Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/cS-CHZnD9x2r2milTiF4ty-pgr0.roa
File: cS-CHZnD9x2r2milTiF4ty-pgr0.roa (raw, json)
Hash identifier: MZhAAC778dSXeMdXPPUw8mMDqULLoQ1Gr89ChrEv90Y=
Subject key identifier: 71:2F:82:1D:99:C3:F7:1D:AB:DA:68:A5:4E:21:78:B7:2F:A9:82:BD
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019ECFFAB174AB6DDF9AC45A29851583EF36
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/cS-CHZnD9x2r2milTiF4ty-pgr0.roa
Signing time: Tue 16 Jun 2026 10:29:33 +0000
ROA not before: Tue 16 Jun 2026 10:29:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132359
IP address blocks: 205.178.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:fa:b1:74:ab:6d:df:9a:c4:5a:29:85:15:83:ef:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 16 10:29:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712f821d99c3f71dabda68a54e2178b72fa982bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:76:39:ec:eb:c0:3b:50:86:d8:0c:2b:3e:
29:6f:03:7c:76:e9:9e:2c:fc:0f:a3:ba:2c:ac:1b:
b1:0d:03:42:b3:39:31:62:75:0f:94:b5:25:e3:98:
f4:7a:cc:08:32:c7:c2:d2:2e:91:db:7b:c0:72:8a:
6b:18:f7:b7:61:4c:34:af:d4:c5:61:d0:12:ce:2d:
10:02:20:c4:55:02:86:93:9a:41:21:cc:f1:da:2b:
b8:2c:88:19:45:35:1c:67:ff:31:1f:7b:2f:4c:be:
8b:33:6b:cf:21:9a:d3:0b:15:63:ce:c0:21:de:eb:
a1:f0:9b:8f:38:ea:2d:b3:ba:ef:e5:e8:3f:f3:2a:
74:9f:62:b6:32:f3:2b:ea:cc:61:9b:0a:23:53:c8:
87:0d:c4:1c:65:09:44:14:78:bc:8a:65:2b:ab:3a:
a6:f2:8b:4b:da:d2:c7:93:5c:7b:06:87:fd:44:eb:
62:81:1b:86:72:be:9f:cd:cd:5d:05:cd:4f:da:ed:
43:79:71:35:43:c2:9a:a4:13:2b:d4:fc:49:bc:6e:
1c:44:92:db:e1:9b:ed:b3:61:07:07:fb:06:5d:5c:
f7:13:96:6d:98:28:ea:fd:59:45:37:a1:79:bf:63:
d1:3c:36:df:26:ff:9a:8d:4a:21:75:43:c8:cc:d0:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:82:1D:99:C3:F7:1D:AB:DA:68:A5:4E:21:78:B7:2F:A9:82:BD
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/cS-CHZnD9x2r2milTiF4ty-pgr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.178.176.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d6:4a:f0:1b:a9:67:22:18:54:07:68:c3:d2:76:ae:f1:9a:
08:d2:52:ac:25:58:d5:86:8b:76:e0:98:d2:e1:47:ff:b5:48:
f7:20:89:6a:fa:12:7b:a5:19:f4:fa:ad:69:dd:bc:8a:57:94:
d8:49:44:96:35:42:e1:13:8e:71:14:67:35:14:03:25:86:45:
74:03:e6:91:7c:31:ff:5d:40:0a:cc:bb:50:94:55:d6:ac:56:
b0:19:1e:f4:a3:82:62:3d:53:78:7f:49:98:d9:cd:b4:5a:1d:
6f:43:02:8f:b3:c4:93:8a:e2:a8:87:6a:d6:7d:97:15:4f:c9:
44:f5:da:cf:82:da:e6:07:4f:c1:f5:69:26:68:29:75:a9:22:
1f:d1:04:31:17:d2:9d:a6:94:84:19:db:cb:39:bc:2c:6a:b8:
6c:a4:83:64:32:53:3b:cd:ec:c8:8a:86:f9:de:18:70:36:56:
d9:9e:bf:79:b0:c5:e6:33:d5:69:3c:bd:45:35:82:9c:00:41:
15:e5:e4:05:d3:c7:d2:55:ae:aa:a5:b2:2f:2c:58:54:76:23:
8f:cd:18:3d:9a:91:0f:15:8a:2b:73:17:4b:4b:13:0c:dd:68:
1d:78:9b:64:ab:2e:5f:77:00:36:62:e7:e0:23:b3:ac:ba:f1:
62:24:87:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7P+rF0q23fmsRaKYUVg+82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl
NGYyYzYwHhcNMjYwNjE2MTAyOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTJmODIxZDk5YzNmNzFkYWJkYTY4YTU0ZTIxNzhiNzJmYTk4MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdd2OezrwDtQhtgMKz4pbwN8dume
LPwPo7osrBuxDQNCszkxYnUPlLUl45j0eswIMsfC0i6R23vAcoprGPe3YUw0r9TF
YdASzi0QAiDEVQKGk5pBIczx2iu4LIgZRTUcZ/8xH3svTL6LM2vPIZrTCxVjzsAh
3uuh8JuPOOots7rv5eg/8yp0n2K2MvMr6sxhmwojU8iHDcQcZQlEFHi8imUrqzqm
8otL2tLHk1x7Bof9ROtigRuGcr6fzc1dBc1P2u1DeXE1Q8KapBMr1PxJvG4cRJLb
4Zvts2EHB/sGXVz3E5ZtmCjq/VlFN6F5v2PRPDbfJv+ajUohdUPIzNAwZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHEvgh2Zw/cdq9popU4heLcvqYK9MB8GA1UdIwQY
MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt
NzRkOTFjZGJlMTk1LzEvY1MtQ0habkQ5eDJyMm1pbFRpRjR0eS1wZ3IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1
LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbKwMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ1krwG6lnIhhUB2jD0nau8ZoI0lKsJVjVhot24JjS
4Uf/tUj3IIlq+hJ7pRn0+q1p3byKV5TYSUSWNULhE45xFGc1FAMlhkV0A+aRfDH/
XUAKzLtQlFXWrFawGR70o4JiPVN4f0mY2c20Wh1vQwKPs8STiuKoh2rWfZcVT8lE
9drPgtrmB0/B9WkmaCl1qSIf0QQxF9KdppSEGdvLObwsarhspINkMlM7zezIiob5
3hhwNlbZnr95sMXmM9VpPL1FNYKcAEEV5eQF08fSVa6qpbIvLFhUdiOPzRg9mpEP
FYorcxdLSxMM3WgdeJtkqy5fdwA2YufgI7OsuvFiJIfp
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:41 2026 by rpki-client