Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WTyRCUNlPQ0I7NOClGRVMixR62A.roa
File: WTyRCUNlPQ0I7NOClGRVMixR62A.roa (raw, json)
Hash identifier: 44Ccb3GbG2l2uIKqqrlsTvtthdRlIassL7lz7pkm25I=
Subject key identifier: 59:3C:91:09:43:65:3D:0D:08:EC:D3:82:94:64:55:32:2C:51:EB:60
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019E212AE1E85215EE6D4EEAFB2C451569AA
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WTyRCUNlPQ0I7NOClGRVMixR62A.roa
Signing time: Wed 13 May 2026 11:48:38 +0000
ROA not before: Wed 13 May 2026 11:48:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202793
IP address blocks: 194.32.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:2a:e1:e8:52:15:ee:6d:4e:ea:fb:2c:45:15:69:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 13 11:48:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=593c910943653d0d08ecd382946455322c51eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:aa:6a:2f:6d:6e:d3:0d:f5:8e:fd:4f:90:
fb:f4:c9:77:55:4f:e6:4e:fc:5a:d8:15:4b:ff:99:
d1:2e:9b:f2:e5:03:2a:c6:db:61:99:fa:40:d1:54:
74:a2:9c:a0:9c:1e:9b:4b:5a:71:58:e1:d8:ad:47:
ba:a7:25:32:94:28:e9:eb:05:9b:9f:53:15:9f:ff:
2e:5f:a5:83:f6:d8:f6:fd:62:4f:b2:64:bc:2e:34:
c8:6c:22:10:d2:44:e1:a6:fe:97:2e:35:a8:41:41:
a9:8e:de:fa:fd:08:b7:84:41:97:bc:f0:d1:83:8b:
d7:71:b6:3e:d2:14:a0:72:45:7b:03:a7:7f:8c:3b:
92:16:63:fa:48:70:71:93:00:08:20:0a:83:6f:89:
e0:73:76:11:fa:0f:d8:4a:dd:62:81:a8:92:12:dc:
e1:a3:10:ee:4b:eb:ed:d7:c9:86:ca:ad:22:df:97:
a6:08:c1:7f:ee:13:a0:78:5b:e7:b2:e7:5d:fb:d4:
25:d5:ce:61:a2:6c:21:66:29:d5:ba:84:69:42:70:
91:2d:ee:66:28:0d:70:64:21:e4:97:d9:6e:e7:f2:
f8:e2:62:f9:37:cf:47:34:90:b2:17:81:a1:4a:6f:
05:32:9f:84:46:1f:80:a4:ed:c7:22:80:37:d0:71:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:91:09:43:65:3D:0D:08:EC:D3:82:94:64:55:32:2C:51:EB:60
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WTyRCUNlPQ0I7NOClGRVMixR62A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a5:ef:d6:1b:89:30:d1:d3:8b:84:a4:b8:3d:d9:93:b5:8f:
41:3e:c2:35:39:b1:48:b1:c2:0b:be:33:1b:c7:1c:bf:8e:9d:
82:e5:9f:0d:33:12:dc:00:86:b3:3d:1c:98:28:a4:0c:4d:7e:
6f:dc:e6:1f:40:e2:7a:e3:af:cb:62:ec:58:1a:d4:04:b4:50:
39:9a:87:dd:c2:28:70:03:b7:58:0b:b4:1b:8d:40:a0:c5:b3:
ae:70:89:6e:80:38:06:de:f9:12:b7:31:9e:42:c9:2f:b7:31:
93:2e:40:97:20:53:3a:ec:46:76:ce:6f:42:e9:43:e1:40:ac:
d6:a8:fb:56:63:a5:39:b5:3f:02:97:45:1f:79:23:ba:46:db:
62:b1:d5:0f:19:18:75:08:b9:92:2a:74:f8:b7:08:87:c3:d4:
47:af:39:e7:32:d7:bc:5d:80:18:06:5e:b5:eb:09:87:e8:d1:
e5:81:78:7f:fb:1a:9e:20:6f:0f:d0:6c:de:6e:3b:db:73:f5:
65:37:1e:fe:b1:32:60:14:46:03:44:a4:b0:48:3d:c6:c6:46:
81:c8:de:31:7c:10:3f:a2:ce:b7:fe:0c:59:91:fa:24:dd:92:
09:52:00:64:97:e9:8f:bd:29:35:69:30:6e:f2:64:36:a6:5e:
64:21:fb:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4hKuHoUhXubU7q+yxFFWmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwNTEzMTE0ODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTNjOTEwOTQzNjUzZDBkMDhlY2QzODI5NDY0NTUzMjJjNTFlYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oCqai9tbtMN9Y79T5D79Ml3VU/m
Tvxa2BVL/5nRLpvy5QMqxtthmfpA0VR0opygnB6bS1pxWOHYrUe6pyUylCjp6wWb
n1MVn/8uX6WD9tj2/WJPsmS8LjTIbCIQ0kThpv6XLjWoQUGpjt76/Qi3hEGXvPDR
g4vXcbY+0hSgckV7A6d/jDuSFmP6SHBxkwAIIAqDb4ngc3YR+g/YSt1igaiSEtzh
oxDuS+vt18mGyq0i35emCMF/7hOgeFvnsudd+9Ql1c5homwhZinVuoRpQnCRLe5m
KA1wZCHkl9lu5/L44mL5N89HNJCyF4GhSm8FMp+ERh+ApO3HIoA30HFNGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFk8kQlDZT0NCOzTgpRkVTIsUetgMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvV1R5UkNVTmxQUTBJN05PQ2xHUlZNaXhSNjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiDmMA0G
CSqGSIb3DQEBCwUAA4IBAQA7pe/WG4kw0dOLhKS4PdmTtY9BPsI1ObFIscILvjMb
xxy/jp2C5Z8NMxLcAIazPRyYKKQMTX5v3OYfQOJ646/LYuxYGtQEtFA5mofdwihw
A7dYC7QbjUCgxbOucIlugDgG3vkStzGeQskvtzGTLkCXIFM67EZ2zm9C6UPhQKzW
qPtWY6U5tT8Cl0UfeSO6RttisdUPGRh1CLmSKnT4twiHw9RHrznnMte8XYAYBl61
6wmH6NHlgXh/+xqeIG8P0Gzebjvbc/VlNx7+sTJgFEYDRKSwSD3GxkaByN4xfBA/
os63/gxZkfok3ZIJUgBkl+mPvSk1aTBu8mQ2pl5kIfte
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:28 2026 by rpki-client