Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NRuhFlghTUnuLMp_Mx5tIA1wjTM.roa
File: NRuhFlghTUnuLMp_Mx5tIA1wjTM.roa (raw, json)
Hash identifier: ZI/1vRl/fxX+sxerD2V6O1HRNDyyuycWlSzsJ6Ngmkc=
Subject key identifier: 35:1B:A1:16:58:21:4D:49:EE:2C:CA:7F:33:1E:6D:20:0D:70:8D:33
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F4345A06159BC51098D7747F0E442173C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NRuhFlghTUnuLMp_Mx5tIA1wjTM.roa
Signing time: Wed 08 Jul 2026 19:47:44 +0000
ROA not before: Wed 08 Jul 2026 19:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 193.124.133.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:45:a0:61:59:bc:51:09:8d:77:47:f0:e4:42:17:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 8 19:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=351ba11658214d49ee2cca7f331e6d200d708d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:07:8b:2f:3a:f8:54:d7:ed:60:5d:0c:08:
20:1c:c4:58:aa:88:e0:c1:8f:d1:f1:7e:20:5e:d5:
26:87:ba:cf:06:76:f6:57:4b:bd:ce:72:3a:b0:60:
03:55:5c:c4:36:49:94:43:1f:cb:6c:ee:bf:58:e5:
4a:7e:7f:60:23:ac:86:31:ed:28:e9:01:3a:63:df:
50:f6:77:c6:79:17:fd:f0:d3:65:d6:5e:77:35:44:
69:1a:58:d2:21:67:7c:13:01:5b:a7:43:1c:70:da:
2a:5e:87:ea:3f:8e:a0:95:79:45:ee:8d:36:0f:62:
76:42:c1:81:68:dc:9c:15:cd:e6:b4:52:2b:c6:e2:
86:0d:de:26:2e:5e:e0:aa:4b:42:64:68:5a:3f:f0:
f0:2a:8d:9e:9f:b3:e6:42:a3:91:f8:f1:67:d5:47:
75:3e:8d:2f:b0:86:00:81:79:1f:4e:10:9f:dd:db:
e3:5c:0f:85:ad:38:f5:b8:83:b9:14:4c:07:b4:81:
ea:10:fd:a9:5a:0c:78:35:65:c0:e6:26:a5:1b:3f:
ba:f5:b5:b3:59:4d:37:40:be:ac:02:69:4a:95:d4:
0b:7b:3e:10:27:35:13:0b:94:06:7e:37:dc:67:24:
26:09:6f:db:b1:2e:b9:94:ef:37:b6:d9:dd:c8:32:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:A1:16:58:21:4D:49:EE:2C:CA:7F:33:1E:6D:20:0D:70:8D:33
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NRuhFlghTUnuLMp_Mx5tIA1wjTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.133.0/24
194.87.42.0/24
Signature Algorithm: sha256WithRSAEncryption
98:47:e9:d2:1a:da:99:fa:70:aa:76:42:d4:19:df:66:bc:7e:
44:b1:0f:a2:c5:3a:76:3b:3e:44:a1:f6:8f:cb:be:0c:af:2e:
90:ae:d3:16:06:2f:a7:57:5f:2b:42:95:73:81:d1:62:c9:86:
c0:6b:4e:d8:22:79:37:4f:52:66:de:9f:8b:78:9d:df:dd:71:
d8:0c:71:c6:42:2f:6c:d5:11:28:d1:7b:2f:83:ab:d8:2c:22:
28:bc:fd:6a:63:68:40:f1:68:02:55:92:b7:6e:d5:50:d1:d4:
75:b4:5d:12:b7:7c:7d:73:65:4a:10:a8:93:3b:9b:4c:e4:04:
ba:a9:f7:8b:05:05:0f:a8:e9:c8:a3:9b:d2:85:df:2c:46:e3:
ce:7a:af:f5:43:83:1a:5f:b2:f9:e6:74:13:be:35:e5:c9:f2:
07:d9:d7:11:55:73:4e:ad:94:a3:93:1a:7b:d7:e2:04:84:ae:
e2:63:97:e4:fb:2b:fb:b7:be:b2:b1:70:dd:89:11:2e:7c:47:
ad:54:a3:65:e4:09:3f:8c:2f:95:5c:b6:48:fa:45:67:6d:74:
07:be:c7:2f:a6:68:bc:9d:80:6d:56:fb:23:29:dc:ef:b4:a7:
a9:d2:68:2e:6b:dc:bd:c9:8c:10:e1:5c:a9:cb:6c:b8:fc:80:
32:38:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:19 2026 by rpki-client