Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JWwcCyO1rTwTxLjbz3l2SouJTAA.roa
File: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (raw, json)
Hash identifier: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=
Subject key identifier: 25:6C:1C:0B:23:B5:AD:3C:13:C4:B8:DB:CF:79:76:4A:8B:89:4C:00
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019F76BAB1632FA519A733941CF8612884E1
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JWwcCyO1rTwTxLjbz3l2SouJTAA.roa
Signing time: Sat 18 Jul 2026 19:36:14 +0000
ROA not before: Sat 18 Jul 2026 19:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 141.226.243.0/24 maxlen: 24
213.137.89.0/24 maxlen: 24
213.137.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:ba:b1:63:2f:a5:19:a7:33:94:1c:f8:61:28:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 18 19:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=256c1c0b23b5ad3c13c4b8dbcf79764a8b894c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:83:62:c9:ac:bc:81:5b:82:a8:69:ae:77:
23:78:cf:70:19:58:8a:98:85:c2:c4:3e:44:97:9e:
df:26:05:7f:35:41:1f:95:e0:c3:1c:e3:b3:a2:03:
d6:94:93:21:20:c4:3f:2a:0f:fd:c1:f3:05:3e:f1:
67:88:ff:bd:f5:71:09:ef:7e:fd:a3:f4:94:e9:3e:
ef:fb:fe:d4:a6:e2:fa:39:ee:3a:29:43:65:a4:4d:
4e:8f:95:3e:b4:10:d4:00:d8:3f:5b:79:73:9f:d5:
aa:ef:70:ea:f3:25:70:82:15:81:4d:be:d1:f6:66:
4b:c2:cc:dc:c7:ee:0e:c7:dc:b9:6d:1c:37:3a:29:
ab:af:e8:87:6b:c9:76:86:a6:b2:b5:7d:22:ea:65:
3b:e9:54:44:82:18:bc:3c:35:69:bd:ee:c6:97:d1:
bd:8d:1a:42:e8:5d:a9:68:a9:8e:d8:b5:9b:69:cc:
72:3e:18:26:c7:9a:a6:30:a3:b9:cf:14:17:2f:9a:
ab:62:a7:d1:ec:15:b2:e1:b2:1f:50:f1:66:4c:bc:
29:97:76:ef:7d:09:dd:a6:97:f4:08:ef:d1:9d:1d:
0b:e0:04:80:6e:53:1f:a6:24:c1:8b:90:3a:95:9a:
72:10:5e:41:38:bd:15:55:08:cd:da:0b:d0:49:24:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:1C:0B:23:B5:AD:3C:13:C4:B8:DB:CF:79:76:4A:8B:89:4C:00
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JWwcCyO1rTwTxLjbz3l2SouJTAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
213.137.89.0/24
213.137.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ef:9c:29:16:b8:a1:41:bd:97:ca:7b:4a:90:04:df:95:0b:
ee:c9:09:1e:d7:48:fe:49:64:a4:33:51:a2:4b:9c:13:0b:2a:
72:47:55:be:57:b8:2b:b2:94:00:7d:29:8c:76:e7:0c:14:d7:
e3:0a:ca:69:ff:a5:9e:a8:cc:d1:35:12:ae:3a:6f:35:58:6a:
3f:01:c0:6c:59:84:32:75:51:a1:b6:b3:1e:63:4c:b4:3a:dd:
07:c3:48:e5:a1:f3:8a:3b:2d:d7:de:1f:60:da:07:ce:6f:59:
8c:fe:66:09:e6:b8:b8:f5:b5:ec:ef:3f:1e:1a:85:ec:8b:64:
62:6c:4e:06:7b:86:1c:c4:1a:b7:9c:bd:0e:dc:5a:4c:0d:88:
25:05:42:17:b7:62:5e:4c:66:32:48:53:b8:ec:f5:c0:76:4f:
ac:40:4e:72:a3:8c:fe:57:82:6e:a4:eb:a5:9e:b6:2b:a4:3b:
e9:1e:02:2f:29:d6:09:8f:a2:22:72:e5:61:95:c7:f8:a9:eb:
93:a7:21:d5:3d:b6:07:33:64:cb:ae:0b:fb:eb:7b:b5:9b:73:
7f:8c:e8:ed:ab:0b:22:05:c4:87:d2:09:3d:ba:73:2f:4b:8d:
27:56:d2:57:1a:c6:44:ef:d9:53:47:9b:72:d3:d9:80:30:ab:
34:87:1c:f8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ92urFjL6UZpzOUHPhhKIThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjYwNzE4MTkzNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTZjMWMwYjIzYjVhZDNjMTNjNGI4ZGJjZjc5NzY0YThiODk0YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbODYsmsvIFbgqhprncjeM9wGViK
mIXCxD5El57fJgV/NUEfleDDHOOzogPWlJMhIMQ/Kg/9wfMFPvFniP+99XEJ7379
o/SU6T7v+/7UpuL6Oe46KUNlpE1Oj5U+tBDUANg/W3lzn9Wq73Dq8yVwghWBTb7R
9mZLwszcx+4Ox9y5bRw3Oimrr+iHa8l2hqaytX0i6mU76VREghi8PDVpve7Gl9G9
jRpC6F2paKmO2LWbacxyPhgmx5qmMKO5zxQXL5qrYqfR7BWy4bIfUPFmTLwpl3bv
fQndppf0CO/RnR0L4ASAblMfpiTBi5A6lZpyEF5BOL0VVQjN2gvQSSQ83wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCVsHAsjta08E8S42895dkqLiUwAMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvSld3Y0N5TzFyVHdUeExqYnozbDJTb3VKVEFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjeLzAwQA
1YlZAwQA1YlbMA0GCSqGSIb3DQEBCwUAA4IBAQAP75wpFrihQb2XyntKkATflQvu
yQke10j+SWSkM1GiS5wTCypyR1W+V7grspQAfSmMducMFNfjCspp/6WeqMzRNRKu
Om81WGo/AcBsWYQydVGhtrMeY0y0Ot0Hw0jlofOKOy3X3h9g2gfOb1mM/mYJ5ri4
9bXs7z8eGoXsi2RibE4Ge4YcxBq3nL0O3FpMDYglBUIXt2JeTGYySFO47PXAdk+s
QE5yo4z+V4JupOulnrYrpDvpHgIvKdYJj6IicuVhlcf4qeuTpyHVPbYHM2TLrgv7
63u1m3N/jOjtqwsiBcSH0gk9unMvS40nVtJXGsZE79lTR5ty09mAMKs0hxz4
-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:17 2026 by rpki-client