Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/C3ruCzQFpObijbg6nKyWeHWjy4U.roa
File: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (raw, json)
Hash identifier: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=
Subject key identifier: 0B:7A:EE:0B:34:05:A4:E6:E2:8D:B8:3A:9C:AC:96:78:75:A3:CB:85
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019E60103AF9787DF3B49C75F0F569F211F0
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/C3ruCzQFpObijbg6nKyWeHWjy4U.roa
Signing time: Mon 25 May 2026 16:55:36 +0000
ROA not before: Mon 25 May 2026 16:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64457
IP address blocks: 188.137.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:10:3a:f9:78:7d:f3:b4:9c:75:f0:f5:69:f2:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: May 25 16:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b7aee0b3405a4e6e28db83a9cac967875a3cb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:f8:61:8d:12:dd:75:13:3a:34:ef:c4:b1:
9d:a1:bb:83:31:55:9b:9f:14:3c:68:b0:f4:7c:85:
29:01:45:66:13:0e:4a:93:6c:91:33:9b:99:b1:d2:
f0:dc:40:a6:ed:a6:60:21:7f:37:b3:86:d8:dc:14:
77:c5:86:b6:83:a6:9d:54:52:58:6a:8f:02:92:af:
59:93:03:fc:8b:40:2a:44:ab:84:4c:b9:3f:cb:f2:
84:52:64:48:29:b4:d6:a4:6f:71:f8:bb:c5:b9:17:
1e:7a:06:4f:aa:8a:eb:ef:f5:af:1f:8d:67:e0:6f:
a6:d2:af:a7:f4:29:6e:0f:65:d9:26:a7:1d:ce:2f:
a2:45:dd:d9:05:03:dc:6f:05:f0:f1:7b:e8:80:bb:
85:98:6a:2a:cc:0d:c8:bd:2b:69:ff:6e:d1:e1:e9:
a0:97:78:ec:a9:fe:fe:b2:ee:dd:ca:10:0d:3c:05:
c2:9b:c9:65:a5:c1:2d:a0:04:88:8e:29:7c:d7:92:
00:fa:6a:6e:56:d4:5a:d0:ae:31:a3:cd:1e:c7:02:
6f:63:25:f2:51:61:32:5f:04:9a:10:32:ce:1c:af:
5a:a1:0d:42:53:b9:2b:04:a8:42:44:ca:24:56:45:
d2:2a:d4:6e:f6:f3:5b:2e:1a:8f:97:31:a1:d6:67:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:EE:0B:34:05:A4:E6:E2:8D:B8:3A:9C:AC:96:78:75:A3:CB:85
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/C3ruCzQFpObijbg6nKyWeHWjy4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.158.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f7:96:ca:cd:6f:3d:4a:e6:4c:38:ae:cd:22:4d:61:1a:33:
3a:6c:75:76:14:b3:16:49:a7:79:22:dc:99:a6:8a:11:59:9d:
7b:d4:42:93:88:94:e9:13:28:6c:c1:10:88:6b:a2:ae:3d:fe:
a9:94:88:9c:77:5a:70:75:b4:b6:77:f1:bf:fd:a7:cd:6e:be:
23:59:26:35:08:52:28:59:02:6d:bc:66:81:8b:49:44:e9:ac:
e3:b0:4d:76:91:91:4a:4d:8f:81:af:3c:67:f9:97:f3:e7:34:
c1:08:8a:e3:7c:b5:e8:93:d7:dc:79:a0:23:51:a0:41:73:2f:
c4:75:cc:ea:53:bf:36:c2:5d:c7:33:57:be:31:23:54:7b:e9:
4a:4d:96:47:34:e9:fa:96:07:28:21:b8:d8:cf:6f:e7:5b:14:
2b:3a:ea:11:7e:bf:7d:9a:e1:85:d7:4a:42:18:af:16:34:70:
3f:15:27:e3:e9:e2:6f:31:0b:45:ca:67:c3:0f:d4:37:6b:49:
4e:99:f2:38:06:31:b0:58:13:9c:d6:c7:96:34:8f:a1:ba:c4:
7f:14:e9:76:68:a4:55:28:b2:7f:06:b1:84:e2:69:c0:fb:03:
e8:49:92:42:d3:02:08:a8:fe:e1:68:2c:bf:d4:3e:f5:4a:df:
02:fa:2d:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5gEDr5eH3ztJx18PVp8hHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4
NjFmYjIwHhcNMjYwNTI1MTY1NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjdhZWUwYjM0MDVhNGU2ZTI4ZGI4M2E5Y2FjOTY3ODc1YTNjYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ar4YY0S3XUTOjTvxLGdobuDMVWb
nxQ8aLD0fIUpAUVmEw5Kk2yRM5uZsdLw3ECm7aZgIX83s4bY3BR3xYa2g6adVFJY
ao8Ckq9ZkwP8i0AqRKuETLk/y/KEUmRIKbTWpG9x+LvFuRceegZPqorr7/WvH41n
4G+m0q+n9CluD2XZJqcdzi+iRd3ZBQPcbwXw8XvogLuFmGoqzA3IvStp/27R4emg
l3jsqf7+su7dyhANPAXCm8llpcEtoASIjil815IA+mpuVtRa0K4xo80exwJvYyXy
UWEyXwSaEDLOHK9aoQ1CU7krBKhCRMokVkXSKtRu9vNbLhqPlzGh1mcMmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAt67gs0BaTm4o24Opyslnh1o8uFMB8GA1UdIwQY
MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt
MDEzZDJhMTFjMGE1LzEvQzNydUN6UUZwT2JpamJnNm5LeVdlSFdqeTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1
LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvImeMA0G
CSqGSIb3DQEBCwUAA4IBAQCH95bKzW89SuZMOK7NIk1hGjM6bHV2FLMWSad5ItyZ
pooRWZ171EKTiJTpEyhswRCIa6KuPf6plIicd1pwdbS2d/G//afNbr4jWSY1CFIo
WQJtvGaBi0lE6azjsE12kZFKTY+Brzxn+Zfz5zTBCIrjfLXok9fceaAjUaBBcy/E
dczqU782wl3HM1e+MSNUe+lKTZZHNOn6lgcoIbjYz2/nWxQrOuoRfr99muGF10pC
GK8WNHA/FSfj6eJvMQtFymfDD9Q3a0lOmfI4BjGwWBOc1seWNI+husR/FOl2aKRV
KLJ/BrGE4mnA+wPoSZJC0wIIqP7haCy/1D71St8C+i0s
-----END CERTIFICATE-----
Generated at Sun May 31 19:46:55 2026 by rpki-client