Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/71B_xrjspAVDk4jHe9CnW-gGYq4.roa
File: 71B_xrjspAVDk4jHe9CnW-gGYq4.roa (raw, json)
Hash identifier: ySwwdaydVwwl1Ye1O84zH/g9LX8PPzAtaMmBEx4irTc=
Subject key identifier: EF:50:7F:C6:B8:EC:A4:05:43:93:88:C7:7B:D0:A7:5B:E8:06:62:AE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0EBD1DE982EC20C81248AC3C157329E98
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/71B_xrjspAVDk4jHe9CnW-gGYq4.roa
Signing time: Tue 29 Sep 2026 06:19:54 +0000
ROA not before: Tue 29 Sep 2026 06:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 176.97.215.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:d1:de:98:2e:c2:0c:81:24:8a:c3:c1:57:32:9e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 29 06:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef507fc6b8eca405439388c77bd0a75be80662ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:9a:a6:80:8c:22:58:f2:db:f5:8c:4c:d8:
5e:bb:ee:d1:8a:d7:4c:a4:a1:77:a5:85:c8:e5:ff:
1f:36:70:05:90:bb:e1:a8:06:8c:c6:60:90:95:f9:
e0:c9:92:4c:84:27:72:37:25:93:37:26:ad:32:13:
df:88:3d:e6:fd:97:07:70:b4:6a:c9:97:31:9b:18:
15:b0:f8:bf:12:a7:ff:42:20:48:08:8f:2c:05:19:
c7:a8:61:a9:cc:36:27:8c:f6:50:6e:56:26:65:49:
2e:80:c5:0f:3b:41:06:a7:a8:7a:f0:85:c3:39:7f:
3b:2c:f7:96:bb:d4:00:6d:66:b3:1d:22:0f:81:dc:
92:79:d4:b4:35:8a:c5:f7:c5:e4:60:8c:bc:6f:4b:
b4:44:9b:22:a7:e9:52:53:7b:0a:19:e4:6c:57:21:
19:21:05:12:e7:c9:9e:71:db:d3:1d:20:80:61:47:
e8:96:b9:aa:76:bf:54:01:09:f3:57:0f:22:b0:d4:
c9:a1:1e:0d:e8:d4:66:f5:bc:0f:08:3c:9a:58:be:
4f:b4:a0:77:a0:3c:4e:a4:90:b2:e3:53:55:7b:29:
aa:41:39:dc:4c:1b:db:43:3e:0b:30:30:9a:91:d5:
11:64:ed:8f:d3:20:16:9a:93:4c:e0:83:b5:29:33:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:7F:C6:B8:EC:A4:05:43:93:88:C7:7B:D0:A7:5B:E8:06:62:AE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/71B_xrjspAVDk4jHe9CnW-gGYq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.215.0/24
192.124.183.0/24
Signature Algorithm: sha256WithRSAEncryption
20:46:fb:34:bc:63:98:d9:92:da:d3:7a:4d:67:48:28:04:77:
09:48:3f:ec:4f:c5:bb:4c:fc:fe:f8:de:90:69:a2:81:75:8b:
66:92:a9:79:37:09:45:b6:67:dd:34:cc:ea:c5:16:b5:25:fc:
60:7c:3a:85:bb:05:16:08:27:82:3b:fb:b1:05:94:3a:4f:92:
09:8f:5d:71:3c:61:7a:d6:1f:77:3c:df:1e:96:30:b9:de:a6:
cf:05:7b:78:4b:35:ac:e1:7f:94:3d:d0:12:d1:a5:7d:6d:ee:
c9:e4:d3:4d:97:bf:10:7d:21:7f:fd:26:9b:a0:67:6b:a7:fe:
8b:4a:ea:2c:49:f6:af:89:0a:a5:68:b8:70:13:31:c4:a6:99:
65:ed:57:c8:9d:41:20:25:3f:f4:4d:56:03:5a:3f:24:3f:55:
ca:74:09:a0:e2:52:57:75:27:ff:77:d4:52:65:27:18:54:2c:
16:53:13:c9:f6:e5:39:c7:9b:2e:7b:46:2c:ec:5a:ad:66:e7:
22:af:a5:a9:2e:a3:b8:b2:d7:17:d5:77:cd:69:d2:e7:4b:f7:
75:e6:3e:ba:85:a7:7e:32:63:7c:3b:d3:15:32:ae:8b:b3:22:
4e:e5:c9:7d:76:ae:cf:11:d2:83:8c:35:76:11:e1:37:ae:2a:
a0:02:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:30:34 2026 by rpki-client