Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/0ywd-6eVKMtZ7bS4ku_CSsCepxU.roa
File: 0ywd-6eVKMtZ7bS4ku_CSsCepxU.roa (raw, json)
Hash identifier: ADNF64eep1JzdTcOf4p8IZP/kwaUnRYhISdpW3nO13k=
Subject key identifier: D3:2C:1D:FB:A7:95:28:CB:59:ED:B4:B8:92:EF:C2:4A:C0:9E:A7:15
Certificate issuer: /CN=ec93c81cc41403bb806bad54f3c5dbabe6079f61
Certificate serial: 019FB7A96F75FC68165AB041D5B87C1590B6
Authority key identifier: EC:93:C8:1C:C4:14:03:BB:80:6B:AD:54:F3:C5:DB:AB:E6:07:9F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JPIHMQUA7uAa61U88Xbq-YHn2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/0ywd-6eVKMtZ7bS4ku_CSsCepxU.roa
Signing time: Fri 31 Jul 2026 10:12:42 +0000
ROA not before: Fri 31 Jul 2026 10:12:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 147.156.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JPIHMQUA7uAa61U88Xbq-YHn2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:a9:6f:75:fc:68:16:5a:b0:41:d5:b8:7c:15:90:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93c81cc41403bb806bad54f3c5dbabe6079f61
Validity
Not Before: Jul 31 10:12:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d32c1dfba79528cb59edb4b892efc24ac09ea715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:0f:05:87:64:bd:c0:b8:a2:95:ea:72:ed:
06:ea:04:6d:24:59:66:6d:fe:66:0f:32:bd:6e:5b:
ea:b1:0a:b5:6c:90:42:cc:2f:71:19:cd:d4:79:24:
a5:5e:ff:85:31:b2:28:4a:49:00:38:0b:94:fb:b5:
fe:bf:33:0a:27:30:0c:ac:f6:0a:cf:99:94:3f:99:
8c:4c:6d:4d:88:03:ce:8f:8e:ef:b4:85:48:81:12:
ae:56:92:44:c6:00:c4:fd:f6:cc:55:22:05:82:67:
3f:b3:ef:50:c2:e4:a6:f9:e1:2d:60:76:09:9f:8d:
fc:50:45:ac:ff:09:e8:3d:03:59:8a:32:f9:d2:c8:
78:7d:0f:4b:f5:2c:38:1f:de:e1:03:46:fb:f9:45:
d1:6e:90:8b:1d:cd:a8:13:7d:e1:62:48:f0:b8:3c:
ff:e2:43:38:dc:ab:2d:5c:38:a6:d4:8d:0f:34:8c:
03:73:f9:88:00:8a:bb:b2:2b:4c:69:94:dd:b3:21:
36:4a:26:fd:06:b5:71:6a:a7:93:cb:f5:56:33:13:
69:05:dc:c1:e8:e2:dd:22:bf:93:f8:19:1e:ee:15:
a7:ea:48:9b:9a:ae:d9:30:3a:76:6f:ca:71:80:d0:
a7:b9:6e:b2:e9:0d:41:7a:ce:e2:15:24:3e:19:7c:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:1D:FB:A7:95:28:CB:59:ED:B4:B8:92:EF:C2:4A:C0:9E:A7:15
X509v3 Authority Key Identifier:
keyid:EC:93:C8:1C:C4:14:03:BB:80:6B:AD:54:F3:C5:DB:AB:E6:07:9F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JPIHMQUA7uAa61U88Xbq-YHn2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/0ywd-6eVKMtZ7bS4ku_CSsCepxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:75:2e:4a:2d:cb:b2:d0:77:82:95:db:b5:f2:14:e9:f2:9f:
