Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z_EFxtYVXhIXT9lJUmHzRSraBZk.roa
File: z_EFxtYVXhIXT9lJUmHzRSraBZk.roa (raw, json)
Hash identifier: NNa2AMDjII3EWkzQ63e8cXjyQhn6y1hO6LShOvUdHI0=
Subject key identifier: CF:F1:05:C6:D6:15:5E:12:17:4F:D9:49:52:61:F3:45:2A:DA:05:99
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A11C16ECBA21E5AC5FFF82260E024FD82A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z_EFxtYVXhIXT9lJUmHzRSraBZk.roa
Signing time: Thu 08 Oct 2026 15:17:06 +0000
ROA not before: Thu 08 Oct 2026 15:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29076
IP address blocks: 195.133.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:16:ec:ba:21:e5:ac:5f:ff:82:26:0e:02:4f:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 8 15:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cff105c6d6155e12174fd9495261f3452ada0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:1e:05:81:fc:23:31:a1:d4:e0:9e:6c:26:
bd:7f:fc:9d:96:4f:5d:a1:de:38:15:62:c8:49:b5:
95:aa:31:9d:58:6a:4f:10:49:27:5f:f5:79:e0:c4:
47:39:18:43:d7:d9:be:c5:f2:bb:ca:a7:eb:93:7f:
00:a0:2b:2c:e9:11:5a:f5:c4:28:b9:96:6d:c8:60:
18:8f:f5:28:f7:1c:c3:a4:f7:fd:fa:8a:bd:b5:95:
b1:e4:96:83:72:2d:e4:13:67:4f:a7:1e:9b:7c:c2:
11:0f:dd:e3:c5:28:43:66:4c:41:eb:a0:11:8f:38:
04:b1:a1:cb:e5:58:c9:fa:6e:94:bf:c0:4c:c9:23:
99:e7:15:d2:00:b9:47:07:46:a0:f1:b7:ac:ea:22:
91:e9:a4:5a:0e:01:4c:0d:4c:d1:be:20:1a:ba:c3:
10:ab:98:0c:2e:0e:92:25:01:c5:8f:f8:cb:35:ad:
78:2f:9d:16:b1:fb:d5:1f:ba:58:7b:63:0d:e5:e4:
ce:c0:09:ab:22:23:a4:c8:b8:8b:0e:2b:f3:04:41:
63:d5:b9:f2:59:47:32:e5:43:a8:f1:70:8a:92:6b:
62:5b:25:f5:70:2e:2e:2c:ac:1c:e2:47:ec:a2:1c:
17:68:1b:be:ec:74:01:20:89:08:46:41:d7:05:ef:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:05:C6:D6:15:5E:12:17:4F:D9:49:52:61:F3:45:2A:DA:05:99
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z_EFxtYVXhIXT9lJUmHzRSraBZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ae:7e:99:76:e0:e2:2c:95:f1:bc:08:16:b0:4c:d3:37:d9:
20:30:6d:10:20:a1:39:a3:a5:05:a4:27:e3:31:9a:6f:52:1c:
83:b0:58:fa:f1:53:33:ab:65:2c:ff:9c:bf:15:ed:72:29:33:
d7:e5:db:65:81:2a:19:0f:b1:3b:15:4d:4f:38:e9:21:73:61:
d1:fe:21:23:06:dd:db:5f:21:d3:67:43:ea:12:61:e0:45:f2:
1c:43:11:ec:2b:52:48:5a:5d:09:cb:96:27:96:0b:0d:44:50:
aa:60:76:45:20:98:af:12:3b:c4:41:97:21:fe:d3:ca:ba:28:
dc:ef:20:ed:2c:ee:e3:f7:4d:e3:8a:4b:5d:b9:bd:2d:ce:9a:
d8:33:de:10:2d:6a:ec:80:c8:0c:0b:ef:0d:01:f4:cb:9e:be:
b3:d1:c9:21:90:4c:5d:35:a5:4a:f6:ca:77:92:26:d5:11:77:
8b:b9:33:be:4f:6c:c3:30:d0:3a:c1:3d:d3:83:60:97:ce:68:
26:28:9c:7b:29:dc:04:ab:a0:64:0e:53:9f:2f:47:a0:2b:4c:
a5:51:2b:a6:17:3d:e7:77:ce:54:a8:ce:38:9b:2f:e0:2e:fd:
7e:2b:90:04:28:d5:95:f0:61:e7:b4:6b:d7:c5:16:95:b9:33:
ef:1e:74:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEcFuy6IeWsX/+CJg4CT9gqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYxMDA4MTUxNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmYxMDVjNmQ2MTU1ZTEyMTc0ZmQ5NDk1MjYxZjM0NTJhZGEwNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTIeBYH8IzGh1OCebCa9f/ydlk9d
od44FWLISbWVqjGdWGpPEEknX/V54MRHORhD19m+xfK7yqfrk38AoCss6RFa9cQo
uZZtyGAYj/Uo9xzDpPf9+oq9tZWx5JaDci3kE2dPpx6bfMIRD93jxShDZkxB66AR
jzgEsaHL5VjJ+m6Uv8BMySOZ5xXSALlHB0ag8bes6iKR6aRaDgFMDUzRviAausMQ
q5gMLg6SJQHFj/jLNa14L50WsfvVH7pYe2MN5eTOwAmrIiOkyLiLDivzBEFj1bny
WUcy5UOo8XCKkmtiWyX1cC4uLKwc4kfsohwXaBu+7HQBIIkIRkHXBe+c6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM/xBcbWFV4SF0/ZSVJh80Uq2gWZMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvel9FRnh0WVZYaElYVDlsSlVtSHpSU3JhQlprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4XIMA0G
CSqGSIb3DQEBCwUAA4IBAQAPrn6ZduDiLJXxvAgWsEzTN9kgMG0QIKE5o6UFpCfj
MZpvUhyDsFj68VMzq2Us/5y/Fe1yKTPX5dtlgSoZD7E7FU1POOkhc2HR/iEjBt3b
XyHTZ0PqEmHgRfIcQxHsK1JIWl0Jy5YnlgsNRFCqYHZFIJivEjvEQZch/tPKuijc
7yDtLO7j903jiktdub0tzprYM94QLWrsgMgMC+8NAfTLnr6z0ckhkExdNaVK9sp3
kibVEXeLuTO+T2zDMNA6wT3Tg2CXzmgmKJx7KdwEq6BkDlOfL0egK0ylUSumFz3n
d85UqM44my/gLv1+K5AEKNWV8GHntGvXxRaVuTPvHnR0
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:30:32 2026 by rpki-client