Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1TEXZ2UNo1ihNEpMX438HfY2ejY.roa
File: 1TEXZ2UNo1ihNEpMX438HfY2ejY.roa (raw, json)
Hash identifier: amCc8BkgVf+BPy6gME9ODIlFe0IXC43fTqpoPwnMn8k=
Subject key identifier: D5:31:17:67:65:0D:A3:58:A1:34:4A:4C:5F:8D:FC:1D:F6:36:7A:36
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A124BC31BB9626AF2A868A29738EF8B471
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1TEXZ2UNo1ihNEpMX438HfY2ejY.roa
Signing time: Sat 10 Oct 2026 07:34:35 +0000
ROA not before: Sat 10 Oct 2026 07:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 193.26.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 16:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:bc:31:bb:96:26:af:2a:86:8a:29:73:8e:f8:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 10 07:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5311767650da358a1344a4c5f8dfc1df6367a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:3d:2d:7f:09:db:bc:e0:21:ab:d4:84:2b:
ba:00:2f:ed:08:ed:78:28:30:3e:da:a7:1d:0e:92:
e5:90:33:69:ed:47:d2:dd:60:ab:ba:7b:13:d5:56:
1d:67:e9:5d:9f:08:3d:93:77:79:1f:61:09:bb:6b:
23:96:c2:3e:14:b6:b8:b4:40:fc:42:fa:cf:cd:bd:
25:bd:e6:bb:87:f6:ee:2c:3e:32:c9:e6:3b:f9:38:
25:3c:79:05:92:d9:2f:80:47:d1:5b:3f:2d:4f:85:
c6:19:bf:0a:b8:c5:91:37:3f:d5:16:07:8a:c6:3e:
1e:e1:12:7b:74:02:f1:a9:6c:6e:5c:02:58:28:99:
a2:44:3a:bb:b4:56:cb:fe:88:7e:2c:82:77:05:a4:
13:9d:74:50:a8:89:9b:d4:74:0d:5e:83:9c:dd:c0:
9b:39:8f:c9:2c:ac:86:01:6a:ea:5f:52:30:81:6d:
d8:83:70:04:14:79:2a:f9:ce:aa:f1:db:57:86:99:
96:df:a0:27:26:1d:11:7a:bd:e8:f0:49:49:b8:b3:
77:cf:ac:84:c0:16:68:89:9c:59:5c:c4:cc:c4:46:
c7:38:b4:ca:cc:58:77:40:e3:e4:c5:a4:da:c8:49:
0a:43:27:9f:06:e4:fd:1b:5d:e3:85:4b:04:c4:40:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:31:17:67:65:0D:A3:58:A1:34:4A:4C:5F:8D:FC:1D:F6:36:7A:36
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1TEXZ2UNo1ihNEpMX438HfY2ejY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:70:f7:e5:55:51:28:e0:9d:df:7a:6b:78:8b:61:3d:e8:67:
5b:c8:55:25:06:59:71:e9:0f:26:34:5e:08:86:3e:a4:aa:fb:
69:3b:b9:57:ed:c9:7b:7b:c0:a2:c3:e4:22:09:5c:bd:a2:27:
10:52:a1:93:d1:5a:85:69:f6:f9:7e:2c:13:e2:5e:a3:ad:dd:
88:d2:1e:15:57:7f:9c:fa:c8:99:78:3e:46:90:a3:8c:83:a2:
90:ad:f2:b3:6d:9a:e4:31:33:7b:61:30:36:4c:d1:d9:a0:4e:
a4:5f:3a:58:43:65:d2:1f:5b:5d:4b:16:e3:0b:4c:df:67:93:
8d:91:11:9f:7a:8c:be:b2:ec:c9:f8:26:2f:98:24:f5:07:69:
ed:c4:f6:e1:49:83:9b:a9:70:13:4f:e1:de:eb:2d:06:b5:a4:
8b:8a:58:0d:26:af:76:af:cb:44:83:8e:b0:37:fe:27:4c:a9:
aa:46:ff:03:6b:ee:f6:8f:8f:ff:ab:9a:26:4c:4c:11:ea:eb:
eb:4a:54:21:a5:72:ff:e7:5a:72:69:34:7d:69:f5:4c:17:ce:
c7:e7:c7:21:ea:9d:ad:2a:72:cf:85:0d:c7:93:90:f8:a0:3a:
2e:1b:8f:74:e5:ec:7d:1d:55:bf:1a:65:86:f0:dd:13:5f:62:
60:92:96:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEkvDG7liavKoaKKXOO+LRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYxMDEwMDczNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTMxMTc2NzY1MGRhMzU4YTEzNDRhNGM1ZjhkZmMxZGY2MzY3YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0k9LX8J27zgIavUhCu6AC/tCO14
KDA+2qcdDpLlkDNp7UfS3WCrunsT1VYdZ+ldnwg9k3d5H2EJu2sjlsI+FLa4tED8
QvrPzb0lvea7h/buLD4yyeY7+TglPHkFktkvgEfRWz8tT4XGGb8KuMWRNz/VFgeK
xj4e4RJ7dALxqWxuXAJYKJmiRDq7tFbL/oh+LIJ3BaQTnXRQqImb1HQNXoOc3cCb
OY/JLKyGAWrqX1IwgW3Yg3AEFHkq+c6q8dtXhpmW36AnJh0Rer3o8ElJuLN3z6yE
wBZoiZxZXMTMxEbHOLTKzFh3QOPkxaTayEkKQyefBuT9G13jhUsExECt5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUxF2dlDaNYoTRKTF+N/B32Nno2MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMVRFWFoyVU5vMWloTkVwTVg0MzhIZlkyZWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRpzMA0G
CSqGSIb3DQEBCwUAA4IBAQAbcPflVVEo4J3femt4i2E96GdbyFUlBllx6Q8mNF4I
hj6kqvtpO7lX7cl7e8Ciw+QiCVy9oicQUqGT0VqFafb5fiwT4l6jrd2I0h4VV3+c
+siZeD5GkKOMg6KQrfKzbZrkMTN7YTA2TNHZoE6kXzpYQ2XSH1tdSxbjC0zfZ5ON
kRGfeoy+suzJ+CYvmCT1B2ntxPbhSYObqXATT+He6y0GtaSLilgNJq92r8tEg46w
N/4nTKmqRv8Da+72j4//q5omTEwR6uvrSlQhpXL/51pyaTR9afVMF87H58ch6p2t
KnLPhQ3Hk5D4oDouG4905ex9HVW/GmWG8N0TX2Jgkpaz
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:27 2026 by rpki-client