Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6cRhp1xNwf6QAIk_AkgtKMVyEF0.roa
File: 6cRhp1xNwf6QAIk_AkgtKMVyEF0.roa (raw, json)
Hash identifier: 7f7zrsEviYnLdu7HKboWPyIABbNZHeOYKmT0mqYs5uw=
Subject key identifier: E9:C4:61:A7:5C:4D:C1:FE:90:00:89:3F:02:48:2D:28:C5:72:10:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019ED48E9DCB7DE1604E9745EB780C931407
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6cRhp1xNwf6QAIk_AkgtKMVyEF0.roa
Signing time: Wed 17 Jun 2026 07:49:36 +0000
ROA not before: Wed 17 Jun 2026 07:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:8e:9d:cb:7d:e1:60:4e:97:45:eb:78:0c:93:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 17 07:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9c461a75c4dc1fe9000893f02482d28c572105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:ab:75:29:47:ab:27:57:11:51:25:81:2e:
d9:20:3f:9d:a1:df:be:07:c9:a1:4c:2f:00:fd:45:
3d:de:e3:4a:94:72:c0:57:af:65:ee:7a:90:bd:70:
20:58:2a:f7:ad:d3:bc:59:50:b1:f5:a9:85:9e:e9:
6a:a6:84:6e:3d:44:2f:8a:db:7e:5a:b7:3f:44:86:
48:56:72:77:56:32:90:11:6a:04:94:9f:36:ca:ed:
f8:b3:61:e7:29:43:f3:e2:65:fe:ce:63:7f:91:31:
76:ed:a2:ae:12:17:f3:3b:41:57:c8:10:21:f7:40:
20:49:46:2c:78:03:69:cb:80:e6:92:5e:fb:5d:e6:
ff:20:3d:b6:ce:0b:35:96:e9:14:7f:79:a5:0c:46:
b7:53:73:52:03:73:b7:85:e5:13:45:3a:fc:46:9d:
6f:81:d6:49:73:31:e1:de:52:76:b4:2a:0f:56:fc:
53:a1:63:fa:5b:0a:55:08:18:02:1e:55:7d:94:91:
c1:04:ae:2a:d2:55:9e:31:f9:02:d1:45:4d:18:b6:
8c:9f:34:33:8b:20:a5:44:20:bb:a3:8f:ef:b7:59:
04:ee:f5:2a:c0:02:b3:fb:a2:72:9c:56:c6:e1:bc:
c0:d4:35:64:05:30:2c:7b:d7:28:86:33:23:fd:ff:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:61:A7:5C:4D:C1:FE:90:00:89:3F:02:48:2D:28:C5:72:10:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6cRhp1xNwf6QAIk_AkgtKMVyEF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.91.0/24
194.87.12.0/24
194.87.22.0/24
194.87.33.0/24
194.87.40.0/24
194.87.124.0/24
194.87.142.0/24
194.87.150.0/24
195.133.6.0/24
195.133.42.0/24
195.133.85.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
94:70:ff:6f:57:b4:0b:36:5e:1a:d4:fa:3d:42:cb:35:4b:84:
84:b5:0c:ec:7a:76:4f:45:4a:48:9e:88:9f:50:ae:d6:7f:31:
0a:d9:69:87:56:11:75:db:f9:80:9f:7e:9f:18:1f:d2:8b:4e:
be:9d:bc:0d:33:a6:e1:73:29:83:03:88:74:b6:bc:f0:d9:53:
8b:3d:15:48:fe:d7:2e:79:00:cd:cc:81:c8:8e:46:54:33:38:
57:6b:2b:07:f8:bd:94:bb:28:7d:60:c1:f5:55:0d:dd:f1:be:
9d:c9:84:96:f2:96:5c:3b:dc:d1:b4:cf:b3:44:95:3c:bf:11:
11:a4:33:ae:01:79:75:5f:33:2d:0f:88:19:ce:6f:db:4c:14:
72:76:b8:92:0e:4c:d0:ad:d3:f6:c4:be:5a:58:0a:c1:c8:6a:
a1:76:d6:f9:a7:cc:d1:56:26:c5:c8:2d:30:ff:2e:eb:44:95:
ff:44:7c:c2:11:fb:03:75:7e:6e:2f:a7:1f:72:98:c4:b4:d6:
07:8c:78:de:8d:86:92:19:9f:a8:33:86:f3:c7:b0:12:e4:a3:
f7:6d:b3:f8:cc:9e:b9:ac:06:01:aa:d5:65:15:bb:e1:a3:20:
4a:8f:c2:1a:6a:d4:ad:5d:30:15:d9:31:83:f0:bd:3a:2a:fd:
f2:6b:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:57 2026 by rpki-client