20:67:f2:7e:ca:7b:8d:90:f5:97:fe:8a:86:fa:70:8d:ab:8b:
a9:da:c2:1d:04:94:16:0f:95:8f:35:8f:fd:56:9a:cf:fc:06:
7b:23:46:08:af:8b:1f:79:0d:c6:d9:d8:c5:13:b0:c2:61:a8:
8a:29:a0:a5:fd:e8:5f:7a:8f:cf:4f:7b:a2:eb:ba:b8:40:01:
2e:c6:93:0a:f4:8b:50:fd:c4:17:0e:9e:99:f3:ec:38:a6:5a:
b6:af:46:6a:ce:75:94:12:fc:79:81:53:4c:df:d1:9a:77:27:
96:3f:ba:23:a9:4b:03:14:f7:26:b0:56:38:ce:b1:1c:14:71:
91:2d:a0:03:41:70:5b:48:46:d2:bc:72:da:79:5c:73:a7:cb:
b7:ca:18:ba:ac:dd:3e:60:2d:ff:ed:19:90:00:d4:c0:97:4f:
06:cd:4d:80:47:e3:f3:f7:94:fc:d4:89:2e:87:77:4f:4e:16:
bb:c6:fe:d8:0c:88:81:a8:ac:b6:cf:48:de:30:bb:59:86:2a:
cd:1d:bd:1a:e4:79:a8:ab:07:bd:26:cb:f7:8b:ec:9a:30:18:
9d:ff:4c:0c:6f:3d:7c:69:c5:46:59:0c:93:a5:56:d8:32:72:
a0:f5:a9:74
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ+3qW91/GgWWrBB1bh8FZC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTNjODFjYzQxNDAzYmI4MDZiYWQ1NGYzYzVkYmFiZTYw
NzlmNjEwHhcNMjYwNzMxMTAxMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzJjMWRmYmE3OTUyOGNiNTllZGI0Yjg5MmVmYzI0YWMwOWVhNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq4PBYdkvcC4opXqcu0G6gRtJFlm
bf5mDzK9blvqsQq1bJBCzC9xGc3UeSSlXv+FMbIoSkkAOAuU+7X+vzMKJzAMrPYK
z5mUP5mMTG1NiAPOj47vtIVIgRKuVpJExgDE/fbMVSIFgmc/s+9QwuSm+eEtYHYJ
n438UEWs/wnoPQNZijL50sh4fQ9L9Sw4H97hA0b7+UXRbpCLHc2oE33hYkjwuDz/
4kM43KstXDim1I0PNIwDc/mIAIq7sitMaZTdsyE2Sib9BrVxaqeTy/VWMxNpBdzB
6OLdIr+T+Bke7hWn6kibmq7ZMDp2b8pxgNCnuW6y6Q1Bes7iFSQ+GXz6kQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFNMsHfunlSjLWe20uJLvwkrAnqcVMB8GA1UdIwQY
MBaAFOyTyBzEFAO7gGutVPPF26vmB59hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pQSUhNUVVBN3VBYTYxVTg4WGJxLVlIbjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mNmVlNzYtOGQ5My00MjA0LTgwOGMt
MWQ1OTQ0NzRiYmJmLzEvMHl3ZC02ZVZLTXRaN2JTNGt1X0NTc0NlcHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mNmVlNzYtOGQ5My00MjA0LTgwOGMtMWQ1OTQ0NzRiYmJm
LzEvN0pQSUhNUVVBN3VBYTYxVTg4WGJxLVlIbjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk5wwDQYJ
KoZIhvcNAQELBQADggEBAIh1Lkoty7LQd4KV27XyFOnynyBn8n7Ke42Q9Zf+iob6
cI2ri6nawh0ElBYPlY81j/1Wms/8BnsjRgivix95DcbZ2MUTsMJhqIopoKX96F96
j89Pe6LrurhAAS7Gkwr0i1D9xBcOnpnz7DimWravRmrOdZQS/HmBU0zf0Zp3J5Y/
uiOpSwMU9yawVjjOsRwUcZEtoANBcFtIRtK8ctp5XHOny7fKGLqs3T5gLf/tGZAA
1MCXTwbNTYBH4/P3lPzUiS6Hd09OFrvG/tgMiIGorLbPSN4wu1mGKs0dvRrkeair
B70my/eL7JowGJ3/TAxvPXxpxUZZDJOlVtgycqD1qXQ=
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:34:33 2026 by rpki-client