Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hTsM2XE6KamU3SzPsFu_QpJ_neQ.roa
File: hTsM2XE6KamU3SzPsFu_QpJ_neQ.roa (raw, json)
Hash identifier: Tfyb9EG1Cd1CxWYi698ufsB6nShTTBvLj1VUIuXDGFg=
Subject key identifier: 85:3B:0C:D9:71:3A:29:A9:94:DD:2C:CF:B0:5B:BF:42:92:7F:9D:E4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EFB208D4218414D6554FAC45AA30DC98A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hTsM2XE6KamU3SzPsFu_QpJ_neQ.roa
Signing time: Wed 24 Jun 2026 19:34:34 +0000
ROA not before: Wed 24 Jun 2026 19:34:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 176.97.215.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:20:8d:42:18:41:4d:65:54:fa:c4:5a:a3:0d:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 24 19:34:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=853b0cd9713a29a994dd2ccfb05bbf42927f9de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:ce:ed:0a:df:60:e3:f9:2a:b8:43:79:68:
a9:e6:a7:17:4c:2e:1c:47:0d:8c:1a:8f:8c:72:56:
4f:98:cb:38:9b:b4:26:2b:16:c0:ef:78:5f:85:91:
35:9b:a8:86:e1:c9:da:4a:bc:37:0a:40:69:bc:0e:
38:18:a0:2f:ca:c6:af:e4:6e:0e:53:a8:d6:21:5f:
30:14:bd:77:a4:45:1c:b8:68:4e:e8:1a:1f:37:2d:
ea:1c:c5:5b:36:ed:c6:a7:e0:88:7c:b7:67:4b:ca:
ca:6d:c0:ae:25:dc:8f:6e:d9:e3:9a:ec:b9:21:e4:
5f:80:e2:9f:7b:6a:5e:c8:7f:8b:ca:61:63:fc:40:
57:6c:1c:3f:b4:b7:5b:32:f0:4b:26:e7:8a:4b:4d:
ae:4d:fc:70:ee:81:29:9f:d5:0b:53:1d:cc:c4:99:
68:cf:ca:e8:11:06:10:46:f6:51:42:06:40:f2:b7:
e4:f2:2f:ba:ac:87:22:7a:33:23:47:58:4d:83:46:
a7:6f:1e:56:91:71:06:2c:5b:81:9f:75:48:05:dc:
90:70:c7:f3:36:ab:e8:3b:a8:4e:30:2a:8b:05:14:
b0:cf:44:1a:23:88:a7:a4:77:22:49:fe:89:eb:cf:
78:2c:23:05:27:34:a8:01:24:73:1b:15:76:bc:e4:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:0C:D9:71:3A:29:A9:94:DD:2C:CF:B0:5B:BF:42:92:7F:9D:E4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hTsM2XE6KamU3SzPsFu_QpJ_neQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.215.0/24
194.87.121.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ea:0e:a2:96:11:68:bd:40:0b:e1:35:41:f2:2a:2b:13:d4:
8d:77:d7:83:60:e9:3f:b0:b4:89:73:77:ac:b7:25:cb:da:bc:
d2:c7:0e:7b:15:75:9d:f8:e4:cf:77:89:23:81:59:e2:dd:c0:
ea:b1:c8:0a:f9:01:59:83:a0:ac:bc:34:52:0f:5c:8f:0a:e9:
ee:50:95:06:0d:bd:bb:9c:c5:27:4f:54:e7:20:c1:a9:9d:71:
98:a1:e9:40:b9:a4:5b:b2:a1:44:aa:77:16:1b:23:82:dd:4d:
d4:f8:bb:5e:38:2b:87:80:88:8b:6b:9b:14:56:95:6b:51:8f:
67:1e:e0:a2:32:bf:e4:3d:85:34:9b:6b:74:80:83:d6:42:c6:
7d:24:22:51:5e:7b:49:59:6a:f2:21:24:c9:c7:2a:99:4c:f8:
6d:69:3a:3b:3e:d1:26:ef:13:00:26:06:25:61:df:aa:ad:e6:
90:8a:d4:21:a6:46:30:fd:96:da:88:20:e2:44:13:8b:b7:56:
07:bc:79:dd:a0:6a:6f:fc:c1:64:e0:41:5e:a2:2a:87:9d:4f:
53:c1:e9:98:35:df:a4:e1:9c:09:00:86:8a:77:05:61:a1:9f:
65:7f:89:1a:e2:b6:68:b2:28:04:53:e2:b2:73:6a:ec:6b:48:
22:58:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client