Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CMv23cx9wrUFWUNNt5xkqIkNID0.roa
File: CMv23cx9wrUFWUNNt5xkqIkNID0.roa (raw, json)
Hash identifier: fozhrBkd2CISM2SIcUn517dOqoNtbk0NiszHQOIM0AE=
Subject key identifier: 08:CB:F6:DD:CC:7D:C2:B5:05:59:43:4D:B7:9C:64:A8:89:0D:20:3D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E84ED458A7FA35034D580C94B11B7C4C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CMv23cx9wrUFWUNNt5xkqIkNID0.roa
Signing time: Mon 28 Sep 2026 13:57:55 +0000
ROA not before: Mon 28 Sep 2026 13:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207710
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:4e:d4:58:a7:fa:35:03:4d:58:0c:94:b1:1b:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 28 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08cbf6ddcc7dc2b50559434db79c64a8890d203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:0f:15:14:3d:a8:db:16:d4:13:87:05:49:
45:98:f0:8a:81:b2:4a:ec:88:78:0b:81:d5:be:7a:
d8:cc:db:02:42:9d:3c:7d:b5:39:32:36:a6:d8:fc:
13:93:8d:a6:7c:93:c1:81:94:60:81:1c:5b:60:1e:
ac:93:4c:44:72:8d:c8:84:6e:51:3d:dc:ea:77:eb:
f2:9e:b0:a5:c6:e3:10:76:36:68:1d:69:5a:58:14:
b2:65:dd:97:95:f5:90:f0:37:7a:6d:04:8d:4c:36:
2a:00:8f:4a:17:34:bb:b6:8d:24:c8:5b:e3:7a:9a:
4e:2a:13:7e:e6:bf:6e:0e:07:77:1b:e5:df:27:e0:
46:b0:95:6d:87:71:41:6f:6b:bf:05:0c:9c:88:59:
06:b8:df:75:45:a3:53:7d:f6:0b:09:87:48:5a:19:
05:5d:fd:19:11:cf:fb:ee:fe:68:ef:17:82:2c:17:
f0:b5:df:7c:0e:75:06:0e:40:21:37:5a:bb:40:8d:
bc:24:93:ae:90:1b:f0:af:70:de:ec:bd:00:f5:73:
a7:b2:fc:f6:2c:e6:3e:71:68:06:12:20:1a:4b:7f:
5b:b3:cb:d8:12:0f:c1:c9:1e:bb:31:b9:4e:69:bc:
67:91:53:69:eb:9c:56:05:d9:76:9b:7d:eb:9f:6f:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:F6:DD:CC:7D:C2:B5:05:59:43:4D:B7:9C:64:A8:89:0D:20:3D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CMv23cx9wrUFWUNNt5xkqIkNID0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:97:f2:e6:f0:d4:18:47:6a:7e:b8:40:55:08:a9:db:1b:69:
d4:3e:4e:fa:a1:8e:ea:68:9f:40:a4:e2:18:fe:be:1b:17:38:
01:1b:c9:66:77:68:9a:43:ea:b3:10:c7:60:8e:b8:08:2e:48:
00:37:05:72:ef:b5:ce:ac:a9:f0:55:3b:a7:e8:9a:0b:78:1e:
85:ed:b8:0a:f9:ad:b5:a8:5b:6d:02:80:93:df:61:6e:c8:3f:
40:62:11:c0:3f:64:cd:53:b6:bb:e9:b3:f0:87:03:c1:1c:25:
d5:fd:8f:16:c0:8e:6a:3b:3d:75:94:e5:d6:2f:7c:da:eb:30:
e8:78:95:ad:85:6a:40:ac:a3:01:2c:ea:58:b4:c2:94:03:53:
7f:4d:17:e1:fd:d3:49:d1:b2:d3:ed:54:b5:40:4e:3a:19:42:
f8:94:0d:c1:59:36:40:9b:41:93:b6:01:47:49:83:2d:d1:ee:
5f:1e:43:2f:c0:25:98:9d:34:b5:31:41:da:06:e9:16:e6:b8:
5c:88:09:0a:c7:e8:1c:0c:4f:5a:5a:76:73:ff:1d:53:f0:fd:
8a:47:92:47:2e:bf:e1:fb:a4:9d:d0:0d:75:ea:df:42:5a:4d:
02:72:50:05:55:74:b3:d3:f4:e0:07:1e:4e:96:28:77:2d:ce:
f7:22:97:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDoTtRYp/o1A01YDJSxG3xMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwOTI4MTM1NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGNiZjZkZGNjN2RjMmI1MDU1OTQzNGRiNzljNjRhODg5MGQyMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr4PFRQ9qNsW1BOHBUlFmPCKgbJK
7Ih4C4HVvnrYzNsCQp08fbU5Mjam2PwTk42mfJPBgZRggRxbYB6sk0xEco3IhG5R
Pdzqd+vynrClxuMQdjZoHWlaWBSyZd2XlfWQ8Dd6bQSNTDYqAI9KFzS7to0kyFvj
eppOKhN+5r9uDgd3G+XfJ+BGsJVth3FBb2u/BQyciFkGuN91RaNTffYLCYdIWhkF
Xf0ZEc/77v5o7xeCLBfwtd98DnUGDkAhN1q7QI28JJOukBvwr3De7L0A9XOnsvz2
LOY+cWgGEiAaS39bs8vYEg/ByR67MblOabxnkVNp65xWBdl2m33rn29pxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAjL9t3MfcK1BVlDTbecZKiJDSA9MB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvQ012MjNjeDl3clVGV1VOTnQ1eGtxSWtOSUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwmgEAwQA
1EWFMA0GCSqGSIb3DQEBCwUAA4IBAQB6l/Lm8NQYR2p+uEBVCKnbG2nUPk76oY7q
aJ9ApOIY/r4bFzgBG8lmd2iaQ+qzEMdgjrgILkgANwVy77XOrKnwVTun6JoLeB6F
7bgK+a21qFttAoCT32FuyD9AYhHAP2TNU7a76bPwhwPBHCXV/Y8WwI5qOz11lOXW
L3za6zDoeJWthWpArKMBLOpYtMKUA1N/TRfh/dNJ0bLT7VS1QE46GUL4lA3BWTZA
m0GTtgFHSYMt0e5fHkMvwCWYnTS1MUHaBukW5rhciAkKx+gcDE9aWnZz/x1T8P2K
R5JHLr/h+6Sd0A116t9CWk0CclAFVXSz0/TgBx5Olih3Lc73IpfO
-----END CERTIFICATE-----
Generated at Thu Oct 22 07:29:23 2026 by rpki-client