Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/30Wx9XRuxby0XFhbV0-SfZGqWkc.roa
File: 30Wx9XRuxby0XFhbV0-SfZGqWkc.roa (raw, json)
Hash identifier: /zfSlQSfOrR6zp8w8uhKeZcrcf+EtZ+2UDKjo/jaTFU=
Subject key identifier: DF:45:B1:F5:74:6E:C5:BC:B4:5C:58:5B:57:4F:92:7D:91:AA:5A:47
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FCDDB68586EF8036320F79297520AC681
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/30Wx9XRuxby0XFhbV0-SfZGqWkc.roa
Signing time: Tue 04 Aug 2026 17:38:56 +0000
ROA not before: Tue 04 Aug 2026 17:38:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202384
IP address blocks: 193.37.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:db:68:58:6e:f8:03:63:20:f7:92:97:52:0a:c6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 4 17:38:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df45b1f5746ec5bcb45c585b574f927d91aa5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:7f:f7:40:ec:04:ef:56:62:df:b4:cf:ad:
2b:6c:86:17:36:c8:65:71:91:dd:c8:62:24:60:af:
56:34:b5:e9:44:ec:40:0e:9b:49:76:86:b2:b0:f2:
db:c6:f4:ae:60:c5:bb:23:66:c0:47:36:d8:56:33:
f5:05:9c:ce:9c:0a:bb:fe:c8:06:e1:70:0b:84:42:
1b:7b:3f:0f:5f:00:c9:72:82:42:46:b1:f1:3a:4e:
8c:36:90:b7:b5:61:e8:ac:86:2d:9d:cd:22:5a:79:
8b:5b:f5:84:c6:55:44:9f:95:ac:7a:d8:e6:b7:51:
cd:c8:06:b3:a3:ed:94:73:0e:4f:81:4a:d2:5a:38:
d0:4c:f9:79:c6:5b:0c:52:18:d8:26:e4:b8:62:a6:
94:d6:3d:e7:a5:51:a6:41:42:e2:50:64:cc:4c:e8:
1c:23:29:e3:34:de:e3:59:fe:3e:6f:87:b6:a3:0e:
2c:a3:4a:b2:a2:49:8c:1a:4e:a9:b5:fb:27:f6:2d:
a5:0a:02:15:c3:41:b4:a2:4e:e5:8d:ac:dc:4c:af:
1c:2d:a6:c6:e2:70:c1:cd:b3:90:c1:29:f9:62:f0:
57:ce:0a:44:33:ab:2b:cd:47:7e:1a:37:39:f5:dd:
45:1b:04:7d:05:92:14:6b:a7:1e:6a:d5:1e:1d:53:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:B1:F5:74:6E:C5:BC:B4:5C:58:5B:57:4F:92:7D:91:AA:5A:47
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/30Wx9XRuxby0XFhbV0-SfZGqWkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.66.0/23
Signature Algorithm: sha256WithRSAEncryption
14:de:e0:2b:de:d8:80:a4:c5:a6:94:4b:53:1b:ab:40:ba:61:
d0:83:61:32:33:70:2a:ce:bf:0f:27:d0:d3:18:16:4f:4e:90:
f6:bf:2c:d8:54:8c:d7:2a:90:8b:50:c9:e4:81:cd:11:fc:b9:
df:18:b3:86:9f:1c:0c:5d:ee:7d:c2:7d:73:30:cd:c1:9c:bf:
93:b2:c6:1a:16:3d:ff:0a:d3:b5:76:c6:de:bd:7b:cc:44:d2:
02:c3:d2:e0:2a:0a:bf:78:d8:94:5f:69:df:5c:93:b3:79:5b:
0f:e7:07:7d:1b:df:05:34:c9:db:c3:c5:0c:61:25:97:12:3c:
d8:43:bc:58:60:b9:27:e7:22:3f:86:dd:4d:a6:4a:bd:00:51:
cd:81:ae:97:a3:18:e2:ec:d4:98:9e:d4:d5:1c:33:de:a6:f6:
b7:07:d0:1e:fa:c0:2b:03:fe:4f:b1:8f:59:43:1a:f0:fc:b9:
f5:fd:49:05:36:9d:bb:72:df:b6:a5:ff:61:f8:47:7a:03:7e:
0e:9f:2e:73:65:01:a0:51:ba:c0:40:3a:3d:7b:2f:a0:89:3c:
2d:5f:f5:c0:6e:3a:73:64:0a:c5:b4:ff:3e:27:8b:c3:2e:d4:
a5:2a:aa:53:1d:ad:fc:db:12:28:b6:6f:ba:e3:11:ee:30:54:
a2:57:da:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/N22hYbvgDYyD3kpdSCsaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwODA0MTczODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjQ1YjFmNTc0NmVjNWJjYjQ1YzU4NWI1NzRmOTI3ZDkxYWE1YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXF/90DsBO9WYt+0z60rbIYXNshl
cZHdyGIkYK9WNLXpROxADptJdoaysPLbxvSuYMW7I2bARzbYVjP1BZzOnAq7/sgG
4XALhEIbez8PXwDJcoJCRrHxOk6MNpC3tWHorIYtnc0iWnmLW/WExlVEn5Wsetjm
t1HNyAazo+2Ucw5PgUrSWjjQTPl5xlsMUhjYJuS4YqaU1j3npVGmQULiUGTMTOgc
IynjNN7jWf4+b4e2ow4so0qyokmMGk6ptfsn9i2lCgIVw0G0ok7ljazcTK8cLabG
4nDBzbOQwSn5YvBXzgpEM6srzUd+Gjc59d1FGwR9BZIUa6ceatUeHVOB5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9FsfV0bsW8tFxYW1dPkn2RqlpHMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMzBXeDlYUnV4YnkwWEZoYlYwLVNmWkdxV2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSVCMA0G
CSqGSIb3DQEBCwUAA4IBAQAU3uAr3tiApMWmlEtTG6tAumHQg2EyM3Aqzr8PJ9DT
GBZPTpD2vyzYVIzXKpCLUMnkgc0R/LnfGLOGnxwMXe59wn1zMM3BnL+TssYaFj3/
CtO1dsbevXvMRNICw9LgKgq/eNiUX2nfXJOzeVsP5wd9G98FNMnbw8UMYSWXEjzY
Q7xYYLkn5yI/ht1Npkq9AFHNga6Xoxji7NSYntTVHDPepva3B9Ae+sArA/5PsY9Z
Qxrw/Ln1/UkFNp27ct+2pf9h+Ed6A34Ony5zZQGgUbrAQDo9ey+giTwtX/XAbjpz
ZArFtP8+J4vDLtSlKqpTHa382xIotm+64xHuMFSiV9pb
-----END CERTIFICATE-----
Generated at Wed Aug 5 17:07:15 2026 by rpki-client