Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bCtDPKHdmLQBMhmmVJ2Nh-fNLQc.roa
File: bCtDPKHdmLQBMhmmVJ2Nh-fNLQc.roa (raw, json)
Hash identifier: EQqnxWNrXXPLeRRDI28M376PnWBJCxHIHHNaH/j/Ox0=
Subject key identifier: 6C:2B:43:3C:A1:DD:98:B4:01:32:19:A6:54:9D:8D:87:E7:CD:2D:07
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FA91CA5E68DAB125469FE21E4B86C200C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bCtDPKHdmLQBMhmmVJ2Nh-fNLQc.roa
Signing time: Tue 28 Jul 2026 14:24:14 +0000
ROA not before: Tue 28 Jul 2026 14:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 194.58.222.0/24 maxlen: 24
194.87.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:1c:a5:e6:8d:ab:12:54:69:fe:21:e4:b8:6c:20:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 28 14:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2b433ca1dd98b4013219a6549d8d87e7cd2d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:ea:4a:29:18:c6:73:56:69:b6:d8:3a:5b:
6c:59:3e:fc:83:45:a4:dd:81:8b:71:47:85:32:44:
8f:94:38:3e:b0:ca:d9:00:f1:3a:9e:af:95:22:0b:
f7:8b:4f:cd:62:ba:97:39:44:ad:6b:20:b6:66:af:
f8:d4:2a:fd:79:0d:e1:e2:c2:4b:ff:10:dd:a9:f4:
ca:bc:9f:3a:bc:08:90:80:f0:16:62:51:35:37:1b:
e9:89:37:89:60:04:72:13:54:16:1c:3c:33:14:42:
08:da:de:7e:68:0a:3f:24:5e:da:1f:44:b4:f5:c8:
81:73:b4:23:e9:ea:b6:41:16:e2:77:4c:45:bd:2a:
7e:af:62:08:cf:81:02:ee:0e:ae:b5:f5:3a:2a:ff:
61:63:36:ab:f1:2a:91:93:ac:f4:82:9b:8f:52:20:
d0:30:00:ce:a0:bc:ce:26:81:01:b1:b0:86:03:dd:
79:60:b9:5b:33:43:07:f7:47:01:00:83:cf:72:86:
84:9e:2c:f6:36:4d:c0:b3:00:55:95:7a:e6:90:ea:
a0:e9:f9:3b:96:c3:0b:02:00:25:31:b1:70:48:40:
5d:81:d1:ce:8c:2e:d5:df:df:04:f2:4d:b4:3d:96:
fc:78:c0:8d:24:bb:71:24:18:2e:6f:2f:5d:b6:99:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:43:3C:A1:DD:98:B4:01:32:19:A6:54:9D:8D:87:E7:CD:2D:07
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bCtDPKHdmLQBMhmmVJ2Nh-fNLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.222.0/24
194.87.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cd:36:d1:53:c1:88:73:ea:d2:59:1c:e0:2b:ca:1f:58:e3:
05:67:bb:19:81:2c:7c:48:c1:ec:d4:c0:71:c2:b5:ee:79:7b:
ea:cd:b0:28:21:6d:bb:12:f2:03:8a:d6:d3:e6:99:d1:a9:34:
4f:56:e5:40:b9:35:ee:b1:ed:60:12:65:e7:0a:bd:f5:5c:56:
00:5a:ca:5a:f5:ea:5c:fc:1c:91:79:57:fd:41:0b:22:4a:47:
23:38:e4:94:46:db:9a:6b:d2:e3:ce:f7:7e:78:4a:2a:2e:8e:
04:26:48:3c:16:b4:b0:6b:e6:5d:30:c2:e7:ff:73:85:ac:f5:
fc:98:dc:81:c8:3b:d0:c6:7d:79:79:22:24:d7:01:5c:4b:10:
d5:1c:af:fd:64:4a:80:89:b3:5a:90:bd:50:2b:f6:99:9e:62:
f2:67:e6:22:0c:82:79:4b:2e:e2:95:07:cf:5d:20:e5:88:2c:
88:e1:cb:e7:00:76:5e:11:6c:df:49:ea:28:6a:66:d1:31:2d:
db:da:88:51:bd:e5:39:50:f7:07:95:cf:cb:2c:20:b8:ab:1f:
d8:3f:9e:b8:43:7b:f6:92:f9:aa:18:56:29:29:7c:e2:d0:87:
fd:d8:06:63:62:c9:d6:a9:c9:44:dc:d8:ab:85:be:e0:e4:45:
b7:eb:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:01 2026 by rpki-client