Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E8-fM8FcY5T1XDbZF7tm663S-hY.roa
File: E8-fM8FcY5T1XDbZF7tm663S-hY.roa (raw, json)
Hash identifier: dwZRzxnOi0mShyxxj2/w0KbiV9cCrTBkf2v9ceHp2DQ=
Subject key identifier: 13:CF:9F:33:C1:5C:63:94:F5:5C:36:D9:17:BB:66:EB:AD:D2:FA:16
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F67063205AAD828F95A60EFE3A94CC1F1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E8-fM8FcY5T1XDbZF7tm663S-hY.roa
Signing time: Wed 15 Jul 2026 18:24:47 +0000
ROA not before: Wed 15 Jul 2026 18:24:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 192.124.173.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:06:32:05:aa:d8:28:f9:5a:60:ef:e3:a9:4c:c1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 15 18:24:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13cf9f33c15c6394f55c36d917bb66ebadd2fa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:4d:f2:01:55:e8:4b:3a:e2:0b:28:00:86:
bd:7b:f7:c2:43:3d:2a:4d:9f:27:2d:1d:72:fa:9b:
7d:7b:63:26:40:80:0a:07:b0:e5:0a:d8:46:a9:b0:
59:ff:ad:eb:05:2a:4b:b9:14:7b:60:13:3c:2b:bc:
66:ea:5a:bf:94:86:16:f5:70:28:1a:e2:89:89:15:
68:95:91:d5:8f:3c:99:cd:44:a1:24:0e:eb:8b:14:
a0:9a:2f:6a:26:71:a9:c0:18:1c:f1:1d:31:b1:b2:
cd:fd:a0:5b:cf:c4:b6:99:2c:bc:ae:ea:de:41:ea:
85:f7:c9:94:df:64:91:86:aa:ed:ff:f4:e7:6f:a4:
c3:75:18:23:e4:9e:f7:ee:8c:b6:94:73:17:31:d9:
86:67:f8:89:8e:52:5f:57:f7:ef:59:32:32:0a:30:
fe:38:ba:c2:ac:7a:ea:60:f0:da:22:9d:d9:0d:54:
5a:7e:f2:b4:b2:ce:fa:35:02:bc:1e:64:5a:33:59:
fa:76:98:c8:7a:20:f8:72:77:39:b1:12:65:3a:64:
d4:e2:56:ce:a0:ad:af:c0:d9:e4:a0:a7:b4:0a:25:
ad:f3:dd:5b:aa:4d:fb:e5:f9:16:81:64:38:e5:d7:
9e:de:4d:42:04:d0:80:cd:f1:8f:ba:e1:fc:09:a3:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:9F:33:C1:5C:63:94:F5:5C:36:D9:17:BB:66:EB:AD:D2:FA:16
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E8-fM8FcY5T1XDbZF7tm663S-hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
194.87.32.0/24
194.87.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fd:e0:44:73:60:d3:9e:72:46:20:ce:16:25:90:2f:71:ac:
24:3e:70:0e:63:a2:1d:64:17:b9:8f:74:91:b3:80:b2:26:23:
7e:14:0d:75:ad:8f:8d:5d:b9:6b:1b:9e:d5:0b:77:ae:58:b6:
ed:4d:fe:5a:c3:c9:19:d2:d5:60:4a:b4:2e:92:22:16:48:f6:
2e:05:f3:a4:49:9c:e0:50:1a:a8:97:c5:b9:a3:61:75:32:64:
ed:2c:b8:83:f3:20:ee:7f:0f:fd:e5:53:d2:cb:52:65:c3:0a:
0e:0c:ed:80:5d:c2:de:23:4b:1b:78:45:28:92:be:ed:11:0d:
ef:c7:58:9b:86:27:52:9f:e3:81:b0:40:04:f6:d5:26:5f:90:
72:77:19:28:50:46:98:ca:fc:69:37:24:dd:35:ae:18:0c:7a:
b4:46:47:67:f8:93:10:ea:1c:74:d8:ab:71:75:65:8c:d3:64:
7e:89:ae:40:a7:f5:68:b7:f6:2c:0e:4a:4c:67:90:a4:02:7d:
5d:0c:b6:82:45:b0:46:e7:ad:dc:85:3d:3a:4c:eb:c7:dd:17:
d5:b8:12:dd:42:16:05:42:68:87:01:88:29:fc:48:4b:50:03:
78:7a:2e:20:cf:52:c0:6a:6f:6f:33:1b:8f:a8:ad:84:4c:5b:
2a:8f:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:38 2026 by rpki-client