Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/C9nYO3Oe7Zxmrq83AOGr51fibUo.roa
File: C9nYO3Oe7Zxmrq83AOGr51fibUo.roa (raw, json)
Hash identifier: BUVN1kVpXD1aEM7EmgjeYN1qePdcnHWHzLWacgeEqEA=
Subject key identifier: 0B:D9:D8:3B:73:9E:ED:9C:66:AE:AF:37:00:E1:AB:E7:57:E2:6D:4A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13A49CEE3277062BB41FB75A94631E4BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/C9nYO3Oe7Zxmrq83AOGr51fibUo.roa
Signing time: Wed 14 Oct 2026 12:01:17 +0000
ROA not before: Wed 14 Oct 2026 12:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 193.124.30.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.88.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:ce:e3:27:70:62:bb:41:fb:75:a9:46:31:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 12:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bd9d83b739eed9c66aeaf3700e1abe757e26d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:3f:67:12:db:79:8d:93:27:58:38:f1:f7:
67:c4:11:d8:b9:07:e8:78:dd:81:e2:f5:a3:bc:93:
62:49:0f:00:85:2d:40:ca:86:6c:bc:82:27:65:56:
a6:cf:4f:2a:62:14:71:f2:ab:fe:3a:a5:81:a9:0e:
46:44:87:9e:80:61:c4:18:62:bc:89:ed:2e:a6:8c:
0b:0e:61:39:a2:dd:bb:a7:a3:58:5c:1d:8a:a4:75:
d6:fc:34:07:08:7f:79:f7:43:7c:44:6b:55:e9:9c:
16:af:fe:03:ce:3b:c5:b4:df:12:93:b5:9d:eb:37:
88:33:59:08:fb:6f:e3:d8:2e:ca:1d:17:8f:a7:88:
14:c9:e1:a4:38:5e:91:fe:e5:d5:f7:63:88:a4:6e:
8a:f2:6f:d5:2b:24:ed:02:3f:23:5f:90:7b:74:c7:
c3:99:4b:da:f7:5e:08:b1:d5:dc:b8:f9:ce:ef:aa:
c3:c2:5d:09:5e:8c:05:1c:d1:c2:67:8f:6c:41:70:
d6:3f:51:99:c2:d6:2b:39:74:46:f7:f2:2a:4c:0d:
b4:21:13:9b:19:5c:0b:70:4b:e7:6f:92:10:5d:42:
9c:1d:84:8e:a0:cd:19:bb:28:7d:51:d3:77:4a:92:
34:ee:9a:69:b9:40:45:2f:25:98:a3:73:e1:c8:4f:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:D8:3B:73:9E:ED:9C:66:AE:AF:37:00:E1:AB:E7:57:E2:6D:4A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/C9nYO3Oe7Zxmrq83AOGr51fibUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.30.0/24
194.87.3.0/24
194.87.16.0/24
194.87.66.0/23
194.87.81.0/24
194.87.88.0/24
194.87.90.0/24
194.87.120.0-194.87.122.255
194.87.139.0/24
194.87.149.0/24
194.87.160.0/24
194.87.163.0/24
194.87.169.0-194.87.170.255
194.87.172.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ed:55:7c:d6:ba:c1:4f:d4:cc:fa:41:78:ed:ef:39:b8:cc:
ca:83:08:1e:e2:6f:bb:0f:82:54:40:61:ad:cd:8f:a8:4a:fc:
68:d8:a1:21:b8:95:13:56:6d:99:55:46:e2:a1:36:9a:36:45:
81:bd:73:22:fc:86:e7:74:52:fb:bd:72:82:82:ba:45:f7:eb:
4a:95:07:4f:ff:ca:50:b7:e6:18:c3:8f:54:a9:6a:17:ca:32:
d5:23:09:b9:3a:48:ad:49:52:28:c5:2e:b0:88:09:c4:a9:3b:
bc:ed:38:60:6b:c1:2f:fa:fb:9c:e0:19:83:e3:51:16:43:99:
fc:12:f6:d4:d9:60:6d:e4:b8:17:f3:9f:5e:a7:55:9d:ab:7c:
88:cc:89:c9:09:f4:bd:aa:fb:db:f4:f4:69:52:ee:18:8d:bd:
a9:0a:48:3f:3e:b0:5f:2c:c0:8e:c5:58:98:aa:7e:0a:44:f1:
f8:92:8e:93:5f:92:ff:67:83:e3:79:dc:fc:97:6a:b7:5a:b8:
20:9c:4e:dd:82:86:bb:c5:f4:04:da:43:cd:a2:75:6d:00:bd:
7a:42:a2:fe:c8:32:39:b7:d0:87:c1:73:52:01:6b:d5:e4:40:
bc:9d:a0:91:e4:1a:b6:00:49:6d:20:01:8d:53:c6:fe:00:40:
c8:e3:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:09:21 2026 by rpki-client