Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CEdJWAE38vneeN0BqBTSxtlhrLo.roa
File: CEdJWAE38vneeN0BqBTSxtlhrLo.roa (raw, json)
Hash identifier: V1OVLDsOjuY6vrQISZTjKqMMJvlYPOugDLlBlMFItLc=
Subject key identifier: 08:47:49:58:01:37:F2:F9:DE:78:DD:01:A8:14:D2:C6:D9:61:AC:BA
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398253A18A4CBC3D391FF24585FC419D
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CEdJWAE38vneeN0BqBTSxtlhrLo.roa
Signing time: Tue 25 Aug 2026 15:20:37 +0000
ROA not before: Tue 25 Aug 2026 15:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 193.187.132.0/24 maxlen: 24
212.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:53:a1:8a:4c:bc:3d:39:1f:f2:45:85:fc:41:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=084749580137f2f9de78dd01a814d2c6d961acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:5b:6b:aa:e8:25:1b:ee:73:26:76:da:9b:
68:06:52:46:2e:d2:2c:f9:5a:32:56:f9:9f:58:e2:
b8:1e:ab:e2:e8:dc:2b:98:ec:91:d6:04:e5:8f:dd:
4c:fa:17:71:02:3e:e5:11:b0:37:2c:65:da:fa:04:
34:49:d6:0f:44:d6:bd:79:6f:60:9f:49:f0:31:e1:
cf:42:ee:ab:c6:7d:2c:32:06:75:a2:6f:12:d1:92:
cc:23:48:61:86:74:de:a4:27:16:68:fc:ba:37:82:
79:af:72:4d:55:b0:c0:c9:2c:13:83:57:9b:8f:1d:
74:fc:e6:37:5e:8d:d8:c5:5d:d3:f8:c2:57:aa:71:
93:91:ff:97:08:03:5e:12:2e:56:53:a1:7d:5d:a3:
02:6e:bc:1f:52:70:21:a2:8e:80:d3:6f:c3:de:7d:
f1:f8:d9:6e:a5:59:ad:0e:01:6b:3c:6f:9e:44:09:
75:15:e8:0d:3e:0c:70:79:9f:4d:cd:33:f0:ca:de:
bc:f1:07:fc:a6:50:e2:92:f2:57:38:e8:d8:84:30:
6a:ff:ed:ed:a2:e6:03:2b:a6:65:45:85:49:bd:9b:
3a:e0:18:11:0d:89:ff:75:5c:08:e4:bf:ff:34:84:
fa:98:e0:fc:a5:d7:4f:7b:77:37:1f:c2:69:c7:75:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:49:58:01:37:F2:F9:DE:78:DD:01:A8:14:D2:C6:D9:61:AC:BA
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CEdJWAE38vneeN0BqBTSxtlhrLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.132.0/24
212.115.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:02:3f:f5:33:47:bf:d1:b1:a9:14:f3:02:35:7f:6f:b4:41:
b2:3c:d7:6d:94:0f:4e:eb:55:37:26:ed:ca:52:7d:d3:c0:c4:
14:4e:83:70:b7:c3:b2:07:43:e1:f4:c7:6c:d6:cd:15:19:0d:
c5:e4:d9:8e:48:1f:1b:b5:ff:f7:fd:27:fd:5e:71:9f:33:47:
42:2b:21:de:b9:ee:d7:0c:81:d4:f6:e9:d0:94:65:b2:ce:c0:
78:89:f1:ff:66:b5:66:63:c5:32:93:2d:94:95:ed:8a:8c:9f:
a3:ee:9e:fa:4f:fc:8b:7f:ea:6a:e1:32:6f:1b:7f:4c:ac:50:
c7:e9:e1:50:ad:9f:da:c3:69:3e:e6:20:05:af:b0:e3:ca:47:
d0:40:14:64:e7:4b:72:0c:ac:31:8f:34:ed:49:8c:8f:4a:c2:
39:6c:87:32:79:a4:b6:41:48:0c:c8:fc:85:ae:45:9e:52:11:
9a:fe:a5:07:bd:11:14:cd:c0:da:55:03:d2:dc:43:28:5d:c0:
c1:33:ef:ce:86:bc:d4:1b:ae:c5:fe:d5:bf:ad:6d:13:35:0f:
2c:66:a3:ed:b3:32:8d:ef:46:f9:ed:67:2c:bc:8d:28:2d:4e:
d8:bb:86:1a:7e:b3:c7:dd:98:e7:3d:85:01:ca:6c:b6:53:bb:
26:c6:a9:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA5glOhiky8PTkf8kWF/EGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODQ3NDk1ODAxMzdmMmY5ZGU3OGRkMDFhODE0ZDJjNmQ5NjFhY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rZba6roJRvucyZ22ptoBlJGLtIs
+VoyVvmfWOK4Hqvi6NwrmOyR1gTlj91M+hdxAj7lEbA3LGXa+gQ0SdYPRNa9eW9g
n0nwMeHPQu6rxn0sMgZ1om8S0ZLMI0hhhnTepCcWaPy6N4J5r3JNVbDAySwTg1eb
jx10/OY3Xo3YxV3T+MJXqnGTkf+XCANeEi5WU6F9XaMCbrwfUnAhoo6A02/D3n3x
+NlupVmtDgFrPG+eRAl1FegNPgxweZ9NzTPwyt688Qf8plDikvJXOOjYhDBq/+3t
ouYDK6ZlRYVJvZs64BgRDYn/dVwI5L//NIT6mOD8pddPe3c3H8Jpx3VBuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAhHSVgBN/L53njdAagU0sbZYay6MB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvQ0VkSldBRTM4dm5lZU4wQnFCVFN4dGxockxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbuEAwQA
1HNnMA0GCSqGSIb3DQEBCwUAA4IBAQA+Aj/1M0e/0bGpFPMCNX9vtEGyPNdtlA9O
61U3Ju3KUn3TwMQUToNwt8OyB0Ph9Mds1s0VGQ3F5NmOSB8btf/3/Sf9XnGfM0dC
KyHeue7XDIHU9unQlGWyzsB4ifH/ZrVmY8Uyky2Ule2KjJ+j7p76T/yLf+pq4TJv
G39MrFDH6eFQrZ/aw2k+5iAFr7DjykfQQBRk50tyDKwxjzTtSYyPSsI5bIcyeaS2
QUgMyPyFrkWeUhGa/qUHvREUzcDaVQPS3EMoXcDBM+/OhrzUG67F/tW/rW0TNQ8s
ZqPtszKN70b57WcsvI0oLU7Yu4YafrPH3ZjnPYUBymy2U7smxqn/
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:19 2026 by rpki-client