Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eYdf5jGQCyWs-P7wTIMSuOsFcbk.roa
File: eYdf5jGQCyWs-P7wTIMSuOsFcbk.roa (raw, json)
Hash identifier: S7ycwcIlpQNdTbsFMIcaEfy3gEyeTRQL0CHsWptPoUI=
Subject key identifier: 79:87:5F:E6:31:90:0B:25:AC:F8:FE:F0:4C:83:12:B8:EB:05:71:B9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A070E9BA32A58EBF04802769336B57163F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eYdf5jGQCyWs-P7wTIMSuOsFcbk.roa
Signing time: Sat 05 Sep 2026 09:32:40 +0000
ROA not before: Sat 05 Sep 2026 09:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 192.124.188.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:e9:ba:32:a5:8e:bf:04:80:27:69:33:6b:57:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 5 09:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79875fe631900b25acf8fef04c8312b8eb0571b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:c6:21:a5:d8:e1:22:94:d1:8d:df:b7:26:
8b:15:4f:16:05:11:76:33:97:b2:15:d6:c5:24:31:
e3:bd:5b:42:18:2c:39:65:06:6c:be:76:c1:d2:a9:
7c:cd:c5:44:31:60:f5:0b:a4:0c:0a:f4:0b:f7:40:
51:82:f1:be:9e:b5:31:ac:be:0b:3c:38:97:af:61:
ac:69:74:85:ad:b9:d2:d5:9c:9f:08:42:19:d0:20:
6c:bc:36:cf:54:da:ab:2f:ea:b2:f4:1e:7a:1a:cc:
78:77:66:d1:5f:a4:9b:b9:c4:98:76:24:3e:03:cc:
6b:b7:81:73:a4:05:f2:77:1e:02:5c:0b:c5:53:27:
c7:58:84:e7:fa:06:a5:46:39:70:35:a9:8e:14:80:
c1:c2:75:7a:f9:c8:41:90:0e:cb:c0:3b:5a:cc:42:
06:ce:1a:5f:01:c2:7c:83:50:b6:76:0f:5c:b5:29:
b9:70:0f:a6:e2:da:74:79:35:d1:a7:1b:aa:74:7c:
ae:e1:9a:c3:ee:f5:53:66:04:14:b7:c3:e0:93:1a:
a8:2f:04:d1:82:0f:ed:f1:35:22:e6:41:e8:79:dc:
bf:58:75:63:c9:84:d9:11:c9:b8:6e:c2:66:09:90:
fa:8a:17:fe:f5:2d:1c:85:ad:a0:f7:db:9f:12:4d:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:5F:E6:31:90:0B:25:AC:F8:FE:F0:4C:83:12:B8:EB:05:71:B9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eYdf5jGQCyWs-P7wTIMSuOsFcbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
193.124.200.0/24
193.124.202.0/24
194.87.66.0/24
194.87.75.0/24
194.87.81.0/24
194.87.170.0/24
194.87.229.0/24
194.135.32.0/24
195.58.60.0/24
195.133.43.0/24
195.133.95.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8c:49:32:d7:e6:e6:44:1d:ec:a5:be:7d:ba:ac:7a:ef:69:
cd:6e:32:69:0f:cb:1a:e6:13:8a:b4:c6:39:65:5b:9d:e0:fb:
8e:e8:51:0f:8b:98:bb:7f:97:e4:da:2b:f2:7f:c7:7d:16:c1:
b7:1b:c7:cb:93:4d:90:13:76:63:24:fd:b7:e4:b1:db:b2:70:
d1:45:6b:8e:38:27:15:45:70:9f:a0:46:8a:43:76:7c:e5:03:
24:ff:6c:83:61:dc:93:1a:17:a9:d9:ee:21:7f:0e:31:d3:9a:
1e:ca:61:8f:a8:8b:35:3b:bc:64:cb:a5:1a:b1:cb:85:bb:6e:
e8:24:1a:0c:8b:97:0b:06:8d:1a:3a:81:c8:8f:eb:df:2e:e8:
5c:63:b9:03:5d:11:e9:7c:0d:24:29:78:3f:62:8b:6c:bb:2e:
e4:e2:dc:14:96:0b:c1:ee:51:3a:ec:41:24:4e:95:42:36:16:
6e:50:ae:ee:70:e1:0f:75:8e:bc:0c:a2:03:2b:fb:b9:79:12:
40:f4:10:fd:6e:2b:6a:3f:7b:bd:4b:5e:de:07:ea:da:24:a2:
c3:0f:67:27:72:dc:5a:75:14:8d:6b:61:42:2b:38:80:10:9a:
ad:dd:ab:b0:b0:b8:7d:39:40:d7:58:95:03:a1:97:ee:d2:a3:
f1:73:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:29 2026 by rpki-client