Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVTwSDEpoxHl18Ts7UJsdq3x-FI.roa
File: gVTwSDEpoxHl18Ts7UJsdq3x-FI.roa (raw, json)
Hash identifier: gLxms79F/Mc7KraaiWnNttjts9dsPuBKmGKNRmvIS3o=
Subject key identifier: 81:54:F0:48:31:29:A3:11:E5:D7:C4:EC:ED:42:6C:76:AD:F1:F8:52
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A06DD48B339ECA25275C4C17944FF86EAA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVTwSDEpoxHl18Ts7UJsdq3x-FI.roa
Signing time: Fri 04 Sep 2026 19:10:40 +0000
ROA not before: Fri 04 Sep 2026 19:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 193.124.133.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:d4:8b:33:9e:ca:25:27:5c:4c:17:94:4f:f8:6e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 19:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8154f0483129a311e5d7c4eced426c76adf1f852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:8c:b3:f3:f6:04:3a:61:19:da:78:88:c9:
71:67:b8:96:6a:88:2c:60:0f:61:44:d7:a6:9f:f9:
ab:1a:2a:88:36:96:6a:c9:67:53:09:71:0b:2a:b3:
32:18:ae:a8:e2:78:b5:02:38:a9:d3:1e:a3:2d:4d:
83:73:9f:67:ae:41:78:14:7e:71:cb:4b:d0:ab:49:
63:1c:5f:d3:c5:75:ae:d5:a3:1c:34:f7:95:0e:c0:
04:c6:b2:4c:04:b3:3a:53:8f:77:9c:9f:45:16:2c:
77:89:7d:af:a4:05:85:dd:8d:f0:c2:97:3d:39:67:
f1:f0:7e:a3:8c:97:6d:bb:4e:b4:ca:e6:75:17:ac:
fa:c2:3a:b0:aa:be:66:04:ae:cc:ec:6f:62:01:89:
3e:66:7c:6b:90:06:2b:86:39:b4:0e:ec:74:bc:b6:
10:39:ca:8f:43:d8:2a:00:9f:33:e1:92:67:fc:d1:
a8:a5:5b:55:36:24:37:41:83:bc:56:56:b3:97:62:
64:95:4e:c4:d4:da:fa:63:e1:b9:79:db:ab:22:48:
1e:64:42:00:39:26:a4:50:0d:23:e5:18:d6:34:0c:
84:e2:23:1b:98:aa:a3:a8:c5:be:01:67:17:97:00:
b6:ff:78:06:f4:28:a5:4d:cc:84:83:09:77:8f:a4:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:54:F0:48:31:29:A3:11:E5:D7:C4:EC:ED:42:6C:76:AD:F1:F8:52
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVTwSDEpoxHl18Ts7UJsdq3x-FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.133.0/24
194.87.32.0/23
194.87.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5a:ac:84:8a:1f:ee:4d:e4:b9:7a:4b:76:ee:66:0d:fa:86:
86:f6:e4:ba:4a:57:7b:00:5f:22:fe:4d:21:09:61:38:66:c1:
b2:9b:e1:ce:da:40:55:02:df:c5:dd:05:78:2b:57:7a:d0:b0:
ea:0b:ce:6e:02:ea:b1:e5:e7:24:f7:e5:d3:9d:69:eb:64:2e:
1d:fe:54:2b:c7:09:fb:3d:04:58:98:30:d3:3b:08:a4:d8:68:
f9:f0:ef:dd:88:83:d1:63:2c:d6:09:86:c6:e3:0b:10:e0:ad:
ec:b6:b3:20:cd:5a:fa:be:a0:6d:8b:45:bd:1d:31:7d:96:f0:
ae:a0:72:7f:c5:3b:57:3a:40:14:e0:0e:b0:14:18:cf:aa:22:
50:c6:b3:d7:ce:f2:3a:9e:36:8e:b5:2a:50:0a:58:61:db:ea:
18:e9:00:c5:c0:b7:2a:3d:a9:23:3b:39:b3:f7:23:72:bd:dd:
a9:b4:18:d3:ce:7f:9c:04:3b:c0:80:21:c7:aa:3b:3d:72:9a:
d5:97:ba:fe:49:fe:0b:6c:4b:7e:16:c7:ce:e9:b1:7a:15:f7:
39:cd:2a:12:18:49:14:7c:ae:d9:2c:62:1c:4c:70:c8:40:52:
b3:a2:7c:26:87:e4:42:e6:8e:1f:47:1e:4a:c3:96:3c:21:04:
1c:7c:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:06 2026 by rpki-client