Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j42ugKnIcm-3eJmgSZ1ultKo4Gg.roa
File: j42ugKnIcm-3eJmgSZ1ultKo4Gg.roa (raw, json)
Hash identifier: VfhUoepvJAwUCZ+MLODAND7zYwSxZ2FSKZPhh/JzmNE=
Subject key identifier: 8F:8D:AE:80:A9:C8:72:6F:B7:78:99:A0:49:9D:6E:96:D2:A8:E0:68
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FDA6C823C08293DCB759EEC15944BE508
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j42ugKnIcm-3eJmgSZ1ultKo4Gg.roa
Signing time: Fri 07 Aug 2026 04:12:52 +0000
ROA not before: Fri 07 Aug 2026 04:12:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 194.58.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:6c:82:3c:08:29:3d:cb:75:9e:ec:15:94:4b:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 04:12:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f8dae80a9c8726fb77899a0499d6e96d2a8e068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:75:72:53:91:44:f4:93:c2:1a:23:27:f9:
c8:ed:d5:c8:9e:50:68:05:a6:78:dd:bd:35:64:ef:
77:b0:dd:14:11:c2:b7:ee:e8:f5:f0:84:08:b3:74:
e8:a5:77:8a:0a:94:69:5e:fb:a7:af:fe:bc:79:29:
10:64:d3:08:0e:d1:7f:7a:b1:15:27:2f:42:a9:28:
ef:c5:a8:84:47:93:ff:22:cd:3e:a3:10:5b:a2:4c:
60:1d:ce:9b:d7:c9:93:07:9e:12:53:77:8c:03:b9:
62:58:d7:ed:69:13:af:35:5c:d7:38:54:22:ca:7f:
a2:16:51:7d:ec:9d:82:30:c4:41:3f:df:ce:1a:8d:
01:d2:94:65:73:ee:23:46:2c:f0:30:82:23:ea:13:
d7:16:c2:d7:bf:0d:d5:63:40:ee:fd:30:f0:b4:7e:
47:51:c7:df:2a:67:d6:d9:eb:fc:a8:49:86:c9:8f:
d3:01:b7:c7:c7:c1:3c:1e:33:28:c1:8a:25:4d:bd:
99:dd:a5:c7:f8:11:9c:5a:f7:f8:c9:f3:81:ca:bf:
1b:9d:4c:f3:8e:56:9a:e0:bb:9b:f6:22:fc:41:76:
02:a3:29:de:65:91:6d:6d:73:12:77:fb:4e:54:ca:
e2:21:ea:a0:c6:f9:96:d6:5e:13:e5:26:e0:42:ae:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:AE:80:A9:C8:72:6F:B7:78:99:A0:49:9D:6E:96:D2:A8:E0:68
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j42ugKnIcm-3eJmgSZ1ultKo4Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.43.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a5:43:d0:0b:e6:a3:6e:8f:20:6a:e1:40:84:06:e0:1b:cc:
0a:a1:04:88:18:03:18:c3:47:5d:5d:7e:c5:59:b1:82:8b:a8:
5b:2c:24:fb:92:c3:20:fe:78:54:34:9f:d7:30:4c:86:6d:8f:
68:58:23:95:b3:ac:7c:73:ff:27:02:23:83:bd:87:8d:46:5e:
68:58:f0:a3:14:34:2d:f4:2d:47:f3:a3:9b:2d:a3:c2:75:a6:
62:94:ff:04:d5:90:2a:ec:15:19:2b:af:6c:7a:b6:1a:e8:5a:
c4:cd:12:ed:69:86:35:f2:47:e0:95:04:e7:85:ea:6f:ac:c6:
46:55:56:a0:db:e6:35:f7:a4:69:e0:50:92:8d:d3:46:ee:87:
26:4a:25:87:f8:b0:c0:19:98:86:c4:09:79:38:c9:47:73:e3:
19:35:a9:a7:ec:78:02:8f:b0:2e:73:70:79:cf:53:ca:21:0e:
09:2b:e4:d9:5e:d2:2f:34:4f:61:df:66:d4:14:43:84:fb:aa:
70:45:2a:81:50:63:08:3c:37:6a:5d:12:b8:46:93:97:84:92:
ea:5f:a7:ba:a7:09:63:fa:28:ba:07:af:44:cb:45:ce:9d:79:
e0:f7:35:58:09:9b:89:48:c8:8c:5e:08:de:a9:1d:48:1f:ac:
2a:12:45:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/abII8CCk9y3We7BWUS+UIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwODA3MDQxMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjhkYWU4MGE5Yzg3MjZmYjc3ODk5YTA0OTlkNmU5NmQyYThlMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw51clORRPSTwhojJ/nI7dXInlBo
BaZ43b01ZO93sN0UEcK37uj18IQIs3TopXeKCpRpXvunr/68eSkQZNMIDtF/erEV
Jy9CqSjvxaiER5P/Is0+oxBbokxgHc6b18mTB54SU3eMA7liWNftaROvNVzXOFQi
yn+iFlF97J2CMMRBP9/OGo0B0pRlc+4jRizwMIIj6hPXFsLXvw3VY0Du/TDwtH5H
UcffKmfW2ev8qEmGyY/TAbfHx8E8HjMowYolTb2Z3aXH+BGcWvf4yfOByr8bnUzz
jlaa4Lub9iL8QXYCoyneZZFtbXMSd/tOVMriIeqgxvmW1l4T5SbgQq6+aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+NroCpyHJvt3iZoEmdbpbSqOBoMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvajQydWdLbkljbS0zZUptZ1NaMXVsdEtvNEdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjorMA0G
CSqGSIb3DQEBCwUAA4IBAQCWpUPQC+ajbo8gauFAhAbgG8wKoQSIGAMYw0ddXX7F
WbGCi6hbLCT7ksMg/nhUNJ/XMEyGbY9oWCOVs6x8c/8nAiODvYeNRl5oWPCjFDQt
9C1H86ObLaPCdaZilP8E1ZAq7BUZK69serYa6FrEzRLtaYY18kfglQTnhepvrMZG
VVag2+Y196Rp4FCSjdNG7ocmSiWH+LDAGZiGxAl5OMlHc+MZNamn7HgCj7Auc3B5
z1PKIQ4JK+TZXtIvNE9h32bUFEOE+6pwRSqBUGMIPDdqXRK4RpOXhJLqX6e6pwlj
+ii6B69Ey0XOnXng9zVYCZuJSMiMXgjeqR1IH6wqEkVM
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:03 2026 by rpki-client