Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa
File: u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa (raw, json)
Hash identifier: wFc0fj1o5uFkbtmZ4aVopMpmQGltmvAuiMNJULyr7/Q=
Subject key identifier: BB:BC:35:70:46:13:68:8D:83:CF:35:90:99:9C:8B:CD:AA:8C:E6:C6
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019DD06BEC3E42A98B5A7D4780D96770A71B
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa
Signing time: Mon 27 Apr 2026 19:30:26 +0000
ROA not before: Mon 27 Apr 2026 19:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47308
IP address blocks: 94.182.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:6b:ec:3e:42:a9:8b:5a:7d:47:80:d9:67:70:a7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 27 19:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbbc35704613688d83cf3590999c8bcdaa8ce6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:ae:fd:7c:e8:a7:f3:c9:eb:80:a0:54:60:
78:00:14:88:e6:04:fc:66:e7:5e:ed:96:84:ae:94:
86:c8:49:80:7d:c0:02:16:fb:03:86:6e:67:78:05:
38:df:f9:a7:07:6d:de:75:d7:1f:60:8a:8b:1a:fa:
52:b9:2e:3f:e7:e5:3f:a0:4a:10:28:11:c3:2e:df:
62:d6:1b:f5:4a:57:e0:94:67:bb:f4:4e:6b:e1:97:
04:2b:8f:2d:44:fe:bc:d7:71:c2:9c:bb:ae:6c:7c:
50:e9:db:aa:7d:7c:d3:19:62:19:78:7d:fc:8c:5b:
7a:eb:9a:e7:32:b8:36:b2:37:d2:e7:33:36:77:af:
35:8f:5d:a4:b2:68:d8:3a:71:50:ff:09:98:31:10:
2b:94:3d:ea:37:5a:f4:46:c0:15:ae:cf:65:04:b3:
c3:1a:9a:86:88:2f:be:66:55:bb:cc:29:8f:20:5a:
f1:37:43:7e:ac:cf:88:4d:3f:be:89:41:dc:2c:fc:
1c:d5:56:53:e4:7d:aa:bb:39:ec:61:03:9f:16:65:
1f:cc:13:da:6e:47:0d:7c:b4:94:99:20:00:4f:ee:
e0:b0:7b:67:be:ca:f5:74:95:71:4a:8f:ee:d9:81:
83:8e:dc:cb:3b:94:01:b7:11:77:d2:00:a8:c4:d7:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:35:70:46:13:68:8D:83:CF:35:90:99:9C:8B:CD:AA:8C:E6:C6
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.14.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a7:d0:34:94:98:8b:77:23:df:33:e4:89:43:36:21:17:cb:
08:e4:b4:cd:5c:ec:a2:ee:1c:8a:3e:43:f6:14:0c:76:f4:4f:
11:54:dc:f7:56:56:58:7a:b8:fc:db:3f:7f:83:b9:27:d8:15:
8d:91:22:d5:3a:4d:00:9f:b1:fa:e7:1e:d2:7e:d5:92:7c:9e:
16:58:1b:55:54:16:8d:53:ab:c1:ac:bd:d0:d4:b1:79:a0:64:
0c:d3:d1:31:12:b3:ea:20:d6:c8:8f:fe:9c:76:a0:d1:3e:db:
92:af:8f:0a:90:44:15:b2:1b:bd:92:76:e1:5f:9d:4a:ea:e8:
b5:67:2e:1a:e1:6c:69:c0:66:99:68:05:d7:f9:40:2a:45:ed:
16:7d:26:97:9c:c9:4e:c8:20:24:ef:4a:48:d7:5c:18:ba:75:
ad:28:4b:48:42:04:06:34:7f:bf:d4:73:9e:49:ff:86:8d:24:
99:b2:51:5b:cb:b1:62:aa:dd:10:03:0b:d0:47:d3:af:1d:4a:
b8:be:2c:07:78:2b:18:ae:50:9c:a4:b2:7e:c1:03:07:53:11:
d2:fb:cf:2a:9a:4e:07:d2:ae:e3:b2:d0:46:19:b1:b5:7c:19:
fb:2e:2f:9b:57:4f:2e:0e:07:72:fc:c3:02:de:1b:19:94:6d:
ed:7b:a7:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3Qa+w+QqmLWn1HgNlncKcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjYwNDI3MTkzMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmJjMzU3MDQ2MTM2ODhkODNjZjM1OTA5OTljOGJjZGFhOGNlNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjKu/Xzop/PJ64CgVGB4ABSI5gT8
Zude7ZaErpSGyEmAfcACFvsDhm5neAU43/mnB23eddcfYIqLGvpSuS4/5+U/oEoQ
KBHDLt9i1hv1SlfglGe79E5r4ZcEK48tRP6813HCnLuubHxQ6duqfXzTGWIZeH38
jFt665rnMrg2sjfS5zM2d681j12ksmjYOnFQ/wmYMRArlD3qN1r0RsAVrs9lBLPD
GpqGiC++ZlW7zCmPIFrxN0N+rM+ITT++iUHcLPwc1VZT5H2quznsYQOfFmUfzBPa
bkcNfLSUmSAAT+7gsHtnvsr1dJVxSo/u2YGDjtzLO5QBtxF30gCoxNf+/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLu8NXBGE2iNg881kJmci82qjObGMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvdTd3MWNFWVRhSTJEenpXUW1aeUx6YXFNNXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrYOMA0G
CSqGSIb3DQEBCwUAA4IBAQBDp9A0lJiLdyPfM+SJQzYhF8sI5LTNXOyi7hyKPkP2
FAx29E8RVNz3VlZYerj82z9/g7kn2BWNkSLVOk0An7H65x7SftWSfJ4WWBtVVBaN
U6vBrL3Q1LF5oGQM09ExErPqINbIj/6cdqDRPtuSr48KkEQVshu9knbhX51K6ui1
Zy4a4WxpwGaZaAXX+UAqRe0WfSaXnMlOyCAk70pI11wYunWtKEtIQgQGNH+/1HOe
Sf+GjSSZslFby7Fiqt0QAwvQR9OvHUq4viwHeCsYrlCcpLJ+wQMHUxHS+88qmk4H
0q7jstBGGbG1fBn7Li+bV08uDgdy/MMC3hsZlG3te6er
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:20:46 2026 by rpki-client