Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_8dCLxMedQIjRCh_AobYTktrYpQ.roa
File: _8dCLxMedQIjRCh_AobYTktrYpQ.roa (raw, json)
Hash identifier: VLtHojAcEb01+LcFJk1+6XopR/GJO7cjccNz8ldcVPc=
Subject key identifier: FF:C7:42:2F:13:1E:75:02:23:44:28:7F:02:86:D8:4E:4B:6B:62:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F557A927E7650D92ADAADE5FA17F0D191
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_8dCLxMedQIjRCh_AobYTktrYpQ.roa
Signing time: Sun 12 Jul 2026 08:38:43 +0000
ROA not before: Sun 12 Jul 2026 08:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 194.87.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:7a:92:7e:76:50:d9:2a:da:ad:e5:fa:17:f0:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 12 08:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffc7422f131e75022344287f0286d84e4b6b6294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:4e:93:0f:b3:b8:01:d7:0b:47:d3:fe:3d:
19:4b:61:71:a8:9f:5b:24:f6:c0:da:f0:0d:1d:79:
c7:cd:b9:ce:98:5a:da:f9:1f:58:fa:ca:d8:ef:34:
48:48:40:37:08:1f:32:ee:c0:18:9d:62:d4:88:23:
45:7d:f9:b6:61:5c:4b:95:11:6c:5a:69:67:86:4a:
e1:d1:7c:b4:27:ed:1b:c0:fa:4a:d8:48:ad:5f:ad:
a3:d7:c5:f9:74:ac:9d:75:dd:34:b8:df:c7:77:bf:
ad:f9:b0:34:2e:6c:f0:2a:9d:7c:f9:a9:b5:cc:91:
2c:04:17:28:a5:f5:6e:f8:49:be:4d:45:0d:fa:d1:
0d:d1:1e:69:05:24:7a:9d:e1:e1:a6:24:dd:5b:94:
f2:34:66:b1:99:ca:84:78:45:9b:c9:8d:6a:9b:a3:
00:d0:5d:43:ce:87:2f:d8:6c:38:61:cd:a4:34:e8:
c9:f1:8e:d4:55:4b:2c:ec:53:27:67:20:99:38:e2:
d5:83:3f:16:13:82:44:2d:e7:dc:2a:f2:2c:7e:d1:
d2:da:a7:6e:94:d2:94:e6:eb:fa:ad:d1:fc:38:10:
63:5b:c8:2f:fe:57:a2:50:a2:c1:95:e8:04:ba:da:
86:d0:70:4c:80:33:bb:5d:32:e2:1d:81:83:5f:a1:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:42:2F:13:1E:75:02:23:44:28:7F:02:86:D8:4E:4B:6B:62:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_8dCLxMedQIjRCh_AobYTktrYpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a2:77:91:15:ab:10:b9:d9:2d:d4:9d:68:db:e1:ef:f1:e4:
7d:56:6e:84:47:1b:96:b7:ac:8f:e6:02:54:40:84:15:1e:23:
a9:83:53:92:c3:60:c9:d7:83:78:cc:08:3a:37:39:61:0e:24:
52:98:56:71:b2:1d:df:4b:e5:13:83:8d:69:29:af:8b:0c:01:
22:f8:aa:3c:f3:17:ab:7c:40:70:5e:94:8b:00:43:48:fa:54:
2f:4d:0e:66:5a:81:87:a4:13:98:bb:d7:64:b6:70:bb:f3:fe:
cf:7e:97:2a:b1:d5:92:70:65:71:ad:ec:7a:0c:fa:54:a7:52:
35:f9:0c:37:ae:22:37:9b:42:ca:79:ca:64:2f:dc:d9:62:c5:
ee:32:7c:96:91:34:db:4e:de:f8:1f:60:d6:88:e2:a3:94:20:
cd:7f:ac:7d:5b:a3:30:1a:e0:ca:a9:5e:a5:1c:b5:75:3d:57:
7e:09:c2:7e:d4:fa:84:07:56:9b:39:99:98:2c:e9:06:8c:03:
b7:3d:52:0f:10:57:b4:82:2c:ac:48:32:8d:c1:b0:f6:08:c9:
b4:76:41:b6:cf:22:fa:bb:1f:ca:3b:7c:35:28:17:6e:19:ee:
d3:25:75:2d:25:15:02:d2:28:f2:06:f6:29:d7:7b:3f:87:ec:
72:c7:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:43 2026 by rpki-client