Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AR6HZmPS1hucshysNYBVwEMJh1w.roa
File: AR6HZmPS1hucshysNYBVwEMJh1w.roa (raw, json)
Hash identifier: Ro6MErDug8xU+1Z03srpVRK4FVr4tkUTjSCZ2Os79HE=
Subject key identifier: 01:1E:87:66:63:D2:D6:1B:9C:B2:1C:AC:35:80:55:C0:43:09:87:5C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13F18EA061ED7155293D9FB0D5DA8670F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AR6HZmPS1hucshysNYBVwEMJh1w.roa
Signing time: Thu 15 Oct 2026 10:25:59 +0000
ROA not before: Thu 15 Oct 2026 10:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.29.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.193.7.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:18:ea:06:1e:d7:15:52:93:d9:fb:0d:5d:a8:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 15 10:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=011e876663d2d61b9cb21cac358055c04309875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:a2:fb:14:a7:ec:f0:60:5d:21:cc:12:49:
87:76:d8:a9:be:54:62:8b:e2:b5:7d:eb:df:55:8d:
8c:76:21:25:ec:1f:92:0e:0f:72:c8:80:fe:f8:4e:
e8:2b:f3:7d:26:f7:e1:01:45:39:e8:77:45:11:33:
89:f2:fa:a2:59:15:fc:a8:6d:80:36:eb:29:5a:f4:
1f:61:37:14:02:87:ef:e5:69:77:c7:8f:aa:40:ac:
34:2d:7d:da:ef:13:2d:0e:12:32:28:6a:f6:13:98:
cc:de:dd:5d:dd:6c:b4:65:8e:30:99:6c:27:ed:ea:
53:71:07:97:c9:69:98:59:bc:a7:35:2a:ed:96:a4:
bb:e6:ce:63:c7:0c:c7:2d:bd:91:79:90:e6:21:22:
05:3b:d0:ce:66:c7:b7:ba:79:89:18:07:bd:76:61:
64:9d:8d:d0:d5:1f:b2:8d:f5:41:40:58:44:c1:0a:
7d:4b:e7:82:9c:9c:22:ef:72:98:c0:e1:3d:ab:60:
6b:79:95:36:fa:44:32:5c:98:b4:fa:55:3b:a2:62:
59:ee:28:91:62:8e:e6:3e:57:35:9c:31:bd:00:6f:
3a:c3:5e:cd:b7:93:e5:5c:47:d4:77:cf:fe:98:1b:
ec:0b:0e:09:3c:a9:72:b2:6f:e4:18:5d:16:f8:5a:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1E:87:66:63:D2:D6:1B:9C:B2:1C:AC:35:80:55:C0:43:09:87:5C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AR6HZmPS1hucshysNYBVwEMJh1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
194.87.119.0/24
194.87.136.0/24
194.87.150.0/24
194.87.179.0/24
195.58.59.0-195.58.60.255
195.133.29.0/24
212.192.241.0/24
212.193.7.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:58:0c:a2:0b:18:e2:7a:39:e3:e9:5f:6f:96:a2:6c:c5:9e:
03:b2:b7:88:c7:1d:31:19:58:ed:1a:6a:da:c5:40:1e:50:d6:
cd:70:d2:4c:d0:71:2c:0b:2d:99:eb:db:7f:38:69:1d:5d:86:
32:85:80:67:f0:28:ef:0f:85:47:9f:d0:e0:95:59:19:16:65:
84:2e:3d:b4:1e:3b:ca:64:01:e3:49:20:00:8f:00:13:71:05:
53:0f:9f:ea:49:bb:22:fe:d7:b4:76:b2:49:9b:c5:7e:d4:3e:
13:1b:e5:5a:71:96:fc:d6:ab:6f:9a:02:7a:cb:a3:ba:a5:8f:
53:d4:56:89:e8:b8:3b:8c:fb:f4:71:da:91:35:fb:89:f9:32:
bc:16:83:1f:fd:e8:68:e3:65:2a:ba:4b:6e:be:41:4b:f5:cd:
da:64:be:0f:77:85:a9:87:cf:a1:03:c7:0a:5b:fb:88:d5:2f:
ff:cf:8b:88:89:c3:b6:bd:c6:bd:64:d5:ae:1b:08:69:e8:c9:
d3:91:5d:de:d3:06:70:83:03:35:e4:48:59:fa:94:f0:6e:43:
99:38:ba:a7:aa:3f:01:ef:83:13:10:30:cb:91:5f:ec:ae:9c:
93:42:cf:bf:d8:30:d9:53:d7:6a:07:06:c3:b7:3c:9a:f5:11:
97:fb:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:46:00 2026 by rpki-client