Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BAniJ7hKpG7lbiq0I3RS4vqWhj4.roa
File: BAniJ7hKpG7lbiq0I3RS4vqWhj4.roa (raw, json)
Hash identifier: j1OsWYwmEsosvo0cNl9S6WOd69u9DXU8EksF39axoMI=
Subject key identifier: 04:09:E2:27:B8:4A:A4:6E:E5:6E:2A:B4:23:74:52:E2:FA:96:86:3E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FCD3B3165204AB67485C4AC4319A3614F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BAniJ7hKpG7lbiq0I3RS4vqWhj4.roa
Signing time: Tue 04 Aug 2026 14:43:56 +0000
ROA not before: Tue 04 Aug 2026 14:43:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 62.76.224.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:3b:31:65:20:4a:b6:74:85:c4:ac:43:19:a3:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 4 14:43:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0409e227b84aa46ee56e2ab4237452e2fa96863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:26:1c:51:e0:46:95:c8:2f:2b:50:04:b6:
02:09:7f:f9:55:a2:a9:7f:f7:97:7c:3c:4a:5e:a4:
5e:a8:c0:34:63:44:ae:10:1c:8a:a6:1e:44:11:a8:
ef:ec:2f:e0:b7:4d:ff:2f:b9:56:c8:0a:5a:83:78:
20:16:73:dc:77:30:0b:86:2e:aa:e1:ac:02:63:76:
00:82:66:a9:69:df:15:bb:42:4d:0f:f2:b6:4d:c8:
be:9a:0f:bf:e7:9e:bc:78:ce:59:2b:2a:d5:89:89:
2f:87:d6:7f:5e:d5:1a:3f:90:2b:ad:13:7a:51:9a:
cd:83:ac:44:fa:85:b0:b4:b0:ec:92:7b:f9:15:ff:
ad:f2:0e:18:4d:af:a5:0a:0f:a0:b8:3e:d6:04:ab:
e8:e8:1a:0e:73:7c:ce:72:69:77:37:2f:df:f7:9b:
52:34:9e:f4:46:e1:8d:dd:4d:54:7b:c7:2c:e8:95:
ba:b0:88:b6:e3:48:9a:d4:d2:45:d7:ff:d3:63:9e:
7d:ea:62:1c:27:b0:af:81:04:a1:03:d4:95:61:33:
20:c2:50:93:15:d9:1a:41:2f:78:a2:c6:01:eb:4e:
d0:b1:10:0d:2e:f9:b5:55:98:3d:50:c0:49:a7:db:
40:5a:7f:7e:2c:d2:5d:99:9f:82:77:47:14:ad:30:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:E2:27:B8:4A:A4:6E:E5:6E:2A:B4:23:74:52:E2:FA:96:86:3E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BAniJ7hKpG7lbiq0I3RS4vqWhj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
192.124.188.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
194.87.66.0/23
194.87.75.0/24
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.87.229.0/24
194.135.32.0/24
195.58.60.0/24
195.133.43.0/24
195.133.95.0/24
212.192.244.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
91:40:c0:e8:6d:fb:74:0b:a6:b3:c1:de:13:de:c8:73:af:cb:
55:58:3f:eb:f8:cd:4a:99:b7:a5:9e:07:76:e4:f4:0e:4c:d6:
f6:7c:69:11:87:e0:ea:47:5a:c4:36:84:57:21:f5:14:7b:95:
de:ed:01:64:77:27:71:66:da:d4:4b:99:c6:64:48:22:35:65:
61:26:49:5e:76:d4:af:32:07:9c:9c:d8:2b:fe:0a:3b:28:f2:
a2:bc:e6:0c:8c:e7:f7:c4:4c:d3:94:8c:c8:82:92:32:58:12:
25:ca:3f:78:1e:fb:d3:67:a1:03:59:e0:d9:90:44:9c:b6:0d:
52:5a:33:ad:e6:ab:15:7d:a6:cd:9a:27:66:4b:bc:dd:8f:21:
3c:51:d6:34:10:55:39:41:b9:5d:7a:db:0f:8c:67:b7:b3:66:
4d:af:d4:b3:69:38:65:77:ca:10:42:8a:69:e0:be:75:00:61:
68:9e:46:36:ac:01:5a:4d:0b:f9:21:87:b8:35:ed:bc:2f:71:
91:ab:22:fa:42:3b:4b:a2:c8:9f:38:64:20:dd:7e:b3:94:af:
3c:76:d0:fc:e7:ab:6e:46:a5:1e:97:2d:09:cb:73:3c:11:44:
79:9a:7f:02:dc:9c:06:36:61:d5:23:f3:64:15:03:9a:dd:2b:
45:92:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:03 2026 by rpki-client