Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R2lXHYR2HtKEax8jAlI-VMuPIKs.roa
File: R2lXHYR2HtKEax8jAlI-VMuPIKs.roa (raw, json)
Hash identifier: CBoklwPKfL1eX3l9qvh0PwXyn4V5pJ4bQQeB5wko3QY=
Subject key identifier: 47:69:57:1D:84:76:1E:D2:84:6B:1F:23:02:52:3E:54:CB:8F:20:AB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A06C29E7CF0895517141A52E8B6D033FCA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R2lXHYR2HtKEax8jAlI-VMuPIKs.roa
Signing time: Fri 04 Sep 2026 11:24:40 +0000
ROA not before: Fri 04 Sep 2026 11:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 194.87.29.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:29:e7:cf:08:95:51:71:41:a5:2e:8b:6d:03:3f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 11:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4769571d84761ed2846b1f2302523e54cb8f20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:42:2b:82:40:c9:04:a2:da:f0:be:39:66:
9c:52:83:ee:f8:f5:2e:cc:52:dc:1b:78:59:a1:f9:
00:9a:a3:0c:1f:6a:38:54:97:90:65:3f:f2:ca:c4:
c6:e0:78:fa:6f:ec:18:96:af:21:85:74:11:35:8d:
d2:2f:c5:88:b7:03:96:e5:72:2a:ee:49:74:90:b6:
fd:54:e6:23:26:3f:5e:0f:33:96:4d:85:66:1c:97:
fc:df:59:a6:3d:e6:87:b6:4c:49:80:b4:ad:20:90:
16:41:31:c5:a4:45:92:55:79:b2:27:95:ac:6f:00:
af:61:e5:4c:e9:d5:70:32:13:a3:f3:08:47:26:61:
7e:2b:70:02:b6:04:67:35:cd:a3:0f:70:66:70:14:
ed:f8:64:1f:55:4b:ad:08:a7:6d:9d:d9:0a:8d:eb:
d8:d1:78:89:b0:0f:53:61:fd:d4:e9:8e:60:85:97:
61:77:77:32:54:ab:e4:43:20:bb:c7:4f:03:26:3d:
ba:a1:c9:d9:29:40:90:d8:30:1f:21:fb:22:ac:0f:
f3:a0:87:a5:dc:e3:55:88:66:26:40:d9:3c:af:45:
67:94:cc:03:30:c3:1f:ac:cb:68:2f:e0:1c:80:6c:
58:ea:12:06:e1:94:c0:50:a5:13:4c:2b:f2:37:87:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:57:1D:84:76:1E:D2:84:6B:1F:23:02:52:3E:54:CB:8F:20:AB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R2lXHYR2HtKEax8jAlI-VMuPIKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.29.0/24
194.87.77.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3c:60:c3:39:d9:38:30:31:d4:63:eb:b0:76:bf:46:8a:58:
27:7a:0c:24:b1:f6:19:94:d6:3a:56:10:5f:71:f4:9a:2d:df:
f3:1e:1b:ca:18:a3:52:4c:37:37:22:93:43:fd:8b:df:1a:3f:
10:ff:4a:83:71:77:f9:4d:18:be:b3:8a:02:49:dc:10:bd:64:
4a:3b:94:35:a2:a3:11:38:c0:cb:10:f5:21:f1:5a:e0:56:77:
c6:cb:da:61:79:91:62:95:02:19:f9:23:23:59:c6:96:9c:1a:
fa:0c:1c:4e:7e:f6:08:4a:13:f2:5b:3b:7c:5d:48:eb:57:79:
7a:1c:7c:de:25:2d:c7:38:47:7a:5c:10:36:c1:19:3b:64:dd:
2c:f5:5d:46:51:b6:75:e8:72:fd:a6:77:75:92:fb:f0:55:d5:
e0:95:16:41:35:73:a4:ec:3a:e0:91:73:f6:64:f5:fe:63:b2:
3c:de:a5:5b:35:23:8f:1a:70:7f:15:dd:e4:9a:69:2d:56:aa:
bd:b5:2f:4c:ad:41:98:ac:2b:5b:c2:1d:d6:2b:d2:d6:c3:37:
33:9f:2d:94:ec:89:76:56:52:dd:06:56:29:36:af:5f:c3:96:
66:46:00:0d:be:8b:a2:98:ce:c4:45:32:83:a5:a2:23:1d:f5:
cf:cb:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:00 2026 by rpki-client