Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G1br15Hv7EBiSiejOcq4X2Mx4is.roa
File: G1br15Hv7EBiSiejOcq4X2Mx4is.roa (raw, json)
Hash identifier: GRnL+VgZ3qKGAfOOPM3QN52mpx3+pibjNafRIPi15fM=
Subject key identifier: 1B:56:EB:D7:91:EF:EC:40:62:4A:27:A3:39:CA:B8:5F:63:31:E2:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E917A964B6A84FD0068497A45D000DE05
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G1br15Hv7EBiSiejOcq4X2Mx4is.roa
Signing time: Thu 04 Jun 2026 07:13:10 +0000
ROA not before: Thu 04 Jun 2026 07:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 192.124.188.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:7a:96:4b:6a:84:fd:00:68:49:7a:45:d0:00:de:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 4 07:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b56ebd791efec40624a27a339cab85f6331e22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d7:db:11:66:00:cb:b1:10:bb:e2:ea:7d:4e:
fd:5e:f9:07:4d:26:c3:68:dc:20:e4:4c:e7:51:95:
46:8a:ee:dc:49:ca:6c:f3:a6:5d:80:0d:d2:66:4a:
d5:7c:2d:90:53:b6:e3:d9:4b:f0:1c:da:92:ba:2b:
79:07:80:c5:6f:fd:33:0b:22:ac:6d:2f:bd:99:03:
02:9b:dc:ef:66:ad:2d:2a:b2:83:78:92:18:b4:15:
03:34:c3:8d:6a:7c:35:ac:82:9f:f3:84:13:52:69:
94:de:ad:da:59:15:01:8f:88:7f:31:fe:a6:a5:ab:
38:ca:cf:5e:9f:2f:de:94:ce:00:b7:09:6a:67:32:
84:44:af:f4:4b:ca:c3:90:c3:47:65:9b:37:32:42:
db:d2:e7:a0:9c:ce:fe:ed:d9:7b:4e:4a:34:fe:c4:
bd:eb:f2:4d:97:c8:23:a4:cf:38:c5:84:45:78:b2:
f8:83:73:00:44:6e:bd:f5:df:2c:f4:ba:9c:6d:6c:
53:68:44:5c:f9:6a:74:7a:3c:b4:eb:8a:5c:fe:49:
a7:ca:bb:3d:0c:fe:0a:f6:a6:41:3e:9d:2b:83:32:
c4:9e:1a:c0:36:e0:02:0a:31:dd:a1:a0:d9:e1:7a:
86:90:b9:53:d4:ef:70:2f:b2:a1:3c:e3:ea:46:cb:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:56:EB:D7:91:EF:EC:40:62:4A:27:A3:39:CA:B8:5F:63:31:E2:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G1br15Hv7EBiSiejOcq4X2Mx4is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
194.87.90.0/24
195.133.56.0/24
195.133.60.0/23
Signature Algorithm: sha256WithRSAEncryption
93:23:aa:59:c0:12:36:93:51:77:32:95:9e:57:f7:2b:77:c8:
03:5d:e8:86:fc:1f:3c:79:3b:74:36:bc:90:d0:2d:79:a4:90:
22:b2:da:50:3e:23:0e:ec:5e:d9:b0:e4:c4:8a:73:a9:90:34:
09:7b:61:e0:57:d2:aa:39:77:e2:93:9b:8d:a9:0f:36:74:f0:
d3:82:ff:a1:ef:0f:78:38:b5:c0:18:32:75:ab:1b:eb:e9:dc:
0a:a0:90:d7:de:45:41:1c:09:60:68:0c:b8:b2:1a:2b:d6:03:
ff:cc:07:0b:e3:91:f8:ad:e0:bf:b1:5b:02:a6:8a:3f:89:52:
41:f9:97:93:fa:37:eb:2e:58:20:76:23:cb:be:4b:33:eb:df:
0a:db:a8:7f:44:ef:65:5e:b2:57:40:6b:f3:6b:a7:1a:35:42:
06:21:7c:e9:95:3e:39:e5:a6:53:76:b0:05:aa:b0:2b:8e:d5:
88:11:66:aa:e1:9f:ca:2f:a4:74:d1:1c:d0:34:6d:f5:46:68:
ab:12:ba:19:e0:1d:80:5a:6f:ed:24:e9:68:a5:2a:f3:d8:ed:
2d:24:d8:58:1c:f9:bc:4b:9f:b3:93:53:b2:c0:ce:ed:7c:d7:
7e:b9:70:ef:7d:19:8a:72:d7:81:84:6c:2e:14:eb:1c:6f:2a:
a6:3e:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:38 2026 by rpki-client