Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/w7tyGuDyXYF09C0kbacUlcISVeU.roa
File: w7tyGuDyXYF09C0kbacUlcISVeU.roa (raw, json)
Hash identifier: JmfNdkolCzw/kkNxz7vb2sntLGDQEoDk1YvI0uf3pXo=
Subject key identifier: C3:BB:72:1A:E0:F2:5D:81:74:F4:2D:24:6D:A7:14:95:C2:12:55:E5
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019FE624ADD8D0B620151CB3FE7D554267FB
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/w7tyGuDyXYF09C0kbacUlcISVeU.roa
Signing time: Sun 09 Aug 2026 10:49:51 +0000
ROA not before: Sun 09 Aug 2026 10:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219113
IP address blocks: 185.36.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:24:ad:d8:d0:b6:20:15:1c:b3:fe:7d:55:42:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 9 10:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3bb721ae0f25d8174f42d246da71495c21255e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:eb:1d:f9:52:ac:42:ec:64:e1:81:4e:e7:
f7:5a:8d:6a:3e:db:48:53:af:23:b4:e3:b8:bb:83:
b9:a6:d0:d2:d7:d2:d6:a8:9e:62:22:d5:bd:b2:b3:
cf:4a:e2:a0:fe:c5:98:b4:a5:23:b4:c4:8a:64:4d:
7e:58:66:7f:a6:3f:5c:de:5a:2b:34:f9:92:5c:be:
d4:1e:74:b1:88:1f:d9:eb:dc:17:63:04:d1:a2:ab:
41:15:53:ec:0e:51:a6:dd:c1:8e:1d:a2:48:34:c2:
5e:ab:9c:06:06:5d:07:e5:b4:3e:b1:c9:f2:cb:14:
4d:0e:41:4e:9b:5d:5b:e3:2b:41:f8:b2:5c:34:01:
bb:3b:cb:08:8d:15:a1:e9:0a:8e:d7:48:95:fc:2e:
d3:79:bc:14:9e:d9:e1:67:70:fe:74:0b:db:7e:21:
a4:2f:b0:4d:39:7f:3a:d8:ad:9a:d8:21:83:9e:c6:
26:65:f8:21:b3:55:04:82:00:57:05:f8:31:57:87:
f0:7c:3d:5b:7e:9d:1b:be:b4:25:18:b8:ff:6f:93:
e7:c0:73:99:fe:59:6b:46:ff:92:2a:c2:ca:f1:1e:
02:12:04:3a:d8:1a:59:51:18:e1:61:6b:0c:8d:be:
2e:cd:69:a9:0a:7b:63:3a:2c:53:99:33:e4:3d:eb:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:72:1A:E0:F2:5D:81:74:F4:2D:24:6D:A7:14:95:C2:12:55:E5
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/w7tyGuDyXYF09C0kbacUlcISVeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.127.0/24
Signature Algorithm: sha256WithRSAEncryption
70:35:d5:37:c4:c6:62:db:21:94:6b:76:ee:48:2b:2f:14:e9:
64:6a:f0:cf:c3:7b:32:b5:f7:34:1b:22:68:c3:74:44:6b:f0:
31:e0:cf:ac:fd:1f:b9:f7:a6:77:40:e4:ea:18:49:3d:91:ee:
18:f2:ee:24:77:1e:8e:f7:64:bc:d7:33:dd:94:ed:9d:34:13:
a2:6e:aa:73:7b:10:21:8e:1c:7b:6d:46:80:34:bb:15:9c:b2:
aa:54:d4:aa:aa:e3:f5:31:d2:a3:b9:b7:34:d8:1f:5c:03:89:
e0:fe:9e:57:83:59:0f:c0:58:59:aa:08:0a:09:54:64:e7:05:
83:ee:14:50:ba:7b:0b:5c:96:a2:29:07:86:87:8a:bb:02:0c:
aa:66:a2:7a:c6:f2:f2:ad:98:bb:10:96:16:c2:35:4f:a9:3b:
8b:9f:36:27:1c:d2:68:93:5a:c4:41:4f:1e:38:dd:a9:10:15:
a7:4a:2c:f7:69:44:6b:6a:89:6c:c5:50:65:85:73:72:06:24:
4b:91:70:f7:ef:a3:9e:6d:b6:33:64:11:db:99:95:70:04:f5:
06:7b:b5:58:01:dc:1f:55:21:5b:72:58:4b:8b:60:4c:d9:3a:
e9:39:4d:a1:2c:37:7d:a8:f6:32:a7:46:ea:2b:f5:c7:04:a5:
e5:96:59:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/mJK3Y0LYgFRyz/n1VQmf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjYwODA5MTA0OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2JiNzIxYWUwZjI1ZDgxNzRmNDJkMjQ2ZGE3MTQ5NWMyMTI1NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/XrHflSrELsZOGBTuf3Wo1qPttI
U68jtOO4u4O5ptDS19LWqJ5iItW9srPPSuKg/sWYtKUjtMSKZE1+WGZ/pj9c3lor
NPmSXL7UHnSxiB/Z69wXYwTRoqtBFVPsDlGm3cGOHaJINMJeq5wGBl0H5bQ+scny
yxRNDkFOm11b4ytB+LJcNAG7O8sIjRWh6QqO10iV/C7TebwUntnhZ3D+dAvbfiGk
L7BNOX862K2a2CGDnsYmZfghs1UEggBXBfgxV4fwfD1bfp0bvrQlGLj/b5PnwHOZ
/llrRv+SKsLK8R4CEgQ62BpZURjhYWsMjb4uzWmpCntjOixTmTPkPeuZPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMO7chrg8l2BdPQtJG2nFJXCElXlMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvdzd0eUd1RHlYWUYwOUMwa2JhY1VsY0lTVmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSR/MA0G
CSqGSIb3DQEBCwUAA4IBAQBwNdU3xMZi2yGUa3buSCsvFOlkavDPw3sytfc0GyJo
w3REa/Ax4M+s/R+596Z3QOTqGEk9ke4Y8u4kdx6O92S81zPdlO2dNBOibqpzexAh
jhx7bUaANLsVnLKqVNSqquP1MdKjubc02B9cA4ng/p5Xg1kPwFhZqggKCVRk5wWD
7hRQunsLXJaiKQeGh4q7AgyqZqJ6xvLyrZi7EJYWwjVPqTuLnzYnHNJok1rEQU8e
ON2pEBWnSiz3aURraolsxVBlhXNyBiRLkXD376OebbYzZBHbmZVwBPUGe7VYAdwf
VSFbclhLi2BM2TrpOU2hLDd9qPYyp0bqK/XHBKXlllk9
-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:56 2026 by rpki-client