Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/61IVtmEBbVa5LuYJfmEMHn4XJuo.roa
File: 61IVtmEBbVa5LuYJfmEMHn4XJuo.roa (raw, json)
Hash identifier: 33BJzX2rx0QOZlflzB7G1x61foepyFnfTi3b25q2rLE=
Subject key identifier: EB:52:15:B6:61:01:6D:56:B9:2E:E6:09:7E:61:0C:1E:7E:17:26:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EDDD4C71AB6D3218628E0ECE3C1802081
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/61IVtmEBbVa5LuYJfmEMHn4XJuo.roa
Signing time: Fri 19 Jun 2026 03:02:49 +0000
ROA not before: Fri 19 Jun 2026 03:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39900
IP address blocks: 193.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:d4:c7:1a:b6:d3:21:86:28:e0:ec:e3:c1:80:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 03:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb5215b661016d56b92ee6097e610c1e7e1726ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:7a:16:9c:a0:e5:ea:75:70:3a:bf:1f:d5:
a8:d6:af:36:47:82:44:e4:19:70:d6:65:8d:97:58:
0c:6d:eb:2d:9c:dc:a1:a3:c9:b1:8b:24:4a:84:9e:
0a:ca:3d:8a:59:a9:bc:80:62:79:06:5e:4c:45:4f:
5a:ca:01:ff:88:c7:15:70:35:4d:8f:bc:a4:10:bb:
38:e1:78:f4:85:de:33:53:1a:1e:a1:8f:8e:31:7d:
4c:bc:57:59:b8:5d:f2:d8:61:f3:bd:39:aa:50:7c:
3e:66:2b:9d:95:5d:db:c7:f5:82:2e:9b:fa:9a:1b:
f1:c1:8a:af:cb:5e:07:49:9c:a1:f4:7d:be:a5:51:
4f:e1:55:17:35:b1:31:e0:a8:aa:7a:20:08:95:b3:
1f:e6:19:00:19:90:39:48:ae:a0:db:12:3b:68:f6:
5f:17:6d:7f:c2:56:9b:62:c4:a2:5f:26:26:ca:e8:
bf:50:e2:75:d9:d1:ea:2f:f5:f7:2d:df:2d:67:1a:
65:ac:8a:c3:50:84:87:93:9a:1e:3e:66:b7:2e:dc:
85:fa:89:aa:f8:fa:22:7b:02:8d:ae:d4:9d:1a:62:
72:5e:22:61:6b:ac:83:00:d0:c6:33:a6:17:d7:0b:
52:4c:8f:28:27:33:d6:8f:d7:3b:c4:d1:16:43:a9:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:15:B6:61:01:6D:56:B9:2E:E6:09:7E:61:0C:1E:7E:17:26:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/61IVtmEBbVa5LuYJfmEMHn4XJuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ff:17:46:36:97:96:b5:5f:e9:1d:37:56:28:94:79:bf:df:
58:f5:ad:a4:a9:92:bd:ca:09:93:3d:ff:f0:a4:3b:3c:03:f4:
f0:f8:38:a6:a9:3f:e0:6c:46:f4:68:e6:e7:b4:9f:18:e7:f8:
e5:99:a4:65:99:b4:cb:55:3e:0d:9e:0b:58:63:f3:5a:ef:9b:
47:1c:ab:df:f0:3b:89:bb:23:cd:30:f7:ec:a6:06:47:a5:99:
c3:66:e8:03:3a:8a:e8:42:7c:26:38:47:39:27:60:4c:41:63:
80:86:b0:b8:f2:b9:ad:8b:8a:49:0f:dd:27:d1:32:eb:7e:9f:
c9:0f:1a:11:d6:1e:b3:a7:0c:2c:df:80:68:e6:a5:89:d7:5a:
70:55:bd:6a:e1:79:45:44:75:d8:65:29:22:5d:37:ff:2f:75:
c8:59:d3:3c:6a:71:a2:9a:0a:36:91:b3:7d:cd:dd:fd:e7:59:
12:9b:8a:94:27:d4:15:8d:d4:4b:6b:4f:dc:1a:b5:a1:37:e9:
83:73:63:00:ed:58:b2:7a:5a:2e:96:6a:0d:a7:13:bc:80:05:
87:ce:72:9a:c6:13:09:b7:c5:67:c1:ec:43:d8:f6:66:cc:9c:
f1:b3:13:37:aa:53:b8:5c:e1:1a:74:46:9d:40:d9:dc:0a:fc:
1a:5d:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:42 2026 by rpki-client