Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CnwB14pw6cvS2z42EbsqDs3oFY4.roa
File: CnwB14pw6cvS2z42EbsqDs3oFY4.roa (raw, json)
Hash identifier: K1dcXsLeNYUFvHCZH2IQlOpB860tQYK7QPTWZbmUAbk=
Subject key identifier: 0A:7C:01:D7:8A:70:E9:CB:D2:DB:3E:36:11:BB:2A:0E:CD:E8:15:8E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D8C9AFADB8DD2DFD7E4437DAD595528DF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CnwB14pw6cvS2z42EbsqDs3oFY4.roa
Signing time: Tue 14 Apr 2026 15:27:40 +0000
ROA not before: Tue 14 Apr 2026 15:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.223.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:9a:fa:db:8d:d2:df:d7:e4:43:7d:ad:59:55:28:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 14 15:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a7c01d78a70e9cbd2db3e3611bb2a0ecde8158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:00:e9:b0:14:93:e0:ee:7f:e2:5e:a1:a8:
c1:92:70:ec:56:4f:84:fc:70:f6:9b:3b:da:a5:02:
27:8f:5f:cc:38:62:bf:88:a1:d8:7b:89:4a:50:8a:
88:71:4d:02:f6:8e:a9:24:e3:49:9b:b1:67:99:0d:
41:c4:22:43:04:79:30:0f:a8:6a:ee:e8:1d:7b:4c:
67:d6:57:cf:3b:1d:2e:3b:e6:4f:f0:95:a2:9f:35:
38:ac:b1:85:30:48:5c:69:eb:9d:6b:30:95:d4:02:
b4:f4:80:75:d0:09:d7:f2:c3:d0:b8:b9:a6:2a:9a:
18:6b:82:4c:27:22:c5:13:65:c2:f4:fe:f0:b6:c8:
e5:6e:59:9a:83:47:4c:96:0e:11:47:90:c1:d8:b4:
fb:60:9b:f5:b5:6d:bf:be:b5:94:29:d8:35:1f:02:
a7:d9:45:5f:d0:99:cc:80:d5:8c:d9:d6:e9:65:78:
1e:1f:ea:21:16:4f:97:b3:7d:4b:90:1e:68:04:21:
bd:77:fb:17:d7:21:08:fe:d1:b0:98:dc:99:8b:9b:
9c:ea:d0:4e:61:50:20:c6:e3:05:f6:09:60:bc:fa:
31:a0:62:73:33:73:1f:ff:b3:98:d3:61:43:3c:34:
0b:ed:a7:8e:26:8b:4b:82:3c:aa:54:b6:bf:a0:7a:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:01:D7:8A:70:E9:CB:D2:DB:3E:36:11:BB:2A:0E:CD:E8:15:8E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CnwB14pw6cvS2z42EbsqDs3oFY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:94:3d:e1:14:38:ad:33:3b:8e:35:9d:ac:fd:a2:3f:ad:
16:d8:3a:65:bd:14:58:28:cd:eb:b3:9a:ca:9b:7f:a1:a8:e0:
17:63:29:a2:a3:c1:64:ef:77:a8:14:a9:41:02:e0:76:b0:d5:
b5:11:58:fc:f9:d2:ea:8e:3f:8c:6b:b5:b7:a7:d3:45:6c:16:
c8:18:10:48:40:c1:81:5f:be:8a:04:e7:e5:46:b5:7b:f3:cb:
fc:ea:8f:1d:3c:87:51:9c:ea:bf:e0:61:a9:17:c4:95:63:4b:
09:b2:9b:e7:32:57:57:50:56:34:1a:65:8f:19:58:97:f0:32:
d1:c6:77:e6:0f:da:f4:39:11:e2:2b:71:a3:a9:05:11:33:6a:
6e:20:7e:12:64:92:9b:95:a0:b4:fa:62:5a:b9:10:fb:b3:4c:
c4:7f:16:dc:e8:93:5c:a1:c3:95:13:0f:71:75:4d:25:34:30:
7a:e5:a4:ad:5b:5f:ae:96:97:8f:21:5d:20:d2:16:11:bb:29:
cf:6e:a5:0e:a6:41:7c:6e:40:b3:8d:d4:3f:85:e3:35:6c:7d:
0d:f8:cc:d0:3b:19:14:10:8e:9d:d8:3f:68:a3:03:86:48:8d:
dd:e4:52:03:af:a7:de:f5:70:53:4d:15:19:19:02:94:f6:8d:
f2:15:95:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2MmvrbjdLf1+RDfa1ZVSjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNDE0MTUyNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTdjMDFkNzhhNzBlOWNiZDJkYjNlMzYxMWJiMmEwZWNkZTgxNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9AA6bAUk+Duf+JeoajBknDsVk+E
/HD2mzvapQInj1/MOGK/iKHYe4lKUIqIcU0C9o6pJONJm7FnmQ1BxCJDBHkwD6hq
7ugde0xn1lfPOx0uO+ZP8JWinzU4rLGFMEhcaeudazCV1AK09IB10AnX8sPQuLmm
KpoYa4JMJyLFE2XC9P7wtsjlblmag0dMlg4RR5DB2LT7YJv1tW2/vrWUKdg1HwKn
2UVf0JnMgNWM2dbpZXgeH+ohFk+Xs31LkB5oBCG9d/sX1yEI/tGwmNyZi5uc6tBO
YVAgxuMF9glgvPoxoGJzM3Mf/7OY02FDPDQL7aeOJotLgjyqVLa/oHrnYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAp8AdeKcOnL0ts+NhG7Kg7N6BWOMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQ253QjE0cHc2Y3ZTMno0MkVic3FEczNvRlk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud+bMA0G
CSqGSIb3DQEBCwUAA4IBAQBiGpQ94RQ4rTM7jjWdrP2iP60W2DplvRRYKM3rs5rK
m3+hqOAXYymio8Fk73eoFKlBAuB2sNW1EVj8+dLqjj+Ma7W3p9NFbBbIGBBIQMGB
X76KBOflRrV788v86o8dPIdRnOq/4GGpF8SVY0sJspvnMldXUFY0GmWPGViX8DLR
xnfmD9r0ORHiK3GjqQURM2puIH4SZJKblaC0+mJauRD7s0zEfxbc6JNcocOVEw9x
dU0lNDB65aStW1+ulpePIV0g0hYRuynPbqUOpkF8bkCzjdQ/heM1bH0N+MzQOxkU
EI6d2D9oowOGSI3d5FIDr6fe9XBTTRUZGQKU9o3yFZXp
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:25:43 2026 by rpki-client