Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CdzVuM6ZXGSgS-oy7RFzeXJ9WlU.roa
File: CdzVuM6ZXGSgS-oy7RFzeXJ9WlU.roa (raw, json)
Hash identifier: jZmHzmIti2/sfHOys0zGFB6/31QnBt12jOPIEVDQ3cM=
Subject key identifier: 09:DC:D5:B8:CE:99:5C:64:A0:4B:EA:32:ED:11:73:79:72:7D:5A:55
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A01A3750F687EDF757BDC5FB2FE6330E70
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CdzVuM6ZXGSgS-oy7RFzeXJ9WlU.roa
Signing time: Wed 19 Aug 2026 13:30:27 +0000
ROA not before: Wed 19 Aug 2026 13:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207057
IP address blocks: 132.243.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:37:50:f6:87:ed:f7:57:bd:c5:fb:2f:e6:33:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Aug 19 13:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09dcd5b8ce995c64a04bea32ed117379727d5a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:56:c7:66:6e:26:aa:96:d1:9a:6f:a5:74:
eb:38:ca:0b:1c:11:18:43:0d:37:5a:c9:04:66:6b:
61:99:0d:2d:e0:e9:18:07:8f:8e:4f:db:d7:8c:72:
a4:4e:86:c4:63:0b:25:62:f3:ce:82:db:7f:6b:a2:
3c:f3:d0:b8:dd:88:22:23:b3:a1:e4:46:dc:2a:c3:
64:e5:fa:19:d4:0b:52:0d:ab:54:40:01:91:a7:f0:
91:c2:e9:57:7d:04:20:7c:4a:af:6a:a8:a5:43:44:
db:61:19:f4:1a:ac:12:b1:72:07:eb:fc:68:2d:be:
15:10:09:b4:13:8d:12:b7:ac:bf:85:76:74:67:c8:
c5:83:27:c8:d9:e2:1b:be:03:a9:16:9f:9a:5c:6c:
24:5c:6c:5e:ce:76:05:0a:e1:86:d9:50:a1:4c:bc:
60:94:cf:0b:ee:7e:6e:6d:15:08:71:ec:06:01:51:
b0:ce:5c:ef:79:4b:4e:ac:c3:97:af:ee:11:12:a1:
55:3e:04:15:f9:e3:04:51:78:14:19:13:4f:17:4d:
9e:81:e9:34:43:5c:57:38:44:8e:3a:da:7c:3d:dd:
77:9f:89:72:a2:56:94:b3:0a:88:55:55:83:f6:74:
e0:e3:d5:aa:11:d5:38:36:f0:91:4c:0c:10:4c:40:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:D5:B8:CE:99:5C:64:A0:4B:EA:32:ED:11:73:79:72:7D:5A:55
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CdzVuM6ZXGSgS-oy7RFzeXJ9WlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:eb:b1:38:42:f2:48:46:8a:08:6b:e4:1b:34:cb:43:8e:58:
72:d3:e3:79:d8:cb:3b:b7:dd:1f:50:0f:d7:60:01:cd:02:98:
d2:b3:93:f5:5e:b8:96:b2:ae:a6:e6:63:72:16:d6:33:e3:fc:
35:2b:cd:6d:78:de:76:a3:38:16:2f:e9:b4:99:61:49:0f:5a:
14:bd:d5:e4:80:cc:8e:a9:43:77:4e:0d:f9:7f:4f:05:7d:f5:
1a:58:3b:a9:23:17:0a:08:95:23:e2:54:03:88:93:1f:6e:03:
b1:77:26:d9:e6:3f:1b:18:51:5b:8e:19:30:41:93:49:28:56:
de:86:34:e6:13:1a:ce:13:11:56:47:25:28:5f:eb:2d:62:b4:
8d:f3:4d:0e:5d:32:43:3a:98:e2:9a:e0:9b:94:e7:6e:91:80:
17:ad:b5:02:3c:7c:a7:22:b4:7d:85:88:67:f1:c8:70:43:83:
1c:3e:9c:92:4d:f2:be:d7:ba:74:26:42:a8:ce:2b:89:b1:4d:
37:d7:bc:c0:62:1d:2b:2f:d1:a2:79:d2:0a:cc:07:0e:10:4b:
51:c4:72:2f:db:07:59:93:26:4d:05:a1:ef:af:49:ce:33:cf:
9c:a7:67:fb:12:83:4f:1f:d2:e6:2e:2e:37:7a:1d:84:a3:65:
72:8d:7d:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAaN1D2h+33V73F+y/mMw5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwODE5MTMzMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWRjZDViOGNlOTk1YzY0YTA0YmVhMzJlZDExNzM3OTcyN2Q1YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yZWx2ZuJqqW0ZpvpXTrOMoLHBEY
Qw03WskEZmthmQ0t4OkYB4+OT9vXjHKkTobEYwslYvPOgtt/a6I889C43YgiI7Oh
5EbcKsNk5foZ1AtSDatUQAGRp/CRwulXfQQgfEqvaqilQ0TbYRn0GqwSsXIH6/xo
Lb4VEAm0E40St6y/hXZ0Z8jFgyfI2eIbvgOpFp+aXGwkXGxeznYFCuGG2VChTLxg
lM8L7n5ubRUIcewGAVGwzlzveUtOrMOXr+4REqFVPgQV+eMEUXgUGRNPF02egek0
Q1xXOESOOtp8Pd13n4lyolaUswqIVVWD9nTg49WqEdU4NvCRTAwQTECszwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnc1bjOmVxkoEvqMu0Rc3lyfVpVMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvQ2R6VnVNNlpYR1NnUy1veTdSRnplWEo5V2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhPPlMA0G
CSqGSIb3DQEBCwUAA4IBAQCe67E4QvJIRooIa+QbNMtDjlhy0+N52Ms7t90fUA/X
YAHNApjSs5P1XriWsq6m5mNyFtYz4/w1K81teN52ozgWL+m0mWFJD1oUvdXkgMyO
qUN3Tg35f08FffUaWDupIxcKCJUj4lQDiJMfbgOxdybZ5j8bGFFbjhkwQZNJKFbe
hjTmExrOExFWRyUoX+stYrSN800OXTJDOpjimuCblOdukYAXrbUCPHynIrR9hYhn
8chwQ4McPpySTfK+17p0JkKoziuJsU0317zAYh0rL9GiedIKzAcOEEtRxHIv2wdZ
kyZNBaHvr0nOM8+cp2f7EoNPH9LmLi43eh2Eo2VyjX1H
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:03 2026 by rpki-client