Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IynMXhH_hN0yVDTizdJq8DlHjMI.roa
File: IynMXhH_hN0yVDTizdJq8DlHjMI.roa (raw, json)
Hash identifier: QMU81pwWOFUSlvfrXM2by3QDRUX6K2ZNYuFudymWeto=
Subject key identifier: 23:29:CC:5E:11:FF:84:DD:32:54:34:E2:CD:D2:6A:F0:39:47:8C:C2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FE143E67A9253383CF473F497F59A49FF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IynMXhH_hN0yVDTizdJq8DlHjMI.roa
Signing time: Sat 08 Aug 2026 12:05:51 +0000
ROA not before: Sat 08 Aug 2026 12:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:43:e6:7a:92:53:38:3c:f4:73:f4:97:f5:9a:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 8 12:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2329cc5e11ff84dd325434e2cdd26af039478cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:33:ee:9a:e9:1c:54:eb:9d:47:f3:4f:9c:
12:9f:6d:38:73:51:24:d5:b6:67:6b:e3:0a:9f:dc:
da:a5:56:b6:fc:7d:5b:90:89:3e:9b:03:c2:d2:1b:
6e:41:98:f2:8f:76:4e:e0:76:9d:61:76:14:38:c3:
6d:b4:8f:48:b5:7c:61:3a:69:e8:06:eb:32:60:6b:
9a:6e:de:df:72:3a:38:fa:d2:5b:7f:06:b7:2d:b2:
f3:6b:25:84:5d:a7:c3:d8:f8:53:48:92:6e:0b:de:
f5:32:0c:de:7b:de:60:ae:d6:b1:b8:e0:fe:06:db:
a3:6c:66:1e:0a:c3:75:2c:76:ce:52:46:d2:3d:cd:
a0:34:20:fc:3f:37:01:6d:d2:8b:d9:de:3c:11:65:
40:5b:08:9d:13:5e:14:11:c8:89:9e:78:f2:1c:b1:
7b:66:f6:76:96:a5:dc:16:16:5c:7c:94:c0:82:89:
bf:eb:81:d1:ef:2a:19:2a:c9:a9:87:cd:93:af:4d:
02:b3:0e:a8:8c:41:3a:87:60:fd:b8:e6:0c:31:4f:
63:bb:89:1d:15:4e:75:50:6e:da:b2:65:fc:1b:2a:
53:cb:75:9e:3e:e9:e9:a1:ec:4c:e2:17:63:99:b5:
89:c5:55:a6:87:e9:8f:71:af:72:5c:63:bc:12:84:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:CC:5E:11:FF:84:DD:32:54:34:E2:CD:D2:6A:F0:39:47:8C:C2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IynMXhH_hN0yVDTizdJq8DlHjMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.91.0/24
194.87.12.0/24
194.87.22.0/24
194.87.40.0/24
194.87.124.0/24
194.87.142.0/24
194.87.150.0/24
195.133.6.0/24
195.133.85.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cb:a5:fd:4a:29:4f:a0:66:cf:70:e0:b6:3c:60:54:d2:1b:
ef:57:ab:4d:93:13:0d:3b:22:fd:b8:21:1f:b6:42:e0:f4:d6:
86:ed:ff:7b:fb:33:3a:e6:33:fa:a5:82:54:ce:37:82:e4:1c:
5d:c7:ce:3a:59:29:55:a9:62:81:71:56:5e:f4:7a:de:b6:9d:
f3:c8:44:60:80:c6:ae:f7:76:91:4e:f6:e2:53:f8:21:0d:b4:
ab:74:86:b0:b2:06:a8:6c:2c:28:16:49:60:97:de:36:da:ce:
82:6b:cd:0c:4d:6f:81:5d:14:fa:b4:2a:84:7b:bc:8f:77:d8:
02:44:05:24:43:e7:39:87:38:42:43:c8:50:fb:a0:56:04:71:
41:e6:a7:70:aa:e5:db:0a:22:36:67:29:b1:4d:e0:bf:4d:d1:
5e:c5:2b:a5:7c:10:80:f6:ed:15:3a:a7:da:ed:6d:6d:c5:d5:
0b:88:6a:3f:94:5a:8e:5a:65:1c:dd:20:5b:ac:e6:09:e1:1c:
61:67:61:6a:03:ee:f5:ff:4b:d9:ea:8a:c5:e9:fc:72:56:e6:
10:1c:ca:24:48:c1:87:b9:25:4e:51:14:0d:71:be:dc:20:1b:
f4:a0:c9:e1:49:4d:c7:9c:1c:c6:ef:09:94:25:bd:ba:26:2a:
6a:1f:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:04 2026 by rpki-client