Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/CwEHiw8-rD_vPe4opG3JdCk-9XU.roa
File: CwEHiw8-rD_vPe4opG3JdCk-9XU.roa (raw, json)
Hash identifier: 5Mq6aRR/m+E+HsVhHVaZrrn3wbosNxJ4KE2lUUUVryc=
Subject key identifier: 0B:01:07:8B:0F:3E:AC:3F:EF:3D:EE:28:A4:6D:C9:74:29:3E:F5:75
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 01A15434579E30FB774E7C2A0B79F48A4D5D
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/CwEHiw8-rD_vPe4opG3JdCk-9XU.roa
Signing time: Mon 19 Oct 2026 12:47:58 +0000
ROA not before: Mon 19 Oct 2026 12:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201241
IP address blocks: 185.81.32.0/22 maxlen: 22
185.81.32.0/24 maxlen: 24
185.81.33.0/24 maxlen: 24
185.81.34.0/24 maxlen: 24
185.81.35.0/24 maxlen: 24
185.237.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:34:57:9e:30:fb:77:4e:7c:2a:0b:79:f4:8a:4d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Oct 19 12:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b01078b0f3eac3fef3dee28a46dc974293ef575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:3d:7f:48:cf:1b:05:b6:c6:b6:3b:aa:21:
d1:96:f3:9e:15:40:bf:74:1f:62:cc:c4:ba:97:28:
38:e0:26:e2:fc:05:b7:d4:d4:74:12:30:c9:fa:bd:
f8:0d:f7:b9:64:23:07:3d:96:1d:d3:93:36:a8:f8:
4e:00:a4:b9:61:f3:8f:e0:72:38:20:1c:69:cd:08:
92:b6:ef:67:29:0b:e0:84:37:94:41:b3:d6:0e:72:
46:55:f0:94:2f:d1:94:24:0c:1b:73:6d:47:2a:e7:
3a:8a:f6:4a:f3:a6:f6:24:5b:f6:73:6a:21:e7:33:
02:ba:14:60:de:a9:90:7d:85:20:60:7f:8f:26:e5:
b7:ce:ae:98:5a:c7:dd:5a:3f:42:77:2a:a7:e6:a1:
84:22:9e:7e:39:1d:fc:f4:76:5f:96:25:a3:38:3f:
7e:35:4d:7b:16:75:d7:e8:7b:ea:aa:6e:02:d6:95:
da:bc:30:6a:84:33:46:55:1c:c2:62:ab:50:a9:a0:
35:28:56:7e:0b:b7:85:9e:70:81:71:ed:48:21:05:
ed:a3:48:c9:2f:10:ab:69:11:75:64:c1:31:de:11:
5d:ac:01:71:3d:a4:87:94:6d:7e:95:c0:80:21:74:
bd:2d:a7:7b:4f:83:79:2c:86:57:9b:64:e0:df:24:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:07:8B:0F:3E:AC:3F:EF:3D:EE:28:A4:6D:C9:74:29:3E:F5:75
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/CwEHiw8-rD_vPe4opG3JdCk-9XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.32.0/22
185.237.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:c6:c7:6e:01:25:22:fc:b9:04:15:cb:40:f2:84:01:5b:d3:
38:c9:bb:60:6d:0c:67:22:9b:50:f6:2d:8b:5a:5d:fe:8d:cd:
37:22:6f:29:f1:fa:d9:33:83:3a:cd:b9:8f:88:ee:13:53:8b:
f6:5f:f3:97:57:20:ec:d2:6a:ce:3c:c3:18:a4:91:90:c4:cb:
6e:a5:f4:bb:e6:c9:52:b2:e6:3c:83:1f:80:b9:da:02:39:f1:
00:01:c9:cc:8a:b5:28:e8:a9:63:60:08:c9:cc:fc:a9:47:af:
ef:89:73:87:e5:18:ea:59:66:a5:52:97:a0:24:a4:51:fa:30:
9b:5c:da:e5:16:4c:13:a5:32:3d:47:a2:f2:85:34:42:f0:76:
6a:32:ec:3f:50:ee:e4:c3:51:7b:1a:f9:d4:8d:bc:ff:5c:ab:
4c:a5:ea:54:31:bd:78:5f:5a:b0:d5:b9:77:f8:19:bf:ab:e9:
a5:9d:89:b3:7d:58:71:b2:4a:19:7d:50:f1:98:95:c2:74:39:
e8:fe:8d:9b:f8:0d:e7:95:4b:ee:9a:d4:78:59:0d:66:58:d1:
9c:89:08:08:24:8f:08:bb:c9:37:ba:19:d4:e8:5f:3b:a6:8a:
0d:e3:c8:80:43:51:f4:c1:f2:1f:96:ab:22:fb:12:f7:05:ad:
92:57:5f:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFUNFeeMPt3TnwqC3n0ik1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk
NTUyMWIwHhcNMjYxMDE5MTI0NzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjAxMDc4YjBmM2VhYzNmZWYzZGVlMjhhNDZkYzk3NDI5M2VmNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P49f0jPGwW2xrY7qiHRlvOeFUC/
dB9izMS6lyg44Cbi/AW31NR0EjDJ+r34Dfe5ZCMHPZYd05M2qPhOAKS5YfOP4HI4
IBxpzQiStu9nKQvghDeUQbPWDnJGVfCUL9GUJAwbc21HKuc6ivZK86b2JFv2c2oh
5zMCuhRg3qmQfYUgYH+PJuW3zq6YWsfdWj9Cdyqn5qGEIp5+OR389HZfliWjOD9+
NU17FnXX6Hvqqm4C1pXavDBqhDNGVRzCYqtQqaA1KFZ+C7eFnnCBce1IIQXto0jJ
LxCraRF1ZMEx3hFdrAFxPaSHlG1+lcCAIXS9Lad7T4N5LIZXm2Tg3yTk0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAsBB4sPPqw/7z3uKKRtyXQpPvV1MB8GA1UdIwQY
MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt
YmQ5MWU5MmFjYTkwLzEvQ3dFSGl3OC1yRF92UGU0b3BHM0pkQ2stOVhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw
LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVEgAwQC
ue3kMA0GCSqGSIb3DQEBCwUAA4IBAQAcxsduASUi/LkEFctA8oQBW9M4ybtgbQxn
IptQ9i2LWl3+jc03Im8p8frZM4M6zbmPiO4TU4v2X/OXVyDs0mrOPMMYpJGQxMtu
pfS75slSsuY8gx+AudoCOfEAAcnMirUo6KljYAjJzPypR6/viXOH5RjqWWalUpeg
JKRR+jCbXNrlFkwTpTI9R6LyhTRC8HZqMuw/UO7kw1F7GvnUjbz/XKtMpepUMb14
X1qw1bl3+Bm/q+mlnYmzfVhxskoZfVDxmJXCdDno/o2b+A3nlUvumtR4WQ1mWNGc
iQgIJI8Iu8k3uhnU6F87pooN48iAQ1H0wfIflqsi+xL3Ba2SV19Y
-----END CERTIFICATE-----
Generated at Fri Oct 23 13:30:57 2026 by rpki-client