:13:d2:0a:3c:72:4c:2e:dc:56:
ca:17:c3:10:f5:ef:d3:06:f2:39:a4:ea:99:69:17:
c7:ac:08:a1:96:6e:00:eb:42:41:0c:99:04:ba:3c:
d6:31:8d:76:a2:78:ce:fc:84:2c:79:4c:b5:b9:c1:
15:a6:86:08:f6:1a:f6:ce:6d:b5:24:8a:e9:f9:36:
ef:09:64:e5:12:f9:25:fc:2b:cc:e1:41:a1:68:f3:
9f:7b:2e:36:96:18:8a:1f:a5:dd:50:6b:da:c7:23:
dc:2e:7e:a2:fe:f5:94:75:08:6a:09:1a:66:12:14:
85:fb:d7:d0:b5:93:d8:33:eb:c9:e7:9c:77:34:1e:
9e:b1:ea:dd:7e:43:f5:2d:28:58:5a:8e:69:e3:30:
3a:49:35:b6:1c:04:76:ea:a2:76:96:df:46:21:8f:
a2:5e:d0:a5:44:bb:36:f5:7d:23:94:34:3a:6d:19:
eb:44:ff:a4:ca:70:69:1f:16:5f:1b:15:bb:3b:a1:
58:4e:98:2c:e2:84:c7:0a:51:0f:e3:ca:31:3a:60:
4c:95:8d:22:e8:a6:d9:56:9f:70:57:68:1c:eb:db:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:AE:D3:0B:31:53:22:CB:3B:71:F4:C0:E2:A7:E6:AD:C2:47:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cueu0wsxUyLLO3H0wOKn5q3CR4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
69:07:60:7f:71:05:f9:0e:e3:85:9e:e3:40:2a:f3:b5:48:b1:
07:1c:83:0a:9b:96:ba:b8:0f:a1:02:b1:1c:1a:a5:d7:51:30:
a4:0d:c8:b7:aa:ed:ee:de:13:d1:ba:3a:1c:11:81:5f:a3:ed:
9d:c8:62:0a:4e:ee:14:1e:22:e7:ba:02:79:80:bd:a6:34:a9:
af:a3:5a:8c:6f:81:84:ef:da:c3:aa:08:16:76:c0:b0:72:f9:
24:5f:bc:74:eb:bc:83:8f:7c:fb:2a:b4:31:5f:6d:c3:fb:7b:
c0:c0:09:d7:e5:dd:84:85:f5:87:87:e0:f1:fc:ca:5c:21:a4:
69:ac:ff:6b:36:96:23:7e:f1:8b:1d:9f:56:3b:88:e0:2a:7b:
ae:c7:58:ef:55:ba:9b:0c:76:e1:ea:b9:f4:30:9a:42:01:2b:
b7:cd:ac:cc:7d:9c:6e:92:d6:31:4d:9e:a1:f5:da:63:58:aa:
1c:a5:70:18:8e:09:0f:d3:8c:b8:94:1a:d1:9a:27:db:82:ab:
d7:15:02:b7:3a:6b:74:71:e5:bd:ce:e8:6d:53:6b:58:ea:f4:
63:f5:15:a8:b3:3d:28:9a:28:2a:21:31:ff:e7:36:2c:3d:88:
88:e2:08:97:d9:2b:02:79:38:64:9c:29:fe:73:03:cf:6c:ec:
02:f1:ac:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4qT956VjWn3HmKdwW+S/hAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTE1MDYyNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmU3YWVkMzBiMzE1MzIyY2IzYjcxZjRjMGUyYTdlNmFkYzI0Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktO6tZSc0DzkmJuPJBWsL/DpRjg2
AWFrfdDwtk2/GU4rZLQT0go8ckwu3FbKF8MQ9e/TBvI5pOqZaRfHrAihlm4A60JB
DJkEujzWMY12onjO/IQseUy1ucEVpoYI9hr2zm21JIrp+TbvCWTlEvkl/CvM4UGh
aPOfey42lhiKH6XdUGvaxyPcLn6i/vWUdQhqCRpmEhSF+9fQtZPYM+vJ55x3NB6e
serdfkP1LShYWo5p4zA6STW2HAR26qJ2lt9GIY+iXtClRLs29X0jlDQ6bRnrRP+k
ynBpHxZfGxW7O6FYTpgs4oTHClEP48oxOmBMlY0i6KbZVp9wV2gc69tKsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHLnrtMLMVMiyztx9MDip+atwkeHMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvY3VldTB3c3hVeUxMTzNIMHdPS241cTNDUjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3hEAwQB
ufygMA0GCSqGSIb3DQEBCwUAA4IBAQBpB2B/cQX5DuOFnuNAKvO1SLEHHIMKm5a6
uA+hArEcGqXXUTCkDci3qu3u3hPRujocEYFfo+2dyGIKTu4UHiLnugJ5gL2mNKmv
o1qMb4GE79rDqggWdsCwcvkkX7x067yDj3z7KrQxX23D+3vAwAnX5d2EhfWHh+Dx
/MpcIaRprP9rNpYjfvGLHZ9WO4jgKnuux1jvVbqbDHbh6rn0MJpCASu3zazMfZxu
ktYxTZ6h9dpjWKocpXAYjgkP04y4lBrRmifbgqvXFQK3Omt0ceW9zuhtU2tY6vRj
9RWosz0omigqITH/5zYsPYiI4giX2SsCeThknCn+cwPPbOwC8axo
-----END CERTIFICATE-----
Generated at Fri May 15 15:28:30 2026 by rpki-client