Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/LW7rb0AaEUjbPH9dnaOyHTBi76E.roa
File: LW7rb0AaEUjbPH9dnaOyHTBi76E.roa (raw, json)
Hash identifier: p1ZkXmO8OLBHzuVbdIzp+e8cKBOvTv26ZXhPyk/iQ9g=
Subject key identifier: 2D:6E:EB:6F:40:1A:11:48:DB:3C:7F:5D:9D:A3:B2:1D:30:62:EF:A1
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019DB5930F32920ED27FD2C9BC02BE8D4449
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/LW7rb0AaEUjbPH9dnaOyHTBi76E.roa
Signing time: Wed 22 Apr 2026 14:23:26 +0000
ROA not before: Wed 22 Apr 2026 14:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 185.23.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:93:0f:32:92:0e:d2:7f:d2:c9:bc:02:be:8d:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Apr 22 14:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d6eeb6f401a1148db3c7f5d9da3b21d3062efa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:a0:e3:5f:f6:be:2b:a8:93:af:46:05:a8:
45:c9:2f:1b:9a:6a:66:67:61:51:4c:5d:9d:52:dd:
ed:10:1b:5e:ce:23:6d:ef:c0:4f:08:cb:83:12:17:
01:5a:9b:3d:61:06:19:03:49:7c:9f:96:84:2c:6e:
12:9a:dc:4f:80:0b:54:cd:38:a6:45:f1:3c:20:60:
b1:54:20:b4:74:6c:34:aa:4d:e1:c1:81:84:62:65:
5a:3e:91:e4:0a:7b:80:af:25:5c:7a:f0:35:0b:9e:
69:de:1e:09:ae:5b:05:1b:77:ee:ca:5f:16:28:c1:
27:96:0f:57:1f:08:95:a8:9c:34:b5:f0:ea:57:e9:
fb:c7:44:84:36:65:25:87:d2:0a:c0:d8:4a:00:99:
6f:83:19:65:ef:cb:fb:6a:94:6a:3b:ee:4e:dc:cd:
a6:b3:93:0d:a3:33:af:d4:5f:ee:b8:30:d2:fb:9a:
98:58:50:7a:30:71:97:a3:5a:f4:8f:92:1f:bd:4f:
aa:8a:0f:bc:3f:f3:44:21:c8:40:d6:86:3c:64:34:
aa:61:d8:a3:fb:47:f0:84:12:26:4f:52:2d:5d:01:
89:f3:88:ba:ef:3c:15:32:cc:97:30:6d:c4:b1:c5:
14:dc:81:5c:83:69:ef:4f:26:74:23:71:d8:5a:c1:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:EB:6F:40:1A:11:48:DB:3C:7F:5D:9D:A3:B2:1D:30:62:EF:A1
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/LW7rb0AaEUjbPH9dnaOyHTBi76E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5f:fa:08:e9:dc:7d:d1:a2:dc:1e:49:9c:88:48:97:bd:8c:
a6:12:29:59:7e:31:49:dd:36:9b:23:9e:78:46:e3:b5:30:c1:
90:83:92:67:6f:55:c7:84:67:f2:04:26:de:67:95:ed:0f:59:
6d:65:b3:14:f7:df:a9:c2:82:f7:9c:a6:57:d6:91:25:80:bc:
9a:41:23:be:8a:e2:92:a7:c3:98:92:5c:c4:20:c2:49:8c:be:
47:d3:84:0e:d1:5b:8f:74:e5:04:4d:6b:11:f4:f2:6f:b1:03:
eb:91:bd:5e:a6:16:b0:b1:06:21:9b:a2:d6:29:c7:6b:13:ff:
d6:b1:55:29:a4:5d:ad:3c:65:c5:c8:d5:c6:ba:09:46:0d:f4:
38:85:a6:dd:cd:d2:fb:2c:80:35:07:89:7e:c3:dc:74:2a:fd:
eb:7c:14:be:a3:98:43:30:af:63:74:dc:bf:d0:2a:a1:34:de:
39:54:a7:61:f4:ea:c4:38:7e:db:b1:cc:4e:43:e8:29:b6:5e:
b4:9d:d5:b3:7e:ed:e1:43:2d:bd:89:b9:56:d1:67:88:8c:3a:
9a:13:87:ad:8b:bc:ff:14:5b:fb:c5:07:5a:79:b1:26:56:2d:
45:6a:75:b2:20:0f:5e:bf:f7:f5:4d:ef:31:30:0d:d6:c8:50:
43:8c:d7:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ21kw8ykg7Sf9LJvAK+jURJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjYwNDIyMTQyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDZlZWI2ZjQwMWExMTQ4ZGIzYzdmNWQ5ZGEzYjIxZDMwNjJlZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qWg41/2viuok69GBahFyS8bmmpm
Z2FRTF2dUt3tEBteziNt78BPCMuDEhcBWps9YQYZA0l8n5aELG4SmtxPgAtUzTim
RfE8IGCxVCC0dGw0qk3hwYGEYmVaPpHkCnuAryVcevA1C55p3h4JrlsFG3fuyl8W
KMEnlg9XHwiVqJw0tfDqV+n7x0SENmUlh9IKwNhKAJlvgxll78v7apRqO+5O3M2m
s5MNozOv1F/uuDDS+5qYWFB6MHGXo1r0j5IfvU+qig+8P/NEIchA1oY8ZDSqYdij
+0fwhBImT1ItXQGJ84i67zwVMsyXMG3EscUU3IFcg2nvTyZ0I3HYWsHtmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC1u629AGhFI2zx/XZ2jsh0wYu+hMB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvTFc3cmIwQWFFVWpiUEg5ZG5hT3lIVEJpNzZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRcTMA0G
CSqGSIb3DQEBCwUAA4IBAQAdX/oI6dx90aLcHkmciEiXvYymEilZfjFJ3TabI554
RuO1MMGQg5Jnb1XHhGfyBCbeZ5XtD1ltZbMU99+pwoL3nKZX1pElgLyaQSO+iuKS
p8OYklzEIMJJjL5H04QO0VuPdOUETWsR9PJvsQPrkb1ephawsQYhm6LWKcdrE//W
sVUppF2tPGXFyNXGuglGDfQ4habdzdL7LIA1B4l+w9x0Kv3rfBS+o5hDMK9jdNy/
0CqhNN45VKdh9OrEOH7bscxOQ+gptl60ndWzfu3hQy29iblW0WeIjDqaE4eti7z/
FFv7xQdaebEmVi1FanWyIA9ev/f1Te8xMA3WyFBDjNet
-----END CERTIFICATE-----
Generated at Thu Apr 23 10:24:33 2026 by rpki-client