Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/cWC-89CZxEOg7JihRqIYLNl3BdM.roa
File: cWC-89CZxEOg7JihRqIYLNl3BdM.roa (raw, json)
Hash identifier: RhOP1Hck0E/C3tHN4Cpm5lDskts0RUG2y3go+ErpaZY=
Subject key identifier: 71:60:BE:F3:D0:99:C4:43:A0:EC:98:A1:46:A2:18:2C:D9:77:05:D3
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A0583215E42688616632284C0174C01514
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/cWC-89CZxEOg7JihRqIYLNl3BdM.roa
Signing time: Mon 31 Aug 2026 14:21:12 +0000
ROA not before: Mon 31 Aug 2026 14:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209193
IP address blocks: 82.129.18.0/24 maxlen: 24
82.129.19.0/24 maxlen: 24
82.129.20.0/24 maxlen: 24
82.129.22.0/24 maxlen: 24
82.129.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:32:15:e4:26:88:61:66:32:28:4c:01:74:c0:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Aug 31 14:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7160bef3d099c443a0ec98a146a2182cd97705d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:e2:fe:ca:34:45:ca:f9:04:c2:e0:2e:c9:
dd:eb:eb:7e:a0:74:b4:34:f3:b2:a4:0f:f3:d2:88:
70:d1:3a:b9:6d:67:33:b5:f8:94:36:5f:37:5a:70:
28:28:dd:e4:21:10:ca:f1:3e:22:26:fd:cd:18:35:
4b:8f:6b:45:dd:e4:ee:e8:d0:20:bf:96:cc:0b:a9:
c2:a6:50:bf:eb:e0:f1:24:a5:d8:41:35:83:8d:29:
61:69:3e:4e:fb:4e:c5:78:e6:93:9f:68:6b:28:a2:
bd:68:04:63:a5:ae:4f:87:03:f6:3b:e3:0e:18:c4:
9a:c4:4f:89:ce:c4:a5:dd:11:bd:63:08:28:78:3b:
7a:d1:2a:09:dc:ab:fe:c9:e5:0d:6e:d7:0f:95:fe:
6b:29:02:5b:4f:85:dc:7b:a4:a4:4f:b1:c3:dc:66:
31:8f:85:5f:7e:47:33:ac:8a:a6:45:f2:11:eb:06:
0f:29:14:e2:f4:bf:9e:6f:b9:2a:e0:97:3c:7a:d8:
2f:69:7c:72:55:2f:19:6d:2a:de:a4:b2:32:d5:e8:
c2:63:d3:d6:46:2f:77:d4:62:9c:c9:42:b2:32:c6:
56:2d:e8:d2:bc:6b:db:0d:5e:15:93:80:6f:c1:5b:
62:75:74:9d:36:8c:d4:1b:7b:bc:b0:4a:15:9d:d0:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:BE:F3:D0:99:C4:43:A0:EC:98:A1:46:A2:18:2C:D9:77:05:D3
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/cWC-89CZxEOg7JihRqIYLNl3BdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.129.18.0-82.129.20.255
82.129.22.0/23
Signature Algorithm: sha256WithRSAEncryption
15:3c:77:94:bf:10:60:96:2f:a7:5e:8e:15:14:44:94:7c:15:
12:61:67:a5:76:0b:d5:d4:ad:bc:fa:35:b7:21:c2:f6:f4:e7:
48:39:c0:49:93:73:75:6e:3c:59:76:f3:75:52:3b:d1:1e:3c:
30:22:cf:7b:c0:2d:35:b7:30:f4:3f:69:b9:64:b4:7f:15:fb:
d6:c2:4a:db:f6:c8:b7:7f:49:9a:bb:03:00:73:65:43:01:f2:
58:48:95:7b:d6:2b:1a:b8:a5:c8:e3:6f:fe:14:d6:a9:9e:ab:
b3:bd:27:c4:ec:83:40:26:e8:99:47:88:f7:6e:0e:88:ec:9b:
2d:d7:12:83:74:6f:64:ad:da:af:e0:ab:8f:5c:ef:5b:ab:1d:
b4:ba:fc:64:ae:82:91:4a:3c:b1:51:05:0e:50:16:61:5a:32:
37:ad:8f:38:d6:b5:08:b6:7c:4e:fc:62:98:6d:dd:51:8e:54:
4c:fa:b5:d8:d9:29:f0:7f:6b:4b:a1:3f:b1:1f:06:b7:a3:96:
fa:b8:7c:d4:dd:80:74:d5:b5:d5:b3:5a:f8:83:f9:91:22:aa:
4c:55:79:84:28:95:eb:9e:bb:11:67:0a:91:44:ef:0e:a5:14:
cc:24:d3:38:f6:a5:73:d2:6a:ba:cd:d5:91:83:5a:66:bd:46:
e0:fa:40:55
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaBYMhXkJohhZjIoTAF0wBUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjYwODMxMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTYwYmVmM2QwOTljNDQzYTBlYzk4YTE0NmEyMTgyY2Q5NzcwNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDri/so0Rcr5BMLgLsnd6+t+oHS0
NPOypA/z0ohw0Tq5bWcztfiUNl83WnAoKN3kIRDK8T4iJv3NGDVLj2tF3eTu6NAg
v5bMC6nCplC/6+DxJKXYQTWDjSlhaT5O+07FeOaTn2hrKKK9aARjpa5PhwP2O+MO
GMSaxE+JzsSl3RG9YwgoeDt60SoJ3Kv+yeUNbtcPlf5rKQJbT4Xce6SkT7HD3GYx
j4VffkczrIqmRfIR6wYPKRTi9L+eb7kq4Jc8etgvaXxyVS8ZbSrepLIy1ejCY9PW
Ri931GKcyUKyMsZWLejSvGvbDV4Vk4BvwVtidXSdNozUG3u8sEoVndAlUwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHFgvvPQmcRDoOyYoUaiGCzZdwXTMB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvY1dDLTg5Q1p4RU9nN0ppaFJxSVlMTmwzQmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFSgRID
BABSgRQDBAFSgRYwDQYJKoZIhvcNAQELBQADggEBABU8d5S/EGCWL6dejhUURJR8
FRJhZ6V2C9XUrbz6Nbchwvb050g5wEmTc3VuPFl283VSO9EePDAiz3vALTW3MPQ/
ablktH8V+9bCStv2yLd/SZq7AwBzZUMB8lhIlXvWKxq4pcjjb/4U1qmeq7O9J8Ts
g0Am6JlHiPduDojsmy3XEoN0b2St2q/gq49c71urHbS6/GSugpFKPLFRBQ5QFmFa
MjetjzjWtQi2fE78Ypht3VGOVEz6tdjZKfB/a0uhP7EfBrejlvq4fNTdgHTVtdWz
WviD+ZEiqkxVeYQoleueuxFnCpFE7w6lFMwk0zj2pXPSarrN1ZGDWma9RuD6QFU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:37:00 2026 by rpki-client