Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0Y7NAlyTu_zKPtd6Gre1snATDww.roa
File: 0Y7NAlyTu_zKPtd6Gre1snATDww.roa (raw, json)
Hash identifier: ilLXLivwVN8szo0wwqby53y0ktTrh8rSwfyZu4YhS4s=
Subject key identifier: D1:8E:CD:02:5C:93:BB:FC:CA:3E:D7:7A:1A:B7:B5:B2:70:13:0F:0C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A01315C2DD9DB2F61137842D6027AE9F8C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0Y7NAlyTu_zKPtd6Gre1snATDww.roa
Signing time: Tue 18 Aug 2026 04:16:28 +0000
ROA not before: Tue 18 Aug 2026 04:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 194.87.153.0/24 maxlen: 24
195.58.57.0/24 maxlen: 24
212.193.16.0/24 maxlen: 24
212.193.17.0/24 maxlen: 24
212.193.19.0/24 maxlen: 24
212.193.21.0/24 maxlen: 24
212.193.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:15:c2:dd:9d:b2:f6:11:37:84:2d:60:27:ae:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 18 04:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d18ecd025c93bbfcca3ed77a1ab7b5b270130f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:76:4e:9e:71:12:01:00:49:68:47:10:34:
eb:33:ac:7e:fd:59:8d:5d:e0:78:a0:69:b2:40:a5:
83:e1:c5:06:9d:08:3d:fb:4d:9e:cb:c3:cb:40:9d:
cf:d4:95:90:ba:3c:35:91:4b:61:e2:18:67:b6:f3:
5b:5c:c8:22:b2:b7:00:e8:97:88:62:51:ce:ea:70:
d6:98:33:72:d3:85:86:92:0a:a0:ef:ee:26:63:ed:
91:2f:b6:01:40:45:c6:24:62:09:74:0f:ac:37:d6:
e5:95:7a:6e:64:50:a7:d3:77:5b:57:19:03:2c:78:
cc:4b:0a:8b:df:32:d9:77:07:90:fe:4a:2c:00:f3:
06:89:66:c9:c6:bb:97:1d:0d:dd:9a:62:2a:a4:b6:
cd:54:76:94:ce:a9:8c:05:0e:3a:6d:fc:a4:17:0e:
ca:91:e5:5a:c3:fe:4b:a3:22:1f:73:da:0d:f8:c8:
1d:5a:67:6c:de:00:a7:5c:33:fb:91:87:74:ca:8c:
ce:00:c0:33:94:72:41:41:ed:08:9c:0c:91:61:da:
bc:71:51:53:da:11:1a:04:e4:18:39:c5:b1:8a:b2:
63:79:fe:ef:5d:7e:eb:0e:75:ef:a3:9c:99:61:92:
86:d1:19:ba:c4:cf:82:9a:15:9d:83:a1:99:e5:7f:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:CD:02:5C:93:BB:FC:CA:3E:D7:7A:1A:B7:B5:B2:70:13:0F:0C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0Y7NAlyTu_zKPtd6Gre1snATDww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.153.0/24
195.58.57.0/24
212.193.16.0/23
212.193.19.0/24
212.193.21.0-212.193.22.255
Signature Algorithm: sha256WithRSAEncryption
95:0c:aa:a1:6b:4b:1e:7a:df:b8:20:e4:e0:8d:3a:be:1b:9b:
e0:1b:0a:31:b4:48:3c:2d:ac:ca:69:93:dd:06:20:f2:d3:11:
3d:53:de:e1:10:63:70:c6:b8:5a:36:8e:a2:ab:5c:fe:ed:51:
6f:f6:37:f1:cd:06:82:d4:75:3c:f4:a2:99:8d:2a:e6:51:f0:
d4:c1:e3:21:5c:11:46:78:3f:59:f5:7d:fe:f7:ff:9d:14:68:
42:1b:8e:28:a3:a5:b6:a4:1a:3f:df:48:f5:1c:da:31:a5:df:
e2:c7:75:ca:8e:d3:29:59:bf:fb:0a:d9:d1:9a:a1:49:ca:34:
bc:e1:d9:67:4a:42:92:99:53:ef:7f:70:95:1b:37:8e:34:82:
97:3d:6a:2c:9e:40:82:6f:07:50:71:3b:4b:fb:dd:e5:70:1f:
f9:5e:23:36:7a:44:ce:0b:1a:15:c5:1a:71:94:76:c5:89:ae:
2c:b1:d4:33:ec:12:61:e1:67:dc:28:74:83:fd:d4:14:45:7e:
c8:b7:60:61:fd:a5:76:5d:54:4b:e9:d3:c1:ce:dd:a5:4d:87:
ab:36:87:c4:91:c4:96:ad:a8:d4:d4:d0:ac:32:a5:d3:d9:8b:
9f:ac:0e:53:1c:d7:35:ed:09:40:93:a7:71:51:98:e4:c4:f5:
41:43:85:a5
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaATFcLdnbL2ETeELWAnrp+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwODE4MDQxNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMThlY2QwMjVjOTNiYmZjY2EzZWQ3N2ExYWI3YjViMjcwMTMwZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTN2Tp5xEgEASWhHEDTrM6x+/VmN
XeB4oGmyQKWD4cUGnQg9+02ey8PLQJ3P1JWQujw1kUth4hhntvNbXMgisrcA6JeI
YlHO6nDWmDNy04WGkgqg7+4mY+2RL7YBQEXGJGIJdA+sN9bllXpuZFCn03dbVxkD
LHjMSwqL3zLZdweQ/kosAPMGiWbJxruXHQ3dmmIqpLbNVHaUzqmMBQ46bfykFw7K
keVaw/5LoyIfc9oN+MgdWmds3gCnXDP7kYd0yozOAMAzlHJBQe0InAyRYdq8cVFT
2hEaBOQYOcWxirJjef7vXX7rDnXvo5yZYZKG0Rm6xM+CmhWdg6GZ5X+FiwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNGOzQJck7v8yj7Xehq3tbJwEw8MMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMFk3TkFseVR1X3pLUHRkNkdyZTFzbkFURHd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAwleZAwQA
wzo5AwQB1MEQAwQA1METMAwDBADUwRUDBADUwRYwDQYJKoZIhvcNAQELBQADggEB
AJUMqqFrSx5637gg5OCNOr4bm+AbCjG0SDwtrMppk90GIPLTET1T3uEQY3DGuFo2
jqKrXP7tUW/2N/HNBoLUdTz0opmNKuZR8NTB4yFcEUZ4P1n1ff73/50UaEIbjiij
pbakGj/fSPUc2jGl3+LHdcqO0ylZv/sK2dGaoUnKNLzh2WdKQpKZU+9/cJUbN440
gpc9aiyeQIJvB1BxO0v73eVwH/leIzZ6RM4LGhXFGnGUdsWJriyx1DPsEmHhZ9wo
dIP91BRFfsi3YGH9pXZdVEvp08HO3aVNh6s2h8SRxJatqNTU0KwypdPZi5+sDlMc
1zXtCUCTp3FRmOTE9UFDhaU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:33 2026 by rpki-client