Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vwSgBs4W_IIEgGspox9XcdVs1SI.roa
File: vwSgBs4W_IIEgGspox9XcdVs1SI.roa (raw, json)
Hash identifier: p3WqssolTmgvwSses1xwOa/iXLHAalQYIG9lGF3jlgc=
Subject key identifier: BF:04:A0:06:CE:16:FC:82:04:80:6B:29:A3:1F:57:71:D5:6C:D5:22
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F28648608A77D862001DE1427BF403AF7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vwSgBs4W_IIEgGspox9XcdVs1SI.roa
Signing time: Fri 03 Jul 2026 14:31:44 +0000
ROA not before: Fri 03 Jul 2026 14:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51248
IP address blocks: 194.87.52.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:64:86:08:a7:7d:86:20:01:de:14:27:bf:40:3a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 3 14:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf04a006ce16fc8204806b29a31f5771d56cd522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b4:54:f2:74:65:d0:53:1c:47:e0:ac:f2:df:
57:93:80:61:06:10:57:73:78:c6:1c:87:a9:9c:bf:
f4:c7:d5:15:01:95:b4:21:08:3d:95:01:fa:6d:5a:
89:42:28:81:1e:d4:d1:74:92:08:88:cd:40:6d:90:
8c:95:a3:33:a9:3c:64:6c:09:82:2e:a2:56:7b:55:
38:1b:90:c1:04:9c:4f:ce:a6:69:68:2f:7e:63:27:
d6:2b:ef:f0:04:d6:97:cf:37:8b:bb:99:a5:c0:10:
21:a9:0e:ba:9b:e8:d4:04:6e:18:1e:8b:b2:02:14:
93:5e:6e:21:15:cb:1f:7f:3b:f2:6e:e8:a7:13:aa:
c7:3c:97:06:3a:73:e3:8c:c2:1f:ec:52:be:35:22:
68:02:73:03:5f:1c:98:f7:a1:a6:11:97:ee:13:b2:
b7:b0:53:64:f0:c5:18:b3:01:20:78:8e:ee:e8:85:
10:f2:89:4d:62:a3:13:78:39:cf:ca:20:09:67:b6:
ea:04:fc:1f:38:f9:f4:ee:7a:42:30:16:96:a8:51:
90:15:be:b9:7b:fd:7d:dd:f6:74:d9:c4:38:d9:9a:
16:34:ce:f0:13:cb:48:89:70:ec:f3:47:3d:cc:ca:
8d:a6:45:f9:bf:57:0c:95:2d:38:0a:c9:b8:ec:e3:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:A0:06:CE:16:FC:82:04:80:6B:29:A3:1F:57:71:D5:6C:D5:22
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vwSgBs4W_IIEgGspox9XcdVs1SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.52.0/24
194.87.126.0/24
195.133.35.0/24
212.192.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8d:cb:8d:87:65:00:f3:4b:9e:54:fe:c8:7b:e4:24:a3:ba:
8c:de:e7:c8:12:3a:b4:f1:23:ce:d0:50:30:d0:4e:58:d9:42:
da:eb:a9:0f:ee:d5:0e:d8:e8:73:7a:57:c6:5d:8a:22:5b:2e:
66:09:e9:86:20:c9:72:48:4e:3d:f7:88:9d:ca:26:43:0e:15:
1d:3a:f8:1a:7e:dc:3c:5a:39:00:5d:a9:27:3c:3e:44:6a:fd:
19:68:ff:9d:3f:08:29:32:28:2c:1d:4c:da:2b:da:05:16:58:
11:b5:e0:28:26:ac:b5:5a:21:c6:5e:d0:8c:38:fa:f2:5b:ef:
e2:e7:0e:93:9a:55:7c:5c:6b:38:1e:fc:82:96:7b:41:d1:71:
e4:05:2f:6f:9b:94:2a:ab:0d:aa:e9:79:c3:82:e6:70:bb:0a:
81:7e:17:bc:e7:64:a8:e3:27:41:c8:02:6e:57:4b:a1:45:14:
18:44:f8:7b:3d:c6:34:18:c5:fd:48:91:eb:ef:28:08:a5:19:
cb:31:6b:e5:95:5e:68:7e:2e:b0:41:61:3a:1d:2d:1a:a6:6c:
9f:2f:f1:15:d6:04:f4:e6:e1:a8:96:cb:94:91:2f:58:a6:05:
0b:94:73:b3:8c:bd:dc:9f:78:47:81:09:92:f7:21:8d:b0:a0:
4a:02:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client