Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eHudlpQrOpiijqJw_jwpxgviUJs.roa
File: eHudlpQrOpiijqJw_jwpxgviUJs.roa (raw, json)
Hash identifier: Ur/HRCwuXroojMk5zKog7pp2O9Pu5DSG11SgLnw4yVQ=
Subject key identifier: 78:7B:9D:96:94:2B:3A:98:A2:8E:A2:70:FE:3C:29:C6:0B:E2:50:9B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EA73CA762F83899FCCFA4D9AFE1AB16A1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eHudlpQrOpiijqJw_jwpxgviUJs.roa
Signing time: Mon 08 Jun 2026 12:37:10 +0000
ROA not before: Mon 08 Jun 2026 12:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 09:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:3c:a7:62:f8:38:99:fc:cf:a4:d9:af:e1:ab:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 8 12:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=787b9d96942b3a98a28ea270fe3c29c60be2509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:04:15:8a:5b:08:cb:58:c1:31:10:bc:82:
2c:f7:ee:77:cb:37:a6:ea:89:10:96:db:af:8a:6f:
95:e0:81:7a:00:b8:f7:36:5c:07:42:ef:f8:dc:25:
ac:c3:32:f8:6b:10:88:77:6c:a2:74:be:3e:20:32:
f5:81:46:01:6c:c3:ca:7d:7e:15:b7:b3:79:7a:6d:
0e:8b:b6:fd:b2:f1:48:73:db:a4:8f:ec:25:a6:ca:
1d:b6:8d:b3:2b:20:90:ba:05:88:ca:f3:fe:cf:f4:
f0:8b:9c:20:3b:6c:7b:7b:4d:a8:ff:22:4d:74:e3:
4f:aa:b4:04:8f:db:75:ed:62:42:d5:a9:a2:20:c4:
39:60:90:70:ea:0c:53:77:5c:ba:94:f9:7c:d2:34:
2a:1a:74:62:cf:5b:5f:e4:45:ac:7a:55:27:63:54:
f4:47:c5:1f:24:c0:ee:3f:21:dd:8b:09:6a:aa:31:
25:27:09:2b:b9:ce:e3:19:77:81:bd:d9:a2:c4:ae:
7c:c8:7a:ed:79:79:fa:75:99:64:92:68:39:06:dd:
9f:b2:66:f8:37:6b:f0:8e:bd:af:c1:1e:ea:d2:1b:
97:70:2f:4e:41:43:7d:66:0d:87:b7:99:f9:f1:fd:
a8:7f:43:00:55:5f:d5:f5:54:3a:28:bb:24:2a:60:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:9D:96:94:2B:3A:98:A2:8E:A2:70:FE:3C:29:C6:0B:E2:50:9B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eHudlpQrOpiijqJw_jwpxgviUJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
194.87.12.0/24
194.87.22.0/24
194.87.32.0/23
194.87.40.0/24
194.87.124.0/24
194.87.142.0/24
194.87.150.0/24
195.133.6.0/24
195.133.42.0/24
195.133.85.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
35:44:f0:c1:d0:ae:d5:de:10:ed:39:97:0f:50:a9:27:ad:d4:
44:ed:70:98:11:c1:24:9a:b8:15:ce:40:01:0a:10:8d:20:cf:
f0:e8:5c:fc:c9:6a:3d:27:d5:4a:b6:de:69:99:4a:08:9f:a9:
a5:99:40:e8:5e:76:08:d9:8e:f6:c6:65:5c:b4:4c:38:01:7a:
23:0e:d2:16:f9:b2:18:cc:c3:84:a0:8b:15:f4:b8:e0:70:e1:
e3:6a:4f:43:e2:2c:70:7d:be:55:c7:13:0a:13:68:fa:46:21:
64:1f:b4:65:e6:1d:bc:4c:4d:0f:68:7f:95:ad:36:48:7f:c9:
ef:0c:2b:b7:3c:bc:76:1f:40:bc:ed:3d:9c:86:5b:97:a7:44:
d5:a8:cf:62:c1:4f:7e:68:92:21:89:be:30:ff:8a:ce:b2:a9:
fd:4b:f5:df:d0:4f:96:64:51:20:75:3f:01:39:ac:65:e0:bf:
1f:6d:60:ad:aa:ae:5c:eb:c1:12:8c:32:a1:8e:2c:d3:d6:b1:
30:98:ab:ff:0c:9c:fd:d0:22:e6:34:5c:d9:1a:40:b1:bd:ba:
9a:71:24:97:02:68:d8:3f:66:79:06:29:9e:f9:5a:f7:d3:32:
1e:6a:98:63:d4:01:ea:29:69:cd:d1:29:a0:6d:ed:0c:d1:69:
ab:e2:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 15:01:10 2026 by rpki-client