Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ywexjdSx58c_dnH_pe3prB5KbBc.roa
File: ywexjdSx58c_dnH_pe3prB5KbBc.roa (raw, json)
Hash identifier: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=
Subject key identifier: CB:07:B1:8D:D4:B1:E7:C7:3F:76:71:FF:A5:ED:E9:AC:1E:4A:6C:17
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A049A5B8AD1B420FB282E11BAA6E04C451
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ywexjdSx58c_dnH_pe3prB5KbBc.roa
Signing time: Fri 28 Aug 2026 18:33:12 +0000
ROA not before: Fri 28 Aug 2026 18:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 36.255.212.0/24 maxlen: 24
94.154.183.0/24 maxlen: 24
103.216.199.0/24 maxlen: 24
162.218.91.0/24 maxlen: 24
185.171.126.0/24 maxlen: 24
212.60.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:a5:b8:ad:1b:42:0f:b2:82:e1:1b:aa:6e:04:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Aug 28 18:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb07b18dd4b1e7c73f7671ffa5ede9ac1e4a6c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:43:ea:0f:d7:23:a1:55:1b:82:47:ee:de:
d3:29:42:eb:3e:af:62:88:4d:f1:a6:e1:d1:ae:40:
4e:96:9c:d7:b7:b7:d1:0c:44:07:15:8c:5a:06:e6:
eb:47:b7:93:b0:7c:f4:a3:5d:e8:b0:7a:ac:e2:3b:
ee:cf:f7:ed:4b:af:7d:7e:a3:b1:14:a0:22:4a:b3:
e4:50:f6:8a:3c:7b:e1:c9:fe:df:ee:74:d0:ee:5e:
fd:1e:11:48:ec:38:fb:5f:d5:6f:5d:25:b0:0f:57:
8f:70:64:01:20:df:a0:03:fb:31:16:b0:f0:36:b2:
4e:ad:39:be:19:53:61:7c:3a:a1:13:a4:31:5f:40:
f3:8b:0e:f1:2e:24:b5:2a:87:63:37:16:16:40:b6:
87:2e:64:3c:f6:81:b9:82:f0:d9:17:67:de:d9:d6:
28:1d:53:e4:bc:3d:bc:3d:46:21:8b:94:a5:89:dc:
45:24:f9:d5:25:1c:07:64:38:3b:84:d5:c7:34:50:
10:07:77:f3:e8:40:c8:c5:ce:8f:24:8b:71:9c:4a:
d9:61:49:4f:ae:32:2c:cd:b6:43:4e:3b:ed:be:6d:
23:b2:32:10:1a:54:fc:62:94:93:8f:af:6b:1b:97:
c0:09:99:3b:26:fc:2a:b7:7c:99:7f:17:79:7e:cc:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:B1:8D:D4:B1:E7:C7:3F:76:71:FF:A5:ED:E9:AC:1E:4A:6C:17
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ywexjdSx58c_dnH_pe3prB5KbBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.212.0/24
94.154.183.0/24
103.216.199.0/24
162.218.91.0/24
185.171.126.0/24
212.60.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:86:f8:43:1d:dc:e6:08:cf:4c:a3:7a:1b:36:4e:53:64:23:
f6:74:5a:44:d1:da:66:0a:d4:61:79:b9:7e:2d:46:90:4a:1e:
23:d5:f8:fb:02:8e:63:db:cd:fa:79:07:14:af:07:78:33:33:
b6:04:4e:5b:32:43:06:eb:67:4f:b9:77:6e:06:21:33:18:20:
0b:19:ef:bf:d3:2f:03:95:9c:1a:9c:5f:0f:fd:f6:4e:b6:99:
48:27:8d:d4:7f:8d:c4:a5:6e:f8:cd:d5:8d:6e:1b:b8:74:88:
ca:18:f2:83:ad:98:a7:3b:5a:12:c7:4c:ee:21:61:0a:33:d8:
8a:b9:48:40:02:25:9a:53:72:55:bb:d8:fe:b8:46:c1:f6:a2:
69:6b:02:8e:40:9d:84:c1:cb:ef:1b:46:66:c5:6b:55:cc:4c:
4d:cb:06:7e:10:cb:a8:dc:35:0b:56:df:bc:21:3c:29:af:a0:
19:ed:30:ae:c2:ec:e3:67:80:a9:76:54:88:ca:66:9b:8e:6b:
6b:04:5f:43:47:dd:25:5b:25:52:06:c6:c6:38:5e:38:1b:ec:
5c:48:0a:a1:80:b0:d5:46:bf:71:ad:3a:21:28:b8:e1:1e:50:
f7:2c:c5:3b:4e:20:a4:f7:f4:db:15:07:2e:63:f0:ab:5b:5a:
32:61:70:eb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaBJpbitG0IPsoLhG6puBMRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwODI4MTgzMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjA3YjE4ZGQ0YjFlN2M3M2Y3NjcxZmZhNWVkZTlhYzFlNGE2YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8xD6g/XI6FVG4JH7t7TKULrPq9i
iE3xpuHRrkBOlpzXt7fRDEQHFYxaBubrR7eTsHz0o13osHqs4jvuz/ftS699fqOx
FKAiSrPkUPaKPHvhyf7f7nTQ7l79HhFI7Dj7X9VvXSWwD1ePcGQBIN+gA/sxFrDw
NrJOrTm+GVNhfDqhE6QxX0Dziw7xLiS1KodjNxYWQLaHLmQ89oG5gvDZF2fe2dYo
HVPkvD28PUYhi5SlidxFJPnVJRwHZDg7hNXHNFAQB3fz6EDIxc6PJItxnErZYUlP
rjIszbZDTjvtvm0jsjIQGlT8YpSTj69rG5fACZk7Jvwqt3yZfxd5fsx/sQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMsHsY3UsefHP3Zx/6Xt6aweSmwXMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEveXdleGpkU3g1OGNfZG5IX3BlM3ByQjVLYkJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJP/UAwQA
Xpq3AwQAZ9jHAwQAotpbAwQAuat+AwQA1DwOMA0GCSqGSIb3DQEBCwUAA4IBAQB9
hvhDHdzmCM9Mo3obNk5TZCP2dFpE0dpmCtRhebl+LUaQSh4j1fj7Ao5j2836eQcU
rwd4MzO2BE5bMkMG62dPuXduBiEzGCALGe+/0y8DlZwanF8P/fZOtplIJ43Uf43E
pW74zdWNbhu4dIjKGPKDrZinO1oSx0zuIWEKM9iKuUhAAiWaU3JVu9j+uEbB9qJp
awKOQJ2EwcvvG0ZmxWtVzExNywZ+EMuo3DULVt+8ITwpr6AZ7TCuwuzjZ4CpdlSI
ymabjmtrBF9DR90lWyVSBsbGOF44G+xcSAqhgLDVRr9xrTohKLjhHlD3LMU7TiCk
9/TbFQcuY/CrW1oyYXDr
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:16 2026 by rpki-client