Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nSINvXx4fiSeBY1jNEiJ-BG95Kc.roa
File: nSINvXx4fiSeBY1jNEiJ-BG95Kc.roa (raw, json)
Hash identifier: VrPQXZSM2LIw6bDP3dkPQjaa2Nk4sPfatfaIuV3tqDk=
Subject key identifier: 9D:22:0D:BD:7C:78:7E:24:9E:05:8D:63:34:48:89:F8:11:BD:E4:A7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A11C16EBD9109544CF075A47D0BEE0F419
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nSINvXx4fiSeBY1jNEiJ-BG95Kc.roa
Signing time: Thu 08 Oct 2026 15:17:06 +0000
ROA not before: Thu 08 Oct 2026 15:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3175
IP address blocks: 193.124.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:16:eb:d9:10:95:44:cf:07:5a:47:d0:be:e0:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 8 15:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d220dbd7c787e249e058d63344889f811bde4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:90:9c:c9:ce:a9:92:86:c8:70:86:33:99:
fd:48:1e:03:e9:fc:17:62:d5:6f:1e:7b:42:ac:be:
c2:e3:3f:b7:36:6b:6c:00:09:69:60:e0:f4:33:99:
b4:75:9b:dd:e9:7e:d7:3f:96:05:c1:37:ab:b7:21:
70:74:b5:db:e4:73:ae:d7:67:24:68:98:cf:3f:bf:
73:fa:fd:8c:e7:66:8e:53:b1:a8:2a:99:b1:c0:bc:
b3:54:e0:ec:9a:48:78:a8:7e:4f:a8:25:83:ad:d1:
67:c0:d1:88:b6:60:39:3b:87:d2:5c:52:32:9e:20:
53:8d:30:dc:85:0a:5b:f4:e6:8e:75:1c:a5:92:d9:
c3:c6:9e:74:8f:93:ab:79:09:67:49:3d:f3:e8:2f:
96:1d:6f:23:36:ff:7e:39:01:ba:77:24:b0:d6:e9:
ad:4c:87:b8:a5:a5:e2:ca:e9:fc:3a:75:6f:3a:32:
63:16:1d:f9:97:9e:8c:bc:52:98:01:c0:8e:20:6a:
9c:ff:d7:41:93:ec:99:a8:ad:39:79:fd:93:d3:e7:
61:9f:7f:24:09:27:2c:7c:b2:cc:3c:18:db:a3:99:
13:54:7e:1f:b0:65:5f:c6:45:ad:1e:82:3a:00:0e:
0c:65:82:34:23:c5:b0:de:3a:a7:95:9a:e4:25:a5:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:0D:BD:7C:78:7E:24:9E:05:8D:63:34:48:89:F8:11:BD:E4:A7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nSINvXx4fiSeBY1jNEiJ-BG95Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.158.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ac:af:da:d3:87:fa:55:89:7f:13:b6:11:9f:83:66:45:39:
39:0d:65:c4:4c:3a:05:96:66:73:f4:78:99:db:f1:fa:b0:e1:
73:c7:92:31:d1:1b:7e:e2:0f:d8:60:c3:04:cc:44:18:a9:c5:
96:59:b0:71:84:e9:96:3a:30:35:fc:57:84:f2:eb:32:ce:a7:
33:a4:5a:e2:55:72:34:68:0d:7b:b0:3b:e8:a0:7a:7c:e5:5c:
8e:65:c8:a9:d7:d1:42:20:2e:5e:cc:32:26:b6:98:f6:e5:f3:
fa:16:de:f7:51:bb:56:4b:c6:27:a8:c9:3e:d1:42:1c:6f:c6:
f1:52:d2:59:04:89:4b:21:ae:ea:50:4a:4f:5a:82:f5:5b:ee:
29:97:fc:38:b3:3c:01:92:39:22:ca:2a:c6:61:e4:d6:ba:8f:
c4:ea:4a:9a:37:91:c1:ab:c7:74:6c:d5:6c:7f:04:0e:31:ea:
6f:d8:48:a3:0d:39:ae:b8:1c:c2:7b:51:f3:00:9a:76:24:ee:
ce:9c:e3:95:3a:8b:16:5d:2e:a1:89:ec:b4:e6:d8:5f:02:99:
2a:eb:38:13:ce:83:44:90:b4:78:f4:84:02:12:5d:8c:75:31:
32:d2:f9:eb:7d:b6:a6:90:e0:16:fe:d8:50:af:b3:04:2b:d7:
fc:d7:66:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEcFuvZEJVEzwdaR9C+4PQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYxMDA4MTUxNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDIyMGRiZDdjNzg3ZTI0OWUwNThkNjMzNDQ4ODlmODExYmRlNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEiQnMnOqZKGyHCGM5n9SB4D6fwX
YtVvHntCrL7C4z+3NmtsAAlpYOD0M5m0dZvd6X7XP5YFwTertyFwdLXb5HOu12ck
aJjPP79z+v2M52aOU7GoKpmxwLyzVODsmkh4qH5PqCWDrdFnwNGItmA5O4fSXFIy
niBTjTDchQpb9OaOdRylktnDxp50j5OreQlnST3z6C+WHW8jNv9+OQG6dySw1umt
TIe4paXiyun8OnVvOjJjFh35l56MvFKYAcCOIGqc/9dBk+yZqK05ef2T0+dhn38k
CScsfLLMPBjbo5kTVH4fsGVfxkWtHoI6AA4MZYI0I8Ww3jqnlZrkJaVdfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ0iDb18eH4kngWNYzRIifgRveSnMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvblNJTnZYeDRmaVNlQlkxak5FaUotQkc5NUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwXyeMA0G
CSqGSIb3DQEBCwUAA4IBAQAArK/a04f6VYl/E7YRn4NmRTk5DWXETDoFlmZz9HiZ
2/H6sOFzx5Ix0Rt+4g/YYMMEzEQYqcWWWbBxhOmWOjA1/FeE8usyzqczpFriVXI0
aA17sDvooHp85VyOZcip19FCIC5ezDImtpj25fP6Ft73UbtWS8YnqMk+0UIcb8bx
UtJZBIlLIa7qUEpPWoL1W+4pl/w4szwBkjkiyirGYeTWuo/E6kqaN5HBq8d0bNVs
fwQOMepv2EijDTmuuBzCe1HzAJp2JO7OnOOVOosWXS6hiey05thfApkq6zgTzoNE
kLR49IQCEl2MdTEy0vnrfbamkOAW/thQr7MEK9f812bs
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:40:40 2026 by rpki-client