Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa
File: cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa (raw, json)
Hash identifier: /Is553alSS62yiVoav4+HU2iTt1j95KP3P9CAryXxjU=
Subject key identifier: 73:06:D5:D2:F5:9C:43:95:A3:E8:4D:F5:A0:87:92:C4:45:6B:06:E6
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 019F23690B86466BCCDE67267301FD3A1700
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 194.238.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0b:86:46:6b:cc:de:67:26:73:01:fd:3a:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7306d5d2f59c4395a3e84df5a08792c4456b06e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:68:eb:51:4b:31:b8:64:01:4f:03:4b:ec:
14:58:42:5e:57:07:d4:0c:b8:6d:7c:94:5d:cd:7d:
8c:41:9f:91:7b:17:c6:e4:2a:a2:6c:82:4b:c8:8f:
08:0f:ab:2d:ef:8a:a1:6c:7e:af:4f:ad:a2:23:44:
18:96:77:dd:9a:12:c9:d2:de:83:9a:ac:99:d5:82:
c2:dd:cb:82:78:65:f0:b0:e9:9c:66:23:e9:d8:53:
aa:07:7d:70:0d:65:e1:38:d1:04:7e:9c:37:4e:1e:
01:a6:59:14:6c:54:88:a6:13:2e:ef:80:3f:ee:ae:
d3:9e:e3:ab:d4:1c:15:ce:8b:c5:21:dc:61:df:06:
6a:ee:68:6d:bd:cc:20:e4:3c:6a:c0:1c:f8:a9:03:
d9:25:3c:b8:3b:0b:35:3b:8f:1c:43:00:c2:31:6d:
2d:d8:80:20:bd:a9:2f:36:0d:b9:95:b1:56:36:be:
ba:9c:cf:d2:dd:f4:7d:58:f1:9c:59:a7:84:51:a7:
7a:5f:fd:59:35:40:35:f1:10:bb:7f:df:ab:cb:76:
ce:78:67:dc:93:1a:29:3a:96:d1:6b:db:97:5c:f9:
9d:5d:d5:07:b2:2d:f6:8f:db:80:02:58:a9:01:0d:
3d:aa:8f:77:22:11:af:e7:8c:99:5b:4f:1a:59:84:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:D5:D2:F5:9C:43:95:A3:E8:4D:F5:A0:87:92:C4:45:6B:06:E6
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:db:80:75:74:47:80:9e:b6:5f:96:8d:59:d0:22:f7:61:fb:
ba:b3:34:1d:d5:9d:1a:4b:f4:de:e9:e3:fa:5a:28:0b:3e:49:
4c:d9:cc:f2:6c:de:22:c0:68:33:d6:3b:49:aa:cb:5c:ee:ae:
70:86:ac:54:06:14:aa:49:5f:5f:0f:a1:bd:13:4d:52:f0:23:
9c:85:20:55:8c:d1:cd:99:14:c3:8e:1e:00:68:cf:8e:f8:46:
38:e1:59:c4:15:a6:4d:8d:39:d2:d1:70:a8:c7:5f:c8:39:06:
16:e5:20:e9:bc:c1:c5:07:bb:8c:9c:82:3e:ba:39:9a:18:73:
ea:54:9d:33:86:79:fa:08:bb:ca:c8:79:2a:f7:48:74:a3:29:
1e:8f:07:5d:31:79:08:bd:cb:20:21:f2:0a:71:13:bf:73:90:
65:31:e8:36:cc:dc:7d:ae:a1:e3:96:bc:dc:58:05:34:6c:01:
d2:40:b1:53:bf:9a:4b:58:3d:15:0a:ad:38:8b:be:0d:3e:6b:
d9:b2:6c:e1:ac:fe:0d:70:de:e6:d5:7a:88:89:06:0f:9b:10:
e1:95:af:3b:91:29:48:a5:18:3c:2c:8a:e0:5b:ec:5b:bd:89:
a8:8c:30:35:3b:6c:9c:13:fe:8c:89:cf:3d:a1:da:14:65:6e:
8d:43:be:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQuGRmvM3mcmcwH9OhcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzgwMDU0ZTEzMzBjYTcxYjQ5MDBkNjE1YzJjZjJjM2Nl
NmNmMDQwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzA2ZDVkMmY1OWM0Mzk1YTNlODRkZjVhMDg3OTJjNDQ1NmIwNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPRo61FLMbhkAU8DS+wUWEJeVwfU
DLhtfJRdzX2MQZ+RexfG5CqibIJLyI8ID6st74qhbH6vT62iI0QYlnfdmhLJ0t6D
mqyZ1YLC3cuCeGXwsOmcZiPp2FOqB31wDWXhONEEfpw3Th4BplkUbFSIphMu74A/
7q7TnuOr1BwVzovFIdxh3wZq7mhtvcwg5DxqwBz4qQPZJTy4Ows1O48cQwDCMW0t
2IAgvakvNg25lbFWNr66nM/S3fR9WPGcWaeEUad6X/1ZNUA18RC7f9+ry3bOeGfc
kxopOpbRa9uXXPmdXdUHsi32j9uAAlipAQ09qo93IhGv54yZW08aWYRJUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMG1dL1nEOVo+hN9aCHksRFawbmMB8GA1UdIwQY
MBaAFHfIAFThMwynG0kA1hXCzyw85s8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEvY3diVjB2V2NRNVdqNkUzMW9JZVN4RVZyQnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwu45MA0G
CSqGSIb3DQEBCwUAA4IBAQAv24B1dEeAnrZflo1Z0CL3Yfu6szQd1Z0aS/Te6eP6
WigLPklM2czybN4iwGgz1jtJqstc7q5whqxUBhSqSV9fD6G9E01S8COchSBVjNHN
mRTDjh4AaM+O+EY44VnEFaZNjTnS0XCox1/IOQYW5SDpvMHFB7uMnII+ujmaGHPq
VJ0zhnn6CLvKyHkq90h0oykejwddMXkIvcsgIfIKcRO/c5BlMeg2zNx9rqHjlrzc
WAU0bAHSQLFTv5pLWD0VCq04i74NPmvZsmzhrP4NcN7m1XqIiQYPmxDhla87kSlI
pRg8LIrgW+xbvYmojDA1O2ycE/6Mic89odoUZW6NQ75Q
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:45 2026 by rpki-client