Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/04CCsgiQWrCraGmwI0KDyvnb7uw.roa
File: 04CCsgiQWrCraGmwI0KDyvnb7uw.roa (raw, json)
Hash identifier: HoNVWc6TGmGloQFj0Mjr1DERzR/HLMNN5r/Xa3lgjl4=
Subject key identifier: D3:80:82:B2:08:90:5A:B0:AB:68:69:B0:23:42:83:CA:F9:DB:EE:EC
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019FD20F240C7A2769792584B2E4AB4CF51C
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/04CCsgiQWrCraGmwI0KDyvnb7uw.roa
Signing time: Wed 05 Aug 2026 13:13:55 +0000
ROA not before: Wed 05 Aug 2026 13:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 94.184.14.0/24 maxlen: 24
94.184.15.0/24 maxlen: 24
94.184.19.0/24 maxlen: 24
94.184.20.0/24 maxlen: 24
94.184.23.0/24 maxlen: 24
94.184.24.0/24 maxlen: 24
94.184.26.0/24 maxlen: 24
94.184.28.0/24 maxlen: 24
94.184.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:0f:24:0c:7a:27:69:79:25:84:b2:e4:ab:4c:f5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 5 13:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d38082b208905ab0ab6869b0234283caf9dbeeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:8b:62:47:2d:32:22:2b:78:d1:93:aa:3a:
87:65:c0:6a:72:59:71:0d:7d:54:37:15:d5:0b:a6:
82:c5:ce:13:82:d1:88:0d:4f:6d:18:f8:72:48:f0:
d3:37:75:0a:97:72:a9:d6:26:c9:9e:2e:a3:21:1f:
0e:20:56:bd:26:ea:01:e9:88:4b:d5:6f:73:fa:06:
95:2b:50:48:59:37:1c:8c:89:ab:c9:81:d0:07:cf:
c6:6b:76:32:14:ae:b2:44:5b:b2:c9:93:07:fe:c3:
04:5a:3a:4a:92:22:4c:30:36:2e:3d:48:b1:4d:3b:
04:20:85:5c:53:27:cb:3a:1e:b4:3b:3f:d2:25:dd:
60:e9:0d:ae:45:73:47:3c:82:2e:13:43:c8:4d:e8:
9f:c5:6d:4c:1a:27:73:59:28:c3:aa:31:0b:7a:6e:
af:67:17:e9:c6:d3:cd:39:d7:7b:81:70:18:6c:10:
37:8c:84:3d:9c:84:7f:e4:3d:d3:58:f5:12:a5:a7:
a9:4d:3e:1f:20:59:1c:13:e5:30:e4:a6:e7:d1:9c:
67:37:0a:41:16:51:a3:9f:87:3e:0e:6f:70:b8:b7:
ac:58:c0:c9:be:b5:f2:29:0f:a1:b4:8c:52:6d:8e:
85:34:20:6c:88:2b:04:10:a0:41:79:6c:82:5b:bd:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:82:B2:08:90:5A:B0:AB:68:69:B0:23:42:83:CA:F9:DB:EE:EC
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/04CCsgiQWrCraGmwI0KDyvnb7uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.14.0/23
94.184.19.0-94.184.20.255
94.184.23.0-94.184.24.255
94.184.26.0/24
94.184.28.0/24
94.184.30.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:b6:3d:ac:e7:a8:d3:35:22:c3:40:0b:5d:3d:f8:47:5e:
bc:a6:0b:f2:bb:53:11:98:67:30:2f:1b:ef:de:e0:67:83:89:
0e:35:67:2e:42:36:59:d0:14:9b:e9:82:a5:db:a8:55:af:b9:
6d:5d:91:a8:37:eb:1f:8b:a9:92:d0:b8:9b:49:d4:91:34:34:
87:f9:5a:87:11:ba:71:1d:70:78:6f:c9:bc:27:05:a8:28:65:
d8:6f:58:6a:bb:b3:d4:73:fa:70:83:99:13:9a:b6:a8:27:ee:
54:79:46:5b:5a:ae:39:ac:0c:06:1a:0d:67:91:93:2f:16:57:
db:1f:2b:58:74:09:80:97:46:cd:e7:79:a5:dd:5a:3c:37:28:
ae:84:f3:c6:3e:22:51:32:5e:9e:2a:89:81:b8:fa:4d:8b:f4:
33:76:9e:f2:fc:68:1f:52:39:78:ba:4e:52:2c:0b:a1:62:1a:
0b:28:bc:68:ee:26:67:0d:64:a7:64:f1:1c:73:f9:09:5f:a7:
cf:9a:22:0e:34:5f:52:16:65:d9:1c:fe:64:11:64:12:12:de:
df:33:33:07:0b:5e:91:55:33:ab:ef:d0:0e:15:78:d8:77:eb:
18:42:ad:db:55:fe:cc:73:2a:d9:69:88:d8:02:ad:ee:22:12:
a9:92:0b:96
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZ/SDyQMeidpeSWEsuSrTPUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwODA1MTMxMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzgwODJiMjA4OTA1YWIwYWI2ODY5YjAyMzQyODNjYWY5ZGJlZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmLYkctMiIreNGTqjqHZcBqcllx
DX1UNxXVC6aCxc4TgtGIDU9tGPhySPDTN3UKl3Kp1ibJni6jIR8OIFa9JuoB6YhL
1W9z+gaVK1BIWTccjImryYHQB8/Ga3YyFK6yRFuyyZMH/sMEWjpKkiJMMDYuPUix
TTsEIIVcUyfLOh60Oz/SJd1g6Q2uRXNHPIIuE0PITeifxW1MGidzWSjDqjELem6v
ZxfpxtPNOdd7gXAYbBA3jIQ9nIR/5D3TWPUSpaepTT4fIFkcE+Uw5Kbn0ZxnNwpB
FlGjn4c+Dm9wuLesWMDJvrXyKQ+htIxSbY6FNCBsiCsEEKBBeWyCW70bIQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFNOAgrIIkFqwq2hpsCNCg8r52+7sMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvMDRDQ3NnaVFXckNyYUdtd0kwS0R5dm5iN3V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBXrgOMAwD
BABeuBMDBABeuBQwDAMEAF64FwMEAF64GAMEAF64GgMEAF64HAMEAF64HjANBgkq
hkiG9w0BAQsFAAOCAQEAAWi2PaznqNM1IsNAC109+EdevKYL8rtTEZhnMC8b797g
Z4OJDjVnLkI2WdAUm+mCpduoVa+5bV2RqDfrH4upktC4m0nUkTQ0h/lahxG6cR1w
eG/JvCcFqChl2G9Yaruz1HP6cIOZE5q2qCfuVHlGW1quOawMBhoNZ5GTLxZX2x8r
WHQJgJdGzed5pd1aPDcoroTzxj4iUTJeniqJgbj6TYv0M3ae8vxoH1I5eLpOUiwL
oWIaCyi8aO4mZw1kp2TxHHP5CV+nz5oiDjRfUhZl2Rz+ZBFkEhLe3zMzBwtekVUz
q+/QDhV42HfrGEKt21X+zHMq2WmI2AKt7iISqZILlg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:29 2026 by rpki-client