Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_1dqBTAL8c8gWsWMMh1lpNSy7kI.roa
File: _1dqBTAL8c8gWsWMMh1lpNSy7kI.roa (raw, json)
Hash identifier: PJAacs7pmclxsYTHlVvelBXI0ZVIyv31kXrvH7L4e9o=
Subject key identifier: FF:57:6A:05:30:0B:F1:CF:20:5A:C5:8C:32:1D:65:A4:D4:B2:EE:42
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0F90F0EC6528935748468AD63FD842BD3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_1dqBTAL8c8gWsWMMh1lpNSy7kI.roa
Signing time: Thu 01 Oct 2026 20:01:48 +0000
ROA not before: Thu 01 Oct 2026 20:01:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210993
IP address blocks: 192.124.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0f:0e:c6:52:89:35:74:84:68:ad:63:fd:84:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 1 20:01:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff576a05300bf1cf205ac58c321d65a4d4b2ee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d3:3d:b5:dd:ec:30:c7:b0:eb:17:10:c0:e4:
66:3e:52:66:e5:af:ce:e2:e2:ae:f1:fc:1f:34:46:
70:60:bc:37:93:8c:10:77:08:07:f6:9b:05:ba:df:
27:41:85:5e:00:0e:4f:30:ae:e7:76:3b:90:0f:0f:
fe:b1:29:fc:92:95:80:02:d0:38:1e:47:3b:fd:11:
d3:65:35:9a:63:aa:3c:b5:73:99:91:fa:28:ba:83:
4c:29:64:f8:be:8c:96:8b:35:e5:67:e7:f2:62:a1:
73:af:39:d8:77:3a:65:c1:e0:b3:23:34:bc:d6:12:
57:93:02:fb:82:47:a2:5f:06:44:80:a5:c8:8b:76:
fd:19:7f:96:30:70:78:f5:7d:64:d6:ea:a5:3e:8f:
84:0e:34:93:cb:f1:ca:99:6e:3e:85:51:26:1e:d9:
74:d7:9e:e2:8c:d2:08:84:20:74:21:77:0a:38:1d:
f3:32:01:04:c8:e5:92:b3:fb:52:c2:03:c8:63:57:
53:73:d7:ec:bf:3f:64:75:21:8f:ce:9a:2d:a4:33:
99:ce:8c:33:ba:4b:ba:fb:c2:b8:1a:6e:8f:73:82:
85:02:d2:f6:f7:70:6f:c0:d2:a1:3f:fb:ad:ca:63:
a4:a9:bf:02:0f:ab:83:53:fc:af:48:62:ba:73:81:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:57:6A:05:30:0B:F1:CF:20:5A:C5:8C:32:1D:65:A4:D4:B2:EE:42
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_1dqBTAL8c8gWsWMMh1lpNSy7kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.189.0/24
Signature Algorithm: sha256WithRSAEncryption
94:52:f0:4e:43:1c:ab:56:76:0a:5d:55:51:83:8a:7f:b5:75:
4b:aa:e2:68:30:1b:11:d6:95:f4:de:ab:67:3f:3f:2a:7c:b1:
7d:d1:9c:99:63:27:8f:ce:0f:ce:96:c2:1a:57:a3:5d:11:56:
40:9b:79:d4:db:24:62:60:94:57:bc:6b:db:16:91:27:15:e5:
ed:15:9c:53:aa:71:6b:c7:48:b1:c4:53:22:04:0b:90:2e:8c:
62:d6:69:b5:0c:e2:34:79:ab:b5:9e:7a:c0:93:81:13:b4:7e:
29:74:12:2e:62:08:47:8a:34:8a:7b:09:33:c2:f4:a7:b1:79:
7f:53:ab:0d:3d:59:19:70:53:1b:a1:2c:5d:4e:79:45:2d:03:
70:1c:04:c8:2a:47:5f:2d:84:49:53:f1:80:d5:f0:36:ce:ba:
8c:e5:1d:0c:d9:0d:3e:f1:99:b4:a9:64:d4:8e:42:0b:0d:9a:
93:54:e9:49:4b:04:eb:d1:cb:8e:02:e9:32:b1:74:be:6c:f2:
bd:50:d5:d5:a5:2f:44:db:98:3a:d3:cf:fd:23:45:7e:ca:0f:
52:e1:e6:3a:35:6a:51:4d:4e:fd:8e:6d:05:7d:74:7a:1d:8e:
29:14:30:5a:b0:a2:94:09:9b:bc:46:89:7f:e0:9a:50:51:46:
c9:81:71:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD5Dw7GUok1dIRorWP9hCvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYxMDAxMjAwMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjU3NmEwNTMwMGJmMWNmMjA1YWM1OGMzMjFkNjVhNGQ0YjJlZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dM9td3sMMew6xcQwORmPlJm5a/O
4uKu8fwfNEZwYLw3k4wQdwgH9psFut8nQYVeAA5PMK7ndjuQDw/+sSn8kpWAAtA4
Hkc7/RHTZTWaY6o8tXOZkfoouoNMKWT4voyWizXlZ+fyYqFzrznYdzplweCzIzS8
1hJXkwL7gkeiXwZEgKXIi3b9GX+WMHB49X1k1uqlPo+EDjSTy/HKmW4+hVEmHtl0
157ijNIIhCB0IXcKOB3zMgEEyOWSs/tSwgPIY1dTc9fsvz9kdSGPzpotpDOZzowz
uku6+8K4Gm6Pc4KFAtL293BvwNKhP/utymOkqb8CD6uDU/yvSGK6c4EVAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9XagUwC/HPIFrFjDIdZaTUsu5CMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvXzFkcUJUQUw4YzhnV3NXTU1oMWxwTlN5N2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHy9MA0G
CSqGSIb3DQEBCwUAA4IBAQCUUvBOQxyrVnYKXVVRg4p/tXVLquJoMBsR1pX03qtn
Pz8qfLF90ZyZYyePzg/OlsIaV6NdEVZAm3nU2yRiYJRXvGvbFpEnFeXtFZxTqnFr
x0ixxFMiBAuQLoxi1mm1DOI0eau1nnrAk4ETtH4pdBIuYghHijSKewkzwvSnsXl/
U6sNPVkZcFMboSxdTnlFLQNwHATIKkdfLYRJU/GA1fA2zrqM5R0M2Q0+8Zm0qWTU
jkILDZqTVOlJSwTr0cuOAukysXS+bPK9UNXVpS9E25g608/9I0V+yg9S4eY6NWpR
TU79jm0FfXR6HY4pFDBasKKUCZu8Rol/4JpQUUbJgXEv
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:58 2026 by rpki-client