Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/cnvwLGbVEITaoX8cDVSNQAcxcqk.roa
File: cnvwLGbVEITaoX8cDVSNQAcxcqk.roa (raw, json)
Hash identifier: HW2ZpeT6aGnIzGKKy1byADe7gS6Pw3jj7fdnL63L26E=
Subject key identifier: 72:7B:F0:2C:66:D5:10:84:DA:A1:7F:1C:0D:54:8D:40:07:31:72:A9
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019DCFD6B0EEF3AA9F331A84D3AA2CC870AF
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/cnvwLGbVEITaoX8cDVSNQAcxcqk.roa
Signing time: Mon 27 Apr 2026 16:47:26 +0000
ROA not before: Mon 27 Apr 2026 16:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 141.137.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:d6:b0:ee:f3:aa:9f:33:1a:84:d3:aa:2c:c8:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Apr 27 16:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=727bf02c66d51084daa17f1c0d548d40073172a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:12:34:ab:14:1f:7c:46:d6:04:5d:dc:9d:
7b:58:26:ac:35:8f:84:ab:8a:47:a2:6a:3e:9a:0d:
e7:96:8e:9d:27:5f:44:a6:a0:d3:eb:0a:66:13:46:
e9:7e:f7:ee:56:ca:b3:a1:18:19:64:25:f6:e1:24:
02:76:28:9f:39:ab:65:3c:66:fa:d4:2e:55:b3:b9:
01:9e:cc:7f:9b:30:71:11:dd:47:b1:81:f2:61:71:
56:c0:c7:33:f7:c8:b9:f1:b4:2d:0b:df:9c:7d:f6:
1a:37:26:df:2c:5c:ff:c7:f4:19:37:d8:6c:40:d5:
7d:f9:07:82:7a:1b:0b:be:3a:3e:9a:4a:58:4a:76:
ea:02:95:09:f0:9f:6f:91:52:f1:0f:03:54:99:ee:
a9:50:1e:e6:68:94:ed:e8:46:54:2d:cb:8f:89:4b:
4a:af:ea:ad:78:18:45:c7:47:74:37:17:ca:7c:bb:
07:25:04:b0:ff:33:b4:c7:72:71:91:a5:25:7b:46:
34:2f:bf:ec:08:55:2e:1c:b7:fe:c7:9b:d6:24:0c:
fc:74:64:11:cd:7f:1c:04:7a:aa:bc:67:fa:d7:b4:
3b:15:4f:85:1c:73:7c:91:aa:9a:e4:70:14:7c:47:
7c:d7:ef:f9:1c:24:ac:01:ca:f3:fa:97:97:8d:f9:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:F0:2C:66:D5:10:84:DA:A1:7F:1C:0D:54:8D:40:07:31:72:A9
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/cnvwLGbVEITaoX8cDVSNQAcxcqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ed:e8:18:cf:ff:80:aa:58:2c:93:28:47:86:59:b1:ff:69:
a5:91:49:ec:d0:d7:68:b7:94:51:e4:38:9c:5a:09:c5:42:6a:
10:a5:68:f9:23:78:8f:52:9f:02:84:1a:52:cb:d2:d4:5f:8e:
3e:04:25:87:3f:32:1b:ac:ad:4e:36:12:ca:8d:82:b2:9f:47:
df:fa:59:61:91:76:12:27:f3:63:f5:11:67:ef:3c:f6:8a:46:
9c:e1:55:1d:dc:86:81:f4:a3:be:27:a2:b5:81:5c:5d:4d:01:
1c:75:1c:d0:81:a1:05:8e:33:f8:c0:94:d6:1a:65:73:81:34:
67:e3:90:52:6c:0f:c6:5f:9a:94:74:52:2b:2f:a9:97:0a:de:
17:9a:79:9d:d7:63:66:0c:04:95:3a:fc:b5:21:b7:0c:6c:ec:
5a:cc:ef:6f:b9:c1:b7:cb:95:1b:94:e7:dd:c9:c3:34:1f:6e:
54:46:70:c1:6c:08:d6:bf:54:db:34:14:55:e0:9b:8e:de:9c:
fc:73:c2:a3:c1:32:f1:4e:9f:f4:71:f7:f2:1f:71:c4:1a:70:
5b:3f:0c:41:4f:cc:6d:f0:7f:0d:3f:02:d8:96:95:72:bf:1d:
4e:78:39:28:2a:3f:96:d6:49:d9:60:60:75:3c:b4:b7:71:99:
2e:a2:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:07:43 2026 by rpki-client