Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4arxgqgAu4tINbVaub3-unlNXYQ.roa
File: 4arxgqgAu4tINbVaub3-unlNXYQ.roa (raw, json)
Hash identifier: 9lCvsvDmz8wFltDP4V1tkAWj6xA4oW/+mKRT+qOUf0A=
Subject key identifier: E1:AA:F1:82:A8:00:BB:8B:48:35:B5:5A:B9:BD:FE:BA:79:4D:5D:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F227C11C6A44072A2D37ECBB49F671D81
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4arxgqgAu4tINbVaub3-unlNXYQ.roa
Signing time: Thu 02 Jul 2026 10:59:44 +0000
ROA not before: Thu 02 Jul 2026 10:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 185.72.11.0/24 maxlen: 24
194.87.85.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7c:11:c6:a4:40:72:a2:d3:7e:cb:b4:9f:67:1d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 2 10:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1aaf182a800bb8b4835b55ab9bdfeba794d5d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:06:6a:c4:de:42:a5:91:0e:e4:07:3c:a5:
dc:1f:aa:f8:a6:31:af:5e:3c:b4:e2:51:10:8f:1d:
18:ad:68:53:76:c5:dc:03:8a:19:74:6d:4f:b8:b9:
4e:4b:55:99:82:e7:a0:4c:5d:c8:e1:43:8f:cd:b8:
c7:84:4b:0c:50:ee:6f:e5:fd:3f:b8:d3:00:1b:ed:
00:51:f7:2b:90:3b:99:7d:49:7a:b0:a1:c6:15:95:
c1:d2:36:6a:4a:2c:bc:f7:c3:1e:1a:86:85:92:35:
67:5d:c7:6a:a6:c5:57:98:9a:39:44:34:ad:ef:f0:
af:5d:84:0a:99:96:ec:85:5b:6b:2c:3f:63:50:a3:
d7:b0:1b:d4:56:1a:13:da:d6:38:a1:58:ba:86:fd:
36:49:6e:ba:60:67:d7:9a:c8:a0:da:91:da:d7:64:
f2:ba:18:00:62:6f:d5:5e:72:9e:35:a2:58:17:87:
6d:c9:9e:a4:9b:78:11:9c:d4:e0:af:49:10:8e:55:
bb:46:43:14:12:4f:bd:07:51:77:98:23:67:e8:e8:
9d:5f:76:29:cc:fe:6d:f0:83:cf:d0:b9:59:d8:14:
6d:d7:e6:f2:af:41:26:82:c4:34:c3:33:60:11:ca:
d0:ce:51:05:74:e7:12:94:c4:b7:33:be:6b:ff:69:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:F1:82:A8:00:BB:8B:48:35:B5:5A:B9:BD:FE:BA:79:4D:5D:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4arxgqgAu4tINbVaub3-unlNXYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.11.0/24
194.87.85.0/24
195.133.18.0/24
Signature Algorithm: sha256WithRSAEncryption
53:49:d0:98:09:37:b3:1c:bc:35:29:4e:5c:2c:33:3f:6a:fe:
c5:86:12:91:be:bb:ee:26:35:42:17:5e:d7:39:b9:81:ce:dc:
a5:b2:8b:41:af:25:67:4c:6e:ae:b5:5e:f3:75:36:85:52:7a:
08:93:94:58:ed:37:12:d1:06:65:85:c6:da:19:0c:e2:cc:5a:
15:8a:1d:dc:3b:2d:89:d9:95:2b:4d:d1:c4:fa:45:ed:a3:40:
26:1a:98:50:69:5a:7c:1c:8f:e6:8e:c1:f9:b1:43:95:dd:b6:
c1:a3:4f:f8:ee:26:b0:e6:6d:2a:3f:5d:dd:65:9e:26:2e:af:
8a:90:4a:96:22:d5:b9:a9:c2:7e:65:d3:40:dd:c0:c4:c8:85:
15:9e:da:af:1c:eb:5d:45:1d:5a:3d:ab:e9:aa:8c:e3:34:55:
30:aa:19:3d:72:97:07:e1:db:d9:7f:6e:93:1b:df:30:cd:2e:
8b:89:38:7f:49:f4:7a:b9:00:89:f8:19:48:9f:ff:a8:3b:1b:
3a:fc:d3:15:f7:24:52:6e:61:b0:97:92:81:10:7c:06:7d:e8:
69:03:e1:55:88:63:54:c8:72:3a:bb:32:18:91:ee:1e:a9:c6:
5a:29:29:66:fb:86:74:90:47:0a:07:09:54:03:c5:6a:dd:ea:
df:cb:13:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 12:30:54 2026 by rpki-client