Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fLZADWSzbMP6m16XXUZDaE9V5_A.roa
File: fLZADWSzbMP6m16XXUZDaE9V5_A.roa (raw, json)
Hash identifier: i3qQ3zliR7WRZwwJoyxkLmr6FpAnt5GoGEgW9Ux4x2k=
Subject key identifier: 7C:B6:40:0D:64:B3:6C:C3:FA:9B:5E:97:5D:46:43:68:4F:55:E7:F0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E39E78E55ABA29A0CB35A85E6B537C240
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fLZADWSzbMP6m16XXUZDaE9V5_A.roa
Signing time: Mon 18 May 2026 07:05:37 +0000
ROA not before: Mon 18 May 2026 07:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 194.87.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:39:e7:8e:55:ab:a2:9a:0c:b3:5a:85:e6:b5:37:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 18 07:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb6400d64b36cc3fa9b5e975d4643684f55e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:af:2e:67:ae:2f:a1:7e:46:0d:a2:7e:8d:
13:71:80:f3:1c:8d:7d:f3:72:e2:06:8f:cb:bb:17:
37:d3:5b:cf:28:5b:05:c2:03:db:42:84:69:07:74:
a0:06:5a:cc:08:49:ba:3b:52:32:c3:6e:3e:f8:5c:
13:10:2b:e7:56:25:bd:e8:86:48:ac:eb:49:eb:8d:
5f:79:44:e0:7a:ef:58:0e:e2:1a:4f:5a:47:b9:14:
f3:35:33:12:bc:f2:fd:89:49:30:16:4e:0c:13:9b:
11:7f:86:b1:31:ee:7e:05:0b:99:19:e4:5c:24:b2:
91:73:60:d9:20:8d:cd:50:7c:cf:29:1c:1b:97:4b:
ac:50:3c:72:35:b7:53:e5:ea:90:4f:2d:83:92:42:
63:2c:e6:40:c3:dc:21:41:af:77:66:9f:ea:79:fe:
69:a9:d0:56:4f:84:75:79:72:75:04:ff:55:dd:ee:
cf:40:12:63:37:0d:72:5a:28:fb:31:de:92:16:73:
7e:df:84:eb:f5:31:ff:55:aa:48:64:98:ae:9d:ba:
68:6a:91:db:fe:fc:a5:8d:39:08:ac:05:52:8a:26:
82:e6:44:eb:f1:f7:6f:a0:95:e6:f9:de:0a:a4:a5:
51:0e:86:9c:3f:a2:c8:2c:2d:10:49:84:9e:9d:bf:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:40:0D:64:B3:6C:C3:FA:9B:5E:97:5D:46:43:68:4F:55:E7:F0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fLZADWSzbMP6m16XXUZDaE9V5_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9b:09:6b:02:12:e4:97:3e:52:7f:81:ed:7d:26:db:81:56:
9a:7e:e5:b3:6a:21:11:23:48:0b:f0:c8:24:9b:37:e6:15:eb:
67:62:b3:ae:d3:7e:cf:8c:ec:15:2d:00:df:a2:e6:b1:79:5a:
3e:4a:0f:df:a5:92:de:9a:16:ca:b4:ae:c6:a5:24:94:25:2b:
ef:3e:fc:55:56:bb:09:92:7f:85:61:5f:91:7c:a0:91:01:3d:
22:f7:1b:b7:ae:b1:48:02:22:f8:02:63:94:8d:fc:75:04:9c:
bb:9b:c9:42:35:e8:e9:79:f8:af:21:88:7b:f3:c5:01:22:6c:
2e:ae:7a:fa:8d:00:8b:17:1a:9c:eb:df:1c:84:5d:7c:a5:8c:
1d:f6:c6:df:ef:dd:09:8d:87:0e:c8:4a:f6:35:66:8a:51:99:
af:fe:b3:ea:de:a5:9f:70:49:21:81:c6:b4:ee:41:b7:51:ee:
58:32:50:ed:da:f5:61:1d:1d:fa:81:97:d9:48:1b:d6:7d:d0:
6e:cf:20:eb:18:4e:fa:d6:01:30:96:dc:d2:48:14:b0:7d:b1:
bf:4f:8c:06:ad:62:f2:c1:06:6c:bb:a4:57:d6:3b:7c:63:69:
e7:13:b2:cb:95:6a:79:09:9f:e9:cf:68:5a:49:39:db:93:12:
29:31:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:20 2026 by rpki-client