Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/dVeZzKDi_fO4mE5HHo16sVmtMMU.roa
File: dVeZzKDi_fO4mE5HHo16sVmtMMU.roa (raw, json)
Hash identifier: 1r2T0D/7NQ/zB+ziH9iXBQGlu0LN0IlUyw0vofrt4CI=
Subject key identifier: 75:57:99:CC:A0:E2:FD:F3:B8:98:4E:47:1E:8D:7A:B1:59:AD:30:C5
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 01A00E87ED2DDE2DE3C135B109EDC6B80F0A
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/dVeZzKDi_fO4mE5HHo16sVmtMMU.roa
Signing time: Mon 17 Aug 2026 07:03:03 +0000
ROA not before: Mon 17 Aug 2026 07:03:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 193.134.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:87:ed:2d:de:2d:e3:c1:35:b1:09:ed:c6:b8:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Aug 17 07:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=755799cca0e2fdf3b8984e471e8d7ab159ad30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:30:49:76:6a:20:75:9c:12:dc:18:3d:bb:
8e:82:94:3c:c4:ab:6b:7a:8d:de:7c:88:32:52:5e:
83:b0:85:02:1e:54:9a:72:47:2f:6c:f1:f6:05:c8:
c5:a8:8b:72:2f:67:07:04:d1:4b:8e:b4:75:52:91:
b3:6b:90:68:38:a1:f3:28:55:a1:64:97:00:22:60:
c2:0c:88:c0:21:c1:6d:f6:c5:0a:52:78:9c:6c:7e:
71:e8:d7:c4:86:a1:f9:31:08:f4:c8:6b:2e:55:5e:
dd:45:fe:04:46:1c:6e:1e:99:b5:4b:0a:a5:6a:6a:
59:65:bd:28:5f:d3:6e:38:4e:20:6f:36:ed:61:e9:
98:d0:51:cb:6b:2b:fb:9f:ee:b4:d5:de:60:1b:bb:
fc:04:13:d8:6f:4a:02:ed:3d:c0:91:d6:cc:63:d1:
27:48:17:8e:50:04:c6:96:ac:26:9c:24:64:1c:43:
fb:d3:c5:91:20:50:3b:d2:37:8a:59:63:d9:2a:b4:
f4:5c:11:a2:2d:c2:ae:d8:f4:56:c9:c6:72:6f:ae:
9b:b7:b6:a5:0c:dd:e9:17:ab:95:de:fe:12:9e:d6:
17:2c:6c:2b:d9:96:6c:91:5a:25:fc:17:6c:42:90:
31:15:9f:63:75:b0:65:c8:10:e1:d0:c4:c9:a9:1c:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:99:CC:A0:E2:FD:F3:B8:98:4E:47:1E:8D:7A:B1:59:AD:30:C5
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/dVeZzKDi_fO4mE5HHo16sVmtMMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.100.0/24
Signature Algorithm: sha256WithRSAEncryption
41:96:98:57:6c:23:bf:83:07:97:77:ca:b2:d6:9f:d9:d3:34:
2c:9e:3a:c6:9e:c4:f0:ed:40:45:78:3b:bf:16:00:86:10:4d:
7d:e8:4c:b8:3c:f5:43:21:e4:2f:3c:17:92:43:53:95:79:17:
ed:7f:cf:80:97:0b:7c:18:cf:14:4f:fd:00:5e:11:13:d8:eb:
8c:8c:7e:fa:30:e5:88:07:e4:a9:a2:54:fb:6e:58:f8:e2:61:
ac:7b:86:b4:f6:18:f0:00:18:ca:38:7b:20:b7:07:1f:b2:77:
40:a3:cf:1a:2d:28:b3:a3:2d:48:08:10:48:c6:9b:b7:e8:ce:
ae:e9:8c:f3:01:b2:8d:32:84:62:87:d4:59:20:98:10:7a:b7:
b0:e8:29:25:3f:e2:1f:92:d7:96:e0:94:8c:83:50:b0:ab:55:
b6:f7:96:8c:0b:69:0a:8a:86:ee:86:63:05:45:25:ac:14:9e:
67:10:91:7b:46:6d:57:ad:df:d7:08:33:94:58:34:b7:d8:79:
89:39:49:54:69:15:5e:e5:15:a2:bb:a0:46:40:2f:9a:28:b4:
f1:49:84:de:05:5c:8a:16:36:35:9e:59:40:ca:87:24:ea:8a:
95:18:49:10:9a:94:44:2e:b8:47:dd:48:8b:1d:ae:d2:7f:d4:
a1:ad:11:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAOh+0t3i3jwTWxCe3GuA8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2IwMDg5OGQ5YTk0NDVjNmNlZTYzN2EzNThmZTMyZmRk
ODU3MjEwHhcNMjYwODE3MDcwMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTU3OTljY2EwZTJmZGYzYjg5ODRlNDcxZThkN2FiMTU5YWQzMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU8wSXZqIHWcEtwYPbuOgpQ8xKtr
eo3efIgyUl6DsIUCHlSackcvbPH2BcjFqItyL2cHBNFLjrR1UpGza5BoOKHzKFWh
ZJcAImDCDIjAIcFt9sUKUnicbH5x6NfEhqH5MQj0yGsuVV7dRf4ERhxuHpm1Swql
ampZZb0oX9NuOE4gbzbtYemY0FHLayv7n+601d5gG7v8BBPYb0oC7T3AkdbMY9En
SBeOUATGlqwmnCRkHEP708WRIFA70jeKWWPZKrT0XBGiLcKu2PRWycZyb66bt7al
DN3pF6uV3v4SntYXLGwr2ZZskVol/BdsQpAxFZ9jdbBlyBDh0MTJqRzTNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHVXmcyg4v3zuJhORx6NerFZrTDFMB8GA1UdIwQY
MBaAFF3LAImNmpRFxs7mN6NY/jL92FchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEt
YTA0OTI1OTc1NzU0LzEvZFZlWnpLRGlfZk80bUU1SEhvMTZzVm10TU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEtYTA0OTI1OTc1NzU0
LzEvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYZkMA0G
CSqGSIb3DQEBCwUAA4IBAQBBlphXbCO/gweXd8qy1p/Z0zQsnjrGnsTw7UBFeDu/
FgCGEE196Ey4PPVDIeQvPBeSQ1OVeRftf8+Alwt8GM8UT/0AXhET2OuMjH76MOWI
B+SpolT7blj44mGse4a09hjwABjKOHsgtwcfsndAo88aLSizoy1ICBBIxpu36M6u
6YzzAbKNMoRih9RZIJgQerew6CklP+IfkteW4JSMg1Cwq1W295aMC2kKiobuhmMF
RSWsFJ5nEJF7Rm1Xrd/XCDOUWDS32HmJOUlUaRVe5RWiu6BGQC+aKLTxSYTeBVyK
FjY1nllAyock6oqVGEkQmpRELrhH3UiLHa7Sf9ShrRE6
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:37:01 2026 by rpki-client