Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uw2MlM7MOuez6-PJAIPC7IILNKk.roa
File: uw2MlM7MOuez6-PJAIPC7IILNKk.roa (raw, json)
Hash identifier: 7CCKp3FjTyuvRAaBKdxXxMNBlqPkoilRwJfOzu6LKpI=
Subject key identifier: BB:0D:8C:94:CE:CC:3A:E7:B3:EB:E3:C9:00:83:C2:EC:82:0B:34:A9
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F98C76F5E982D5241A3D1CD7EED3F2E20
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uw2MlM7MOuez6-PJAIPC7IILNKk.roa
Signing time: Sat 25 Jul 2026 10:17:14 +0000
ROA not before: Sat 25 Jul 2026 10:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 94.184.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:c7:6f:5e:98:2d:52:41:a3:d1:cd:7e:ed:3f:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 25 10:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb0d8c94cecc3ae7b3ebe3c90083c2ec820b34a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:94:7e:a9:3c:1d:41:1a:0d:84:2d:cc:f5:
23:7c:21:0d:84:2e:fa:b2:2b:54:66:06:12:91:22:
f8:d7:95:30:8e:d0:3b:a6:09:60:e4:6f:0d:f6:9d:
63:05:47:04:e9:18:91:2a:50:bf:af:96:a7:dd:f7:
4f:94:fb:fd:c7:d7:48:11:56:5a:4d:eb:d8:06:f3:
c0:b8:8e:79:68:81:02:4d:12:d5:5d:c4:14:00:5d:
ec:56:7a:18:49:2e:a9:9a:33:1d:5b:d8:fd:2f:1d:
3e:4b:8c:a2:67:62:c3:ca:74:5a:e0:13:bd:de:9f:
34:1d:5e:4a:69:ef:12:66:7a:06:d9:9b:89:aa:4d:
13:74:01:bc:10:17:29:66:d8:34:64:ec:6e:39:f8:
69:48:39:f0:8c:32:f7:29:e5:32:e4:35:7a:36:52:
89:32:4a:46:95:4b:61:24:f0:45:8b:a0:1d:02:2a:
49:dd:46:04:83:18:c1:c8:8e:6f:17:b7:fa:b3:b5:
4e:7c:cc:2d:b3:b8:4e:29:af:ab:0a:44:72:e1:2b:
27:d6:74:8e:0c:12:8a:30:dc:3d:7e:c3:1a:54:26:
30:00:3e:b5:e4:d7:b0:dc:0e:a8:48:58:b1:53:8b:
f2:34:af:20:b0:90:8a:c9:6f:2e:16:c8:e3:6b:d1:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:8C:94:CE:CC:3A:E7:B3:EB:E3:C9:00:83:C2:EC:82:0B:34:A9
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uw2MlM7MOuez6-PJAIPC7IILNKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:25:ac:4b:1f:0e:56:a9:af:ab:86:5d:f0:e2:24:1e:e3:d5:
79:57:a6:b9:1a:5a:1a:b3:53:a1:ce:7f:cb:fa:ff:76:47:a8:
4b:d6:68:ed:87:9c:be:fb:f1:ff:46:95:96:d7:e7:05:57:c8:
a2:06:74:ea:de:b8:24:d7:b2:5c:a5:dd:18:a2:51:48:93:f9:
f9:cd:36:a8:56:5e:05:9e:95:f2:ae:e9:8b:a3:d3:7d:a3:07:
b9:e1:dd:de:15:b0:8f:34:81:bc:03:2f:63:94:51:72:5f:94:
3b:a3:e4:20:d3:68:8e:6b:f8:43:50:76:f3:9f:c1:9f:ef:88:
cb:53:a7:6a:7c:4b:d1:ee:c4:1b:bc:c2:13:1f:2c:e8:92:12:
e8:6c:d4:40:e9:ee:7b:7d:23:e6:c9:71:bc:ab:e6:7f:e3:8d:
4d:cd:87:c5:27:73:72:2a:d0:02:1b:64:85:13:57:8b:fc:9b:
d0:6e:d4:55:8c:75:96:5d:ac:ed:95:f3:ce:d2:1a:e7:7a:e2:
d4:71:38:ee:cd:92:25:a6:06:f3:ad:c2:e0:c4:c3:0b:ee:09:
78:77:9c:9b:b0:0a:e8:96:b7:f1:c1:ab:9c:c1:14:d1:7e:8c:
4c:dc:7f:d3:5a:0e:cd:b0:57:27:4e:28:0c:1c:8c:2d:bf:8e:
e6:38:bf:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+Yx29emC1SQaPRzX7tPy4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwNzI1MTAxNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjBkOGM5NGNlY2MzYWU3YjNlYmUzYzkwMDgzYzJlYzgyMGIzNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2uUfqk8HUEaDYQtzPUjfCENhC76
sitUZgYSkSL415UwjtA7pglg5G8N9p1jBUcE6RiRKlC/r5an3fdPlPv9x9dIEVZa
TevYBvPAuI55aIECTRLVXcQUAF3sVnoYSS6pmjMdW9j9Lx0+S4yiZ2LDynRa4BO9
3p80HV5Kae8SZnoG2ZuJqk0TdAG8EBcpZtg0ZOxuOfhpSDnwjDL3KeUy5DV6NlKJ
MkpGlUthJPBFi6AdAipJ3UYEgxjByI5vF7f6s7VOfMwts7hOKa+rCkRy4Ssn1nSO
DBKKMNw9fsMaVCYwAD615New3A6oSFixU4vyNK8gsJCKyW8uFsjja9GPRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsNjJTOzDrns+vjyQCDwuyCCzSpMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvdXcyTWxNN01PdWV6Ni1QSkFJUEM3SUlMTktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrgsMA0G
CSqGSIb3DQEBCwUAA4IBAQC2JaxLHw5Wqa+rhl3w4iQe49V5V6a5Gloas1Ohzn/L
+v92R6hL1mjth5y++/H/RpWW1+cFV8iiBnTq3rgk17Jcpd0YolFIk/n5zTaoVl4F
npXyrumLo9N9owe54d3eFbCPNIG8Ay9jlFFyX5Q7o+Qg02iOa/hDUHbzn8Gf74jL
U6dqfEvR7sQbvMITHyzokhLobNRA6e57fSPmyXG8q+Z/441NzYfFJ3NyKtACG2SF
E1eL/JvQbtRVjHWWXaztlfPO0hrneuLUcTjuzZIlpgbzrcLgxMML7gl4d5ybsAro
lrfxwaucwRTRfoxM3H/TWg7NsFcnTigMHIwtv47mOL9r
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:37 2026 by rpki-client