Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cVC-ltNAR__q-J8t25h1hcBqTTk.roa
File: cVC-ltNAR__q-J8t25h1hcBqTTk.roa (raw, json)
Hash identifier: 3m0COKRM2MYrBmQW6iKo5PGwKh6D1+tJPAnR5jagLQk=
Subject key identifier: 71:50:BE:96:D3:40:47:FF:EA:F8:9F:2D:DB:98:75:85:C0:6A:4D:39
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019EAB5061D8D20FA9828A03066D90E57F22
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cVC-ltNAR__q-J8t25h1hcBqTTk.roa
Signing time: Tue 09 Jun 2026 07:37:12 +0000
ROA not before: Tue 09 Jun 2026 07:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51132
IP address blocks: 193.181.43.0/24 maxlen: 24
193.181.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:50:61:d8:d2:0f:a9:82:8a:03:06:6d:90:e5:7f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 9 07:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7150be96d34047ffeaf89f2ddb987585c06a4d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:56:cb:98:71:ae:f4:b5:df:81:2a:a8:75:
b2:03:95:5e:8e:4d:a5:43:ba:76:76:e1:0c:2a:b9:
e7:87:88:17:07:09:7a:52:40:51:46:7f:4c:5a:df:
24:2a:7b:20:6f:0a:2e:7b:fa:1e:15:96:3c:cd:58:
33:1d:30:ba:92:42:f7:d0:96:70:45:bd:55:77:7b:
76:04:32:07:34:c2:ce:18:5a:0c:5b:21:53:ef:77:
63:19:20:1e:f9:a6:95:72:e3:ec:72:84:b8:8a:69:
59:0d:bd:4a:27:49:08:44:04:72:0d:71:36:b0:ee:
9c:cd:92:11:fa:f4:ea:90:d2:3c:aa:f3:c5:80:c3:
72:60:31:11:c8:69:e7:83:51:df:9e:91:fb:4a:7f:
25:c8:00:24:c9:a3:2c:68:13:f4:f6:a8:9a:80:55:
e6:7e:4e:34:7f:39:69:f8:14:8a:83:68:f0:24:04:
18:0f:ed:b2:17:4b:40:a5:0f:4b:34:3f:43:40:16:
31:78:ae:50:90:e1:cf:64:64:07:12:ca:4e:d9:6b:
35:11:cc:47:90:bd:42:22:38:f1:ca:06:c2:a4:ba:
8e:ed:a0:1f:13:86:e2:71:b6:22:34:74:30:9a:4f:
67:4b:0b:f1:71:c1:b5:79:59:eb:be:e6:ca:fe:c1:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:50:BE:96:D3:40:47:FF:EA:F8:9F:2D:DB:98:75:85:C0:6A:4D:39
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cVC-ltNAR__q-J8t25h1hcBqTTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.43.0/24
193.181.48.0/22
Signature Algorithm: sha256WithRSAEncryption
27:0d:4d:65:24:52:ba:4d:62:33:42:4d:bf:56:0c:2e:70:d7:
0c:07:40:6f:19:cf:f0:f4:4e:8e:8b:e9:19:ce:0d:e8:c5:40:
f5:2c:18:a2:7e:b7:19:35:db:d1:56:1a:95:9a:7a:39:89:6b:
16:46:79:9f:a7:2f:cb:e6:e8:5d:6b:dd:78:21:44:f6:0a:69:
5c:00:d5:72:3a:ae:4f:0e:04:c3:ad:45:3b:4b:b2:b8:67:b9:
0b:07:d9:93:33:67:1f:1c:c8:84:3d:22:3d:91:62:5e:55:c9:
57:90:ae:d3:ac:dd:63:15:1c:36:35:6e:ad:fd:b2:26:b2:14:
9a:8e:09:60:14:45:51:5a:6f:35:76:c9:62:b4:e3:08:c9:27:
ad:af:3c:03:f2:33:16:fe:7f:12:b0:98:af:d4:cb:52:d6:15:
1b:bd:2f:a1:76:da:1e:e9:56:e0:a5:57:ba:b7:43:ee:18:f2:
2f:f8:b1:f4:56:e2:bb:4e:f8:2d:b2:25:5c:15:f2:9e:e4:a0:
ec:15:39:b1:b0:68:67:f8:d4:47:f3:90:4c:d9:5c:2d:04:2a:
87:5a:c5:a1:9d:5e:cc:8e:24:a3:c8:e3:c0:2d:5e:6c:a3:72:
31:54:8e:dd:73:18:0c:84:64:13:51:7e:a4:ab:62:39:e3:3c:
9d:71:e4:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6rUGHY0g+pgooDBm2Q5X8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNjA5MDczNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTUwYmU5NmQzNDA0N2ZmZWFmODlmMmRkYjk4NzU4NWMwNmE0ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9lWy5hxrvS134EqqHWyA5Vejk2l
Q7p2duEMKrnnh4gXBwl6UkBRRn9MWt8kKnsgbwoue/oeFZY8zVgzHTC6kkL30JZw
Rb1Vd3t2BDIHNMLOGFoMWyFT73djGSAe+aaVcuPscoS4imlZDb1KJ0kIRARyDXE2
sO6czZIR+vTqkNI8qvPFgMNyYDERyGnng1HfnpH7Sn8lyAAkyaMsaBP09qiagFXm
fk40fzlp+BSKg2jwJAQYD+2yF0tApQ9LND9DQBYxeK5QkOHPZGQHEspO2Ws1EcxH
kL1CIjjxygbCpLqO7aAfE4bicbYiNHQwmk9nSwvxccG1eVnrvubK/sFFCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHFQvpbTQEf/6vifLduYdYXAak05MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvY1ZDLWx0TkFSX19xLUo4dDI1aDFoY0JxVFRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbUrAwQC
wbUwMA0GCSqGSIb3DQEBCwUAA4IBAQAnDU1lJFK6TWIzQk2/VgwucNcMB0BvGc/w
9E6Oi+kZzg3oxUD1LBiifrcZNdvRVhqVmno5iWsWRnmfpy/L5uhda914IUT2Cmlc
ANVyOq5PDgTDrUU7S7K4Z7kLB9mTM2cfHMiEPSI9kWJeVclXkK7TrN1jFRw2NW6t
/bImshSajglgFEVRWm81dslitOMIySetrzwD8jMW/n8SsJiv1MtS1hUbvS+hdtoe
6VbgpVe6t0PuGPIv+LH0VuK7TvgtsiVcFfKe5KDsFTmxsGhn+NRH85BM2VwtBCqH
WsWhnV7MjiSjyOPALV5so3IxVI7dcxgMhGQTUX6kq2I54zydceRz
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:50 2026 by rpki-client