Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iwGCblSkDpBsBoaU7imMHM9-l4Q.roa
File: iwGCblSkDpBsBoaU7imMHM9-l4Q.roa (raw, json)
Hash identifier: w36G7Pl8UgY6+2CtwXjcjIb1KCILXa9IGDZbeUW5BKM=
Subject key identifier: 8B:01:82:6E:54:A4:0E:90:6C:06:86:94:EE:29:8C:1C:CF:7E:97:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FE143E72370C155212587824A1EDD5747
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iwGCblSkDpBsBoaU7imMHM9-l4Q.roa
Signing time: Sat 08 Aug 2026 12:05:51 +0000
ROA not before: Sat 08 Aug 2026 12:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 192.124.173.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:43:e7:23:70:c1:55:21:25:87:82:4a:1e:dd:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 8 12:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b01826e54a40e906c068694ee298c1ccf7e9784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:a3:e9:4a:ac:82:74:1f:13:e6:c8:c6:48:
74:d1:fb:b3:1c:c5:58:ab:cc:0d:35:8e:18:2c:89:
0e:73:b9:1c:48:29:f7:e1:af:2a:3e:64:fc:f2:3e:
c3:62:dd:45:a5:d1:76:ce:2d:f7:db:6a:a8:16:8b:
50:11:71:f7:da:c2:19:bf:01:73:d9:de:18:3b:a0:
ac:17:84:97:ae:d8:23:9b:0d:b1:17:63:0b:9b:87:
2e:93:33:6f:0a:f0:f1:91:eb:9a:eb:f3:25:d8:4d:
0c:3c:50:e3:5d:02:1b:e0:95:05:67:18:d0:06:f7:
88:9f:ed:f3:b9:c0:ec:0d:eb:eb:e7:e2:70:87:29:
6a:98:46:ad:e4:16:20:9c:40:61:c1:34:60:b5:1d:
37:11:75:1a:65:f6:d3:bb:c9:1b:87:87:ac:a5:71:
ef:a8:d1:a1:77:d4:11:d6:3e:c7:3a:e2:a8:69:f4:
a5:ae:31:34:d0:c9:2d:2e:f3:01:77:b8:ca:4b:e1:
d8:f5:09:28:f6:f8:6e:50:07:5e:51:e4:08:6d:60:
4a:45:09:72:f0:52:a1:87:1b:59:7b:85:77:3b:0e:
49:86:21:e4:27:4a:40:9f:bd:20:76:48:55:3d:bc:
42:dc:ff:9c:e4:83:80:93:40:7f:2d:e4:79:e4:0a:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:82:6E:54:A4:0E:90:6C:06:86:94:EE:29:8C:1C:CF:7E:97:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iwGCblSkDpBsBoaU7imMHM9-l4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
194.87.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:eb:28:eb:21:01:6f:b9:d7:4c:36:25:56:e0:4f:7e:f9:b4:
57:e9:f8:c2:61:46:17:c3:a7:dc:1a:2c:66:af:69:c1:01:75:
93:0b:33:53:3f:77:85:f0:f1:f1:a3:18:ab:40:82:56:52:17:
4e:d0:6f:9c:f7:e9:db:0f:8e:81:e9:35:b0:64:83:dc:b5:d0:
26:4e:78:cf:07:7f:d9:9d:77:ad:23:4e:85:d4:a8:b7:c0:8a:
90:a9:b0:d7:55:a1:7d:43:e4:02:83:56:2e:02:42:27:c2:cf:
86:7c:74:50:5a:f6:2b:28:05:b9:ba:c3:d0:9d:27:39:6f:b0:
c7:38:74:64:54:15:29:85:d7:20:1a:13:48:a1:32:f9:f0:16:
c7:31:1b:53:5e:43:9b:74:3f:81:c3:9d:d3:ff:35:3e:3f:8a:
5f:89:45:b4:22:f1:1c:13:c8:b8:eb:c3:b4:c7:cc:54:4d:0d:
f8:d5:89:3d:d6:fd:d5:dc:a9:91:6a:4d:6a:eb:7e:1a:d3:d0:
c7:bf:b1:d9:47:3b:6c:db:91:19:ab:25:94:3b:9e:c8:fc:51:
f3:0d:31:70:6a:d6:75:88:a8:6b:62:c0:67:14:e3:85:09:5e:
e8:57:53:ea:f8:fc:a4:2b:e3:6f:30:47:f8:b5:ae:3e:83:e0:
81:6c:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:02 2026 by rpki-client