Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cRBLWU1NBOyNMWeZg6GR1U1enXk.roa
File: cRBLWU1NBOyNMWeZg6GR1U1enXk.roa (raw, json)
Hash identifier: uefNLej0mfXkMXcRI5ZpC9u5kC/1j/ujJcOSmjZvZ6Q=
Subject key identifier: 71:10:4B:59:4D:4D:04:EC:8D:31:67:99:83:A1:91:D5:4D:5E:9D:79
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F656941FC3FE46DD6BC31F250919F20E6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cRBLWU1NBOyNMWeZg6GR1U1enXk.roa
Signing time: Wed 15 Jul 2026 10:53:44 +0000
ROA not before: Wed 15 Jul 2026 10:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203758
IP address blocks: 195.72.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:69:41:fc:3f:e4:6d:d6:bc:31:f2:50:91:9f:20:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 15 10:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71104b594d4d04ec8d31679983a191d54d5e9d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:31:14:20:a8:38:dd:e7:4f:30:8d:63:a3:
8f:e6:8a:f2:0c:bc:fb:14:cd:3f:d9:41:3e:f2:d2:
69:fe:8c:8e:cd:b8:bd:1d:d5:a3:33:71:d5:46:f8:
13:ed:65:f0:b4:6f:98:d8:5d:97:10:b5:e6:1d:31:
ce:28:55:d5:8e:e2:79:2f:61:f0:39:e9:84:0c:88:
81:96:bf:47:e4:f0:c4:84:24:e5:f6:c8:c0:61:28:
4f:24:98:e3:3c:2f:d1:6b:28:51:34:46:d5:11:16:
73:3e:76:bf:04:87:c3:37:e4:24:be:24:89:38:31:
9f:2a:1e:4c:e2:89:59:69:3a:e3:eb:80:1b:13:0d:
6c:c7:0f:17:97:73:3d:7f:a9:b4:41:71:f0:8b:c5:
17:d1:e1:d7:04:34:83:34:70:55:66:3e:7e:fc:ca:
79:c1:c0:fa:61:e5:f7:3f:ec:76:65:85:71:3d:54:
d6:74:80:7f:7b:e7:e4:a3:62:ac:72:73:82:d4:16:
7b:f5:81:1d:b1:4e:63:87:46:6d:17:e4:7a:c8:73:
f5:6f:e3:0f:82:a1:02:75:3b:ce:80:00:25:fc:03:
ea:0e:de:b3:62:6f:1d:87:e3:9e:48:85:28:9a:ce:
1d:bf:f0:58:69:5b:27:aa:89:d3:06:26:fb:3d:0a:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:10:4B:59:4D:4D:04:EC:8D:31:67:99:83:A1:91:D5:4D:5E:9D:79
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cRBLWU1NBOyNMWeZg6GR1U1enXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.166.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bd:73:bd:32:a3:f0:2e:34:13:d2:d5:97:3a:41:8d:91:75:
bd:e0:0d:18:9c:c4:58:ab:08:38:56:d6:53:9e:86:e7:f7:07:
75:8b:9f:58:dc:54:7d:85:f8:43:ff:11:43:c5:0c:4e:2c:3b:
20:ff:ab:dc:60:ab:32:a1:f2:c7:f0:4e:cd:b5:26:33:97:08:
1b:3e:e0:39:6f:d7:79:1c:93:96:5e:f7:54:5f:98:cf:02:58:
16:7c:1b:14:ca:ec:8b:e0:cd:2d:57:c4:5d:82:d7:f2:e9:38:
95:32:fe:c4:1b:cd:fa:e4:34:be:cb:c8:e0:8c:86:ef:28:32:
8e:ba:ba:b0:b4:03:4e:01:0c:c9:c1:49:4a:91:b2:0b:41:c4:
d8:fd:8e:1e:68:ca:d3:ee:06:69:e6:37:87:1f:6d:01:74:cd:
dc:50:74:a5:03:a3:90:00:a7:24:6f:c6:d7:71:1d:cc:80:eb:
21:a2:fd:b4:96:0d:01:28:c1:51:e3:07:38:8f:92:8b:39:c1:
a8:3f:1e:60:8f:e8:a6:41:e7:da:06:dc:87:1d:ed:54:a0:a4:
2b:63:01:ac:9f:d0:f5:43:c9:78:6f:02:47:6b:9a:f9:bf:52:
16:d1:6e:5c:12:55:f9:cb:75:61:2d:c8:c7:e8:a8:1e:a0:18:
f0:70:eb:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9laUH8P+Rt1rwx8lCRnyDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzE1MTA1MzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTEwNGI1OTRkNGQwNGVjOGQzMTY3OTk4M2ExOTFkNTRkNWU5ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hExFCCoON3nTzCNY6OP5oryDLz7
FM0/2UE+8tJp/oyOzbi9HdWjM3HVRvgT7WXwtG+Y2F2XELXmHTHOKFXVjuJ5L2Hw
OemEDIiBlr9H5PDEhCTl9sjAYShPJJjjPC/RayhRNEbVERZzPna/BIfDN+QkviSJ
ODGfKh5M4olZaTrj64AbEw1sxw8Xl3M9f6m0QXHwi8UX0eHXBDSDNHBVZj5+/Mp5
wcD6YeX3P+x2ZYVxPVTWdIB/e+fko2KscnOC1BZ79YEdsU5jh0ZtF+R6yHP1b+MP
gqECdTvOgAAl/APqDt6zYm8dh+OeSIUoms4dv/BYaVsnqonTBib7PQoWqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHEQS1lNTQTsjTFnmYOhkdVNXp15MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvY1JCTFdVMU5CT3lOTVdlWmc2R1IxVTFlblhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0imMA0G
CSqGSIb3DQEBCwUAA4IBAQARvXO9MqPwLjQT0tWXOkGNkXW94A0YnMRYqwg4VtZT
nobn9wd1i59Y3FR9hfhD/xFDxQxOLDsg/6vcYKsyofLH8E7NtSYzlwgbPuA5b9d5
HJOWXvdUX5jPAlgWfBsUyuyL4M0tV8Rdgtfy6TiVMv7EG8365DS+y8jgjIbvKDKO
urqwtANOAQzJwUlKkbILQcTY/Y4eaMrT7gZp5jeHH20BdM3cUHSlA6OQAKckb8bX
cR3MgOshov20lg0BKMFR4wc4j5KLOcGoPx5gj+imQefaBtyHHe1UoKQrYwGsn9D1
Q8l4bwJHa5r5v1IW0W5cElX5y3VhLcjH6KgeoBjwcOvO
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:20 2026 by rpki-client