Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/wBwxvniWkVLTU8lzjagdjNio7rA.roa
File: wBwxvniWkVLTU8lzjagdjNio7rA.roa (raw, json)
Hash identifier: yfU0N7Qa02bAFcmBB3AUh8U/RxL0CnGcM+0y2zDoS4M=
Subject key identifier: C0:1C:31:BE:78:96:91:52:D3:53:C9:73:8D:A8:1D:8C:D8:A8:EE:B0
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 01A019C4DF12B487BB2A723F03BD0A3F8F03
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/wBwxvniWkVLTU8lzjagdjNio7rA.roa
Signing time: Wed 19 Aug 2026 11:25:27 +0000
ROA not before: Wed 19 Aug 2026 11:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 95.111.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:c4:df:12:b4:87:bb:2a:72:3f:03:bd:0a:3f:8f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Aug 19 11:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c01c31be78969152d353c9738da81d8cd8a8eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:b9:8e:1f:cc:e9:46:bd:a0:63:a8:42:4c:
06:96:3c:49:8f:65:70:df:17:bb:f8:bf:39:84:7f:
de:e1:a1:ee:1c:1e:5f:b5:0f:67:e2:5b:13:5f:80:
65:bf:83:dc:2b:2a:9b:b8:4e:02:08:85:ee:08:40:
e2:0e:98:83:55:c0:3e:0e:97:6c:da:bb:2e:2a:9a:
39:1a:74:bf:c5:a3:5e:04:ac:6a:fe:7c:03:79:c4:
d2:bf:95:0b:c9:c2:48:20:2e:ec:b4:08:ff:36:fc:
69:79:dc:87:cc:d4:ca:36:a8:00:ec:82:98:dc:51:
3f:10:04:d8:ed:ec:1e:40:89:34:28:90:e4:24:df:
3c:fb:44:e4:60:08:d0:8c:2e:6d:1a:52:43:19:5b:
99:dc:c5:72:d9:f9:17:5d:5c:4a:1d:14:1b:e8:37:
00:cf:0a:fd:6a:3d:30:b8:f7:ed:4a:4f:f0:3b:34:
2a:ff:75:20:13:6e:e9:a6:37:b3:69:5d:66:b7:a1:
a7:c6:53:41:b3:87:f7:ed:7b:d8:04:55:41:d8:32:
3c:ae:02:53:73:d6:37:e2:07:15:a3:37:49:79:db:
a4:c9:7f:d5:5b:6f:84:ba:ce:fc:fd:14:e1:78:a0:
52:99:80:16:bb:df:00:e0:fc:61:4f:12:cb:bd:d6:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:31:BE:78:96:91:52:D3:53:C9:73:8D:A8:1D:8C:D8:A8:EE:B0
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/wBwxvniWkVLTU8lzjagdjNio7rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.133.0/24
Signature Algorithm: sha256WithRSAEncryption
42:72:d1:3e:86:53:fa:da:fb:47:3a:8d:b2:a7:83:28:16:c9:
ea:b0:b2:a9:9f:72:3e:8c:c6:5b:7c:c6:d4:8d:4c:6a:c5:b8:
56:86:19:71:8d:80:96:6d:f8:5c:58:cb:51:30:12:c9:25:ca:
31:5b:3d:e4:f4:c0:08:44:b2:6a:ca:2c:25:a5:12:88:2d:02:
ad:f5:9c:3a:b5:bd:01:d0:ed:c0:47:5b:23:bf:45:41:c5:ea:
fe:e4:f1:82:70:6d:2e:bc:27:9b:87:a7:ec:89:5a:66:52:ae:
4c:75:f8:ab:a2:b7:27:ed:dc:c5:0d:09:5f:df:00:f4:88:61:
2c:a2:d7:17:3d:76:e3:3e:86:7b:10:04:48:e2:a8:63:72:63:
d6:58:c1:bb:d3:93:8a:0a:3d:b7:66:29:99:8a:63:e9:de:fa:
35:d8:7b:de:3a:ab:bb:d3:a1:a9:e7:bd:79:dd:a7:c6:79:51:
6b:cd:71:91:b3:42:72:4c:94:5c:19:6e:b2:ac:0c:97:e8:12:
20:14:ad:11:e7:00:96:e9:52:3c:32:55:1a:7b:ee:c0:ab:f3:
8f:0f:8a:0a:74:1b:3c:b5:25:97:0b:66:9c:53:5e:90:e4:1c:
18:bb:45:94:f1:68:1c:5c:d0:36:53:62:7a:e1:b0:b8:61:7f:
58:5f:57:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAZxN8StIe7KnI/A70KP48DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjYwODE5MTEyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDFjMzFiZTc4OTY5MTUyZDM1M2M5NzM4ZGE4MWQ4Y2Q4YThlZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyK5jh/M6Ua9oGOoQkwGljxJj2Vw
3xe7+L85hH/e4aHuHB5ftQ9n4lsTX4Blv4PcKyqbuE4CCIXuCEDiDpiDVcA+Dpds
2rsuKpo5GnS/xaNeBKxq/nwDecTSv5ULycJIIC7stAj/NvxpedyHzNTKNqgA7IKY
3FE/EATY7eweQIk0KJDkJN88+0TkYAjQjC5tGlJDGVuZ3MVy2fkXXVxKHRQb6DcA
zwr9aj0wuPftSk/wOzQq/3UgE27ppjezaV1mt6GnxlNBs4f37XvYBFVB2DI8rgJT
c9Y34gcVozdJedukyX/VW2+Eus78/RTheKBSmYAWu98A4PxhTxLLvdYg1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAcMb54lpFS01PJc42oHYzYqO6wMB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvd0J3eHZuaVdrVkxUVThsemphZ2RqTmlvN3JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX2+FMA0G
CSqGSIb3DQEBCwUAA4IBAQBCctE+hlP62vtHOo2yp4MoFsnqsLKpn3I+jMZbfMbU
jUxqxbhWhhlxjYCWbfhcWMtRMBLJJcoxWz3k9MAIRLJqyiwlpRKILQKt9Zw6tb0B
0O3AR1sjv0VBxer+5PGCcG0uvCebh6fsiVpmUq5Mdfirorcn7dzFDQlf3wD0iGEs
otcXPXbjPoZ7EARI4qhjcmPWWMG705OKCj23ZimZimPp3vo12HveOqu706Gp5715
3afGeVFrzXGRs0JyTJRcGW6yrAyX6BIgFK0R5wCW6VI8MlUae+7Aq/OPD4oKdBs8
tSWXC2acU16Q5BwYu0WU8WgcXNA2U2J64bC4YX9YX1ew
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:33:28 2026 by rpki-client