Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/ccbRYfaOrZiuEkrHIrVKv3yTTRQ.roa
File: ccbRYfaOrZiuEkrHIrVKv3yTTRQ.roa (raw, json)
Hash identifier: 1rXo/TMh24GMi4wocJm7kbtdLJ4+9i/olXhRctAE2ME=
Subject key identifier: 71:C6:D1:61:F6:8E:AD:98:AE:12:4A:C7:22:B5:4A:BF:7C:93:4D:14
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 01A107397EC4E0E3A1BD76363CD61205EA74
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/ccbRYfaOrZiuEkrHIrVKv3yTTRQ.roa
Signing time: Sun 04 Oct 2026 14:02:50 +0000
ROA not before: Sun 04 Oct 2026 14:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15969
IP address blocks: 194.116.252.0/23 maxlen: 23
194.187.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:39:7e:c4:e0:e3:a1:bd:76:36:3c:d6:12:05:ea:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Oct 4 14:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c6d161f68ead98ae124ac722b54abf7c934d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:84:b6:75:5c:1f:eb:d9:54:de:1b:24:40:
d2:c9:40:54:85:45:a7:2f:12:f6:90:04:8e:dd:70:
2c:5e:fa:49:9f:d0:75:f9:0c:3b:bf:7d:0f:3f:9d:
56:cc:fc:d2:c6:43:10:98:0c:86:3b:5d:20:b2:70:
de:b9:84:49:8e:b2:f9:eb:f3:d6:ce:8e:31:b1:5d:
53:7c:87:f1:21:06:d9:0d:fb:e6:53:08:d5:e7:c7:
8f:d4:88:a4:fe:6d:03:2a:6e:08:5c:ad:6d:02:c5:
21:75:c0:cb:0d:e0:ea:8f:2a:2f:28:40:01:e6:26:
f5:4f:ce:53:0e:8e:49:1e:33:23:76:f6:75:d3:df:
5f:4d:72:a8:bd:e1:13:15:8f:6f:37:5a:49:19:32:
20:96:2f:41:3f:5d:31:2f:8b:45:0d:1d:e1:89:d7:
25:93:71:dc:b2:4f:cf:55:e1:89:63:01:68:b1:1f:
f4:e1:ea:9f:71:6f:7c:b5:d6:b2:4f:6b:59:e7:d2:
08:ca:85:94:53:78:0f:36:9a:2d:b9:8d:88:42:e4:
95:48:98:77:52:09:4c:09:6c:a2:98:5c:5c:5e:c7:
52:33:cd:03:7f:99:e1:cb:3b:9c:cf:b8:a5:7d:c8:
2e:11:b5:cb:6a:f9:a8:56:27:cb:5b:4e:1b:b2:d3:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:D1:61:F6:8E:AD:98:AE:12:4A:C7:22:B5:4A:BF:7C:93:4D:14
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/ccbRYfaOrZiuEkrHIrVKv3yTTRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.252.0/23
194.187.72.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ff:0c:2d:34:8b:4d:5a:2b:a6:dd:57:d8:d1:67:17:2f:8d:
0a:6f:54:ad:e1:e9:2a:dd:f7:70:9e:cc:df:69:a6:11:15:07:
2e:dd:8f:a4:65:f9:85:6a:3c:c2:27:4c:29:c2:3e:ed:6b:5d:
43:02:25:9a:0c:a8:56:96:60:f2:82:6b:65:7b:cb:fc:6a:be:
25:a2:f9:28:e0:57:fd:7f:da:9f:21:57:e0:b4:c3:9e:5b:eb:
ea:4f:f9:08:b0:b9:0b:b7:b7:71:e9:54:37:71:76:77:cf:e6:
13:79:c6:0c:ea:cb:2e:60:66:e4:a4:ff:65:96:03:7d:7c:fe:
d3:14:23:e9:22:ca:a0:cc:7a:9b:18:af:b8:69:0f:70:ca:ee:
00:de:38:5a:a2:16:30:f2:66:42:96:80:f4:c6:5e:df:18:e4:
15:d0:09:e0:24:a9:cc:2f:f5:c5:df:ef:1f:cd:06:88:25:5b:
e2:2b:ad:24:77:a9:a5:b1:d8:8f:b6:4b:0e:7a:f1:20:65:ee:
da:8f:c6:81:31:94:97:9a:21:6d:24:e3:c4:28:14:a2:07:ad:
c4:21:51:45:ef:ec:51:43:e7:63:33:3a:72:b7:02:80:b7:81:
a0:50:c1:5f:e7:24:49:b6:9e:27:74:52:3f:ac:f6:15:72:e1:
b0:b9:e9:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEHOX7E4OOhvXY2PNYSBep0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYjQxZDJmN2Q3ZDM4NTdlMDc1ZjJhNGYyZjlkM2UwNDRm
MmU1MzYwHhcNMjYxMDA0MTQwMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWM2ZDE2MWY2OGVhZDk4YWUxMjRhYzcyMmI1NGFiZjdjOTM0ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw6EtnVcH+vZVN4bJEDSyUBUhUWn
LxL2kASO3XAsXvpJn9B1+Qw7v30PP51WzPzSxkMQmAyGO10gsnDeuYRJjrL56/PW
zo4xsV1TfIfxIQbZDfvmUwjV58eP1Iik/m0DKm4IXK1tAsUhdcDLDeDqjyovKEAB
5ib1T85TDo5JHjMjdvZ1099fTXKoveETFY9vN1pJGTIgli9BP10xL4tFDR3hidcl
k3Hcsk/PVeGJYwFosR/04eqfcW98tdayT2tZ59IIyoWUU3gPNpotuY2IQuSVSJh3
UglMCWyimFxcXsdSM80Df5nhyzucz7ilfcguEbXLavmoVifLW04bstO7UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHHG0WH2jq2YrhJKxyK1Sr98k00UMB8GA1UdIwQY
MBaAFLK0HS99fThX4HXypPL50+BE8uU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMt
YzllMjBjY2Q0NzZmLzEvY2NiUllmYU9yWml1RWtySElyVkt2M3lUVFJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMtYzllMjBjY2Q0NzZm
LzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwnT8AwQC
wrtIMA0GCSqGSIb3DQEBCwUAA4IBAQAZ/wwtNItNWium3VfY0WcXL40Kb1St4ekq
3fdwnszfaaYRFQcu3Y+kZfmFajzCJ0wpwj7ta11DAiWaDKhWlmDygmtle8v8ar4l
ovko4Ff9f9qfIVfgtMOeW+vqT/kIsLkLt7dx6VQ3cXZ3z+YTecYM6ssuYGbkpP9l
lgN9fP7TFCPpIsqgzHqbGK+4aQ9wyu4A3jhaohYw8mZCloD0xl7fGOQV0AngJKnM
L/XF3+8fzQaIJVviK60kd6mlsdiPtksOevEgZe7aj8aBMZSXmiFtJOPEKBSiB63E
IVFF7+xRQ+djMzpytwKAt4GgUMFf5yRJtp4ndFI/rPYVcuGwueko
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:20 2026 by rpki-client