Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/leOu66pCcimC66Ne7uBGrPecCwE.roa
File: leOu66pCcimC66Ne7uBGrPecCwE.roa (raw, json)
Hash identifier: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=
Subject key identifier: 95:E3:AE:EB:AA:42:72:29:82:EB:A3:5E:EE:E0:46:AC:F7:9C:0B:01
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F236851C3831990BDED5E8B32B56974A4
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/leOu66pCcimC66Ne7uBGrPecCwE.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56791
IP address blocks: 94.243.224.0/21 maxlen: 22
94.243.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:c3:83:19:90:bd:ed:5e:8b:32:b5:69:74:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95e3aeebaa42722982eba35eeee046acf79c0b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:17:b9:d2:86:7a:94:6c:89:2e:2a:24:2d:
7d:4c:6f:d6:12:d6:5c:eb:0f:2d:38:5f:b1:59:77:
f5:bd:6b:5a:ec:fa:7f:71:e4:32:d8:5a:54:1b:ab:
4a:16:36:74:e1:99:ea:cf:02:e9:86:58:03:1c:5d:
c4:a7:ed:a3:65:87:c6:1e:3c:70:5e:27:65:63:17:
a7:6b:80:dd:ac:bd:99:dd:c0:1c:77:bc:fb:03:c9:
94:ea:31:1f:0b:4d:b5:3b:0f:fc:bd:7a:c4:57:81:
9e:78:59:38:c1:ec:c8:bd:82:79:49:70:4c:65:b3:
82:78:e0:c6:a9:a3:46:c6:bb:05:de:58:f4:48:e0:
36:a2:eb:2d:e6:a0:03:20:6e:f2:f9:e2:c3:64:da:
f2:e0:bf:18:d0:d8:6c:89:00:a5:f3:25:29:3f:bf:
2a:7a:f6:7d:65:d0:6f:db:16:d6:b4:20:5e:8c:33:
31:15:d6:c5:e3:1e:3c:bb:e8:8c:d8:5a:97:67:71:
9e:9c:b1:ec:32:4e:e6:80:4b:30:34:63:5b:03:ff:
95:52:3f:c7:0a:0f:ae:d3:1d:fe:cc:87:02:54:42:
72:84:b4:28:e1:13:01:9a:a2:97:9f:2a:e8:fe:66:
d3:79:cd:ce:76:94:b2:6a:1a:00:de:cb:81:48:17:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E3:AE:EB:AA:42:72:29:82:EB:A3:5E:EE:E0:46:AC:F7:9C:0B:01
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/leOu66pCcimC66Ne7uBGrPecCwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.224.0-94.243.235.255
Signature Algorithm: sha256WithRSAEncryption
4b:c9:ac:c8:0a:2b:46:4e:69:52:bb:80:f7:39:a2:e4:e1:1f:
00:91:9e:ea:d4:5d:72:5a:23:ae:3f:1d:04:25:eb:52:e6:5f:
48:64:95:5f:85:b7:a7:af:be:9e:07:1e:f8:0f:7b:93:e6:5c:
6a:44:27:d4:e6:97:cb:97:33:ce:8d:43:2c:36:1a:6f:74:7e:
21:de:76:a3:9d:51:b9:5d:c9:05:39:89:38:10:50:8c:3d:a3:
b7:5c:8a:30:de:e3:ed:e2:68:fd:04:75:76:b4:fa:ae:15:77:
c7:67:8f:da:72:b6:19:8c:58:00:17:58:3b:53:51:fa:fa:2c:
db:ee:b2:99:2e:24:bd:87:65:4c:3c:31:1b:a8:01:14:c3:93:
a6:bf:e1:38:9c:89:7b:7c:65:f5:d9:3b:9a:11:d0:1d:de:05:
67:8b:80:51:32:b9:68:b4:c9:77:5d:a2:59:29:40:7d:da:09:
8a:8f:c7:23:2f:8a:c2:79:3c:d7:a5:53:46:90:d9:d3:78:f8:
b8:d4:49:2f:b2:d9:d6:6c:1f:8d:43:81:c8:f2:1a:bc:3b:31:
30:f2:6a:18:3c:cc:87:79:4b:d7:b6:8d:bb:38:16:2c:87:24:
82:73:37:82:49:80:87:9d:90:87:ec:ed:42:b2:b5:18:9a:30:
7f:61:db:de
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaFHDgxmQve1eizK1aXSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYmZiN2Q1ZTM0M2RjY2U3MzA2ZTJiMjVkZDliNTZmYWUz
ZWJiNzQwHhcNMjYwNzAyMTUxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWUzYWVlYmFhNDI3MjI5ODJlYmEzNWVlZWUwNDZhY2Y3OWMwYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPAXudKGepRsiS4qJC19TG/WEtZc
6w8tOF+xWXf1vWta7Pp/ceQy2FpUG6tKFjZ04ZnqzwLphlgDHF3Ep+2jZYfGHjxw
XidlYxena4DdrL2Z3cAcd7z7A8mU6jEfC021Ow/8vXrEV4GeeFk4wezIvYJ5SXBM
ZbOCeODGqaNGxrsF3lj0SOA2oust5qADIG7y+eLDZNry4L8Y0NhsiQCl8yUpP78q
evZ9ZdBv2xbWtCBejDMxFdbF4x48u+iM2FqXZ3GenLHsMk7mgEswNGNbA/+VUj/H
Cg+u0x3+zIcCVEJyhLQo4RMBmqKXnyro/mbTec3OdpSyahoA3suBSBfdVQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJXjruuqQnIpguujXu7gRqz3nAsBMB8GA1UdIwQY
MBaAFDK/t9XjQ9zOcwbisl3ZtW+uPrt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXItMzFlTkQzTTV6QnVLeVhkbTFiNjQtdTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt
NDUwZmUzMzU5NWQxLzEvbGVPdTY2cENjaW1DNjZOZTd1QkdyUGVjQ3dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx
LzEvTXItMzFlTkQzTTV6QnVLeVhkbTFiNjQtdTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVe8+AD
BAJe8+gwDQYJKoZIhvcNAQELBQADggEBAEvJrMgKK0ZOaVK7gPc5ouThHwCRnurU
XXJaI64/HQQl61LmX0hklV+Ft6evvp4HHvgPe5PmXGpEJ9Tml8uXM86NQyw2Gm90
fiHedqOdUbldyQU5iTgQUIw9o7dcijDe4+3iaP0EdXa0+q4Vd8dnj9pythmMWAAX
WDtTUfr6LNvuspkuJL2HZUw8MRuoARTDk6a/4TiciXt8ZfXZO5oR0B3eBWeLgFEy
uWi0yXddolkpQH3aCYqPxyMvisJ5PNelU0aQ2dN4+LjUSS+y2dZsH41DgcjyGrw7
MTDyahg8zId5S9e2jbs4FiyHJIJzN4JJgIedkIfs7UKytRiaMH9h294=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:16 2026 by rpki-client