Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BAP5me0sT19JrhMLCb-Dd5tyhjE.roa
File: BAP5me0sT19JrhMLCb-Dd5tyhjE.roa (raw, json)
Hash identifier: tABZrbf6/XTlh0c5D3OrWb3jOdNkiXPm/ZwwCnF6RoQ=
Subject key identifier: 04:03:F9:99:ED:2C:4F:5F:49:AE:13:0B:09:BF:83:77:9B:72:86:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A12125EAA945AEE9278C0AB1C07721393E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BAP5me0sT19JrhMLCb-Dd5tyhjE.roa
Signing time: Fri 09 Oct 2026 14:51:35 +0000
ROA not before: Fri 09 Oct 2026 14:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203154
IP address blocks: 194.87.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:25:ea:a9:45:ae:e9:27:8c:0a:b1:c0:77:21:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 9 14:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0403f999ed2c4f5f49ae130b09bf83779b728631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:df:66:c0:08:d5:a1:8f:74:bc:57:cb:89:
57:84:ce:51:38:38:3f:49:94:31:1b:47:70:64:55:
b5:56:03:31:9c:fd:99:60:20:96:c4:5f:80:1b:2d:
f9:6a:c2:5a:e7:58:15:37:fa:93:55:c8:64:6a:7a:
a9:9e:00:a2:bb:cc:25:98:59:93:44:0c:30:2d:a0:
60:47:9e:4f:7a:cf:06:5e:10:af:25:40:a2:f6:8d:
a4:1f:13:85:f5:8f:65:72:f1:e5:e3:b3:27:bb:16:
3d:60:75:2a:ce:d5:c1:70:60:c0:47:55:b0:81:56:
a2:0d:29:b5:41:b1:1e:51:a1:3a:b2:6f:9a:2b:79:
cb:1b:0b:5e:c9:65:8c:79:3c:82:8c:17:b8:c7:53:
dc:02:2e:15:ae:a1:19:6c:a5:f8:fa:1d:06:16:12:
cc:b5:1e:c9:c5:a8:66:19:e4:f1:54:cb:ac:ae:9a:
44:03:c7:f0:f2:94:1c:45:11:84:9f:9b:68:c7:4d:
66:ba:e8:ee:db:f3:7c:8f:b3:4a:78:ce:7b:3a:f2:
92:e4:3c:30:1a:2f:8d:e5:93:c6:cf:0d:f0:20:c5:
80:fb:77:32:1e:2a:5d:b5:5b:5f:18:bb:a1:ba:1b:
4f:25:d2:33:63:63:0c:e6:4e:92:87:e1:5f:d7:58:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:F9:99:ED:2C:4F:5F:49:AE:13:0B:09:BF:83:77:9B:72:86:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BAP5me0sT19JrhMLCb-Dd5tyhjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.156.0/24
Signature Algorithm: sha256WithRSAEncryption
42:af:80:d4:a3:7d:9f:65:62:e4:37:8b:b5:fc:18:cc:67:2c:
6a:29:5f:ec:6d:6d:2d:76:3a:50:c0:5f:0c:99:4e:b9:dc:2a:
9f:aa:bb:9c:12:28:29:7a:f2:07:9a:71:7b:15:d1:7e:e5:32:
03:6b:8f:2b:04:0d:52:a5:f8:3b:92:1d:6b:40:f7:b4:28:fe:
c6:24:46:e0:bc:9a:48:05:f4:08:5e:6f:32:58:58:74:cd:34:
b1:08:45:08:bc:3c:e4:8b:93:c9:93:bc:1f:39:67:6f:5f:0d:
d5:23:92:99:4d:ae:ac:c4:8a:41:f6:c8:9d:84:23:12:0c:16:
d5:39:32:b6:98:20:34:5b:5b:5f:26:43:2f:dd:c8:51:20:96:
d7:14:63:fb:e9:17:14:1f:ba:d3:f4:30:e4:dc:d8:e9:31:4f:
96:95:b9:b8:c8:c3:1c:fe:7d:f8:ba:5c:92:f6:a5:ac:e9:38:
65:8b:00:24:b1:14:30:84:c9:e0:eb:08:b8:a5:15:0d:f3:c7:
4b:48:d4:b7:f0:84:5e:33:6e:1a:c7:a5:d1:6a:14:d8:ae:cb:
e5:2f:57:1f:52:8b:7b:14:b4:41:26:74:0e:f0:05:cc:0f:c7:
16:f7:10:fb:40:b1:3b:01:03:e1:8f:f2:4d:1b:fe:58:5e:01:
e7:eb:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:59 2026 by rpki-client