Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z1RREY0vLOYKR8NUxhpHY62v8-8.roa
File: z1RREY0vLOYKR8NUxhpHY62v8-8.roa (raw, json)
Hash identifier: DGMtrMAkocL4b+8SmJO2RLgu60fyRIl1j1wnypx2g6M=
Subject key identifier: CF:54:51:11:8D:2F:2C:E6:0A:47:C3:54:C6:1A:47:63:AD:AF:F3:EF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13413DB5F1107F779A193E86FDBCAA88E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z1RREY0vLOYKR8NUxhpHY62v8-8.roa
Signing time: Tue 13 Oct 2026 07:04:38 +0000
ROA not before: Tue 13 Oct 2026 07:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 193.124.94.0/24 maxlen: 24
194.87.242.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.54.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:13:db:5f:11:07:f7:79:a1:93:e8:6f:db:ca:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 07:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf5451118d2f2ce60a47c354c61a4763adaff3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:b9:eb:74:9c:12:4f:dc:b2:c1:4a:a2:dd:
de:a5:09:0d:d4:15:74:10:4c:31:f3:05:f8:06:fd:
9e:4b:63:d7:6a:14:ff:58:68:a6:5c:88:d0:3f:73:
83:76:dd:d5:cf:25:ff:fd:db:06:b2:6d:0e:b4:fb:
09:af:9e:1a:24:1f:ce:70:45:93:56:8f:03:90:0a:
65:39:40:db:64:6d:03:cc:dd:97:65:e6:41:c4:18:
b7:80:43:f8:44:88:f4:8d:e6:1e:e6:98:1f:a0:0b:
c9:94:68:bc:cb:40:f6:f0:4e:ee:16:f9:20:dd:5d:
0d:36:d3:96:3a:75:23:93:3c:6a:2b:4c:92:ee:78:
db:5a:43:42:97:ae:66:2e:a8:f1:0c:f8:c5:97:53:
ee:1f:46:71:07:81:f0:8c:85:15:49:ed:29:61:d4:
78:62:23:ff:7f:de:1f:44:e9:1c:83:29:a4:ba:9d:
1e:3e:17:63:64:19:de:53:4a:9d:23:69:20:19:9b:
2a:49:1e:71:ae:b9:49:7d:64:3a:3f:36:7e:ac:e5:
f1:a7:22:0e:59:46:fb:50:b1:1e:0a:f9:d6:3d:a5:
6c:36:9d:7f:31:24:be:ac:4e:de:2c:67:d4:00:d9:
bf:0f:80:9c:a5:e9:0c:9c:1e:32:e8:b6:d9:35:cc:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:51:11:8D:2F:2C:E6:0A:47:C3:54:C6:1A:47:63:AD:AF:F3:EF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z1RREY0vLOYKR8NUxhpHY62v8-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.94.0/24
194.87.242.0/24
195.133.12.0/24
195.133.19.0/24
195.133.54.0/24
195.133.82.0/24
Signature Algorithm: sha256WithRSAEncryption
82:06:99:ff:c8:32:a1:b4:0b:67:9b:a7:f7:ec:56:43:f1:e1:
0b:f0:0b:0a:eb:95:f3:e3:80:f8:82:35:4d:c9:16:46:89:c0:
ea:73:c2:4a:72:6d:ea:d1:81:6e:39:1f:43:eb:a6:56:0b:2d:
85:46:9c:f0:1b:84:bd:40:9b:3e:47:ca:24:bf:bf:d4:e4:c2:
67:d3:96:90:d0:81:c8:c6:d6:4c:8b:24:ab:4a:fb:41:69:22:
fd:9e:fa:13:8d:ab:96:99:30:c5:ee:4b:fa:40:db:44:5e:ae:
73:31:d9:0c:49:ca:8c:2a:4c:a6:57:1c:76:ab:39:f4:41:dc:
87:88:dc:46:61:d8:c1:52:c1:43:43:ea:af:d3:b7:6b:c3:6f:
49:28:d0:e5:e5:31:8e:a7:98:35:4c:0c:f7:63:72:9f:e0:fc:
fa:27:ad:70:94:0e:86:8c:a5:8b:1e:42:31:3e:dc:21:8b:fe:
f8:c7:19:dd:ba:1a:8f:74:3d:cc:d8:89:09:99:bd:93:89:f7:
21:5f:e6:48:fb:63:c4:74:93:30:bf:8a:7a:91:91:a4:c3:94:
d8:f7:49:f9:30:c3:84:50:d7:c3:5a:00:05:0e:1b:f9:39:4a:
f3:aa:cf:e3:cf:74:13:74:ae:78:84:f9:9a:57:6d:df:1e:7f:
1d:5a:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:44:56 2026 by rpki-client