Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n0VDjcZu3YwBsqPIMOOW9YWXgE8.roa
File: n0VDjcZu3YwBsqPIMOOW9YWXgE8.roa (raw, json)
Hash identifier: eAA/tJpvx8UusZlyAvDt6Hngrv6uVmWcr+n4u5/16vU=
Subject key identifier: 9F:45:43:8D:C6:6E:DD:8C:01:B2:A3:C8:30:E3:96:F5:85:97:80:4F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A11BF6E288465F86821386F5C4099C3AF8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n0VDjcZu3YwBsqPIMOOW9YWXgE8.roa
Signing time: Thu 08 Oct 2026 14:42:06 +0000
ROA not before: Thu 08 Oct 2026 14:42:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216093
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.28.0/24 maxlen: 24
195.133.51.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:f6:e2:88:46:5f:86:82:13:86:f5:c4:09:9c:3a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 8 14:42:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f45438dc66edd8c01b2a3c830e396f58597804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:58:58:4d:0f:fe:3f:d2:d9:6b:28:46:96:
2a:f6:a0:ab:cd:22:07:06:72:39:ff:1b:4f:ec:6e:
85:c0:ef:d0:2e:0b:85:84:02:6d:70:01:0a:82:58:
2c:3f:53:46:4d:e2:cd:d4:e9:f6:81:32:0e:26:7a:
a9:3a:d1:2c:15:10:29:12:1a:e6:ca:99:cc:7f:88:
6c:95:0c:ad:8f:b2:a6:cc:87:53:43:b5:73:30:b1:
eb:34:74:d7:be:6d:8d:f2:e1:fc:d6:b9:89:4b:d2:
28:2b:38:06:40:a3:8f:27:b0:36:5e:c4:da:52:b0:
a8:b3:aa:0d:c0:30:be:4c:dc:8c:e0:85:f8:ac:01:
83:65:30:98:69:ec:27:5c:a6:73:11:ff:88:63:dc:
0c:16:f4:20:bb:16:11:c8:57:92:82:35:a5:9c:14:
73:41:95:34:31:a9:cc:b5:da:5f:6e:ca:8a:2e:dd:
9f:10:65:8b:3c:e2:59:ab:ad:90:05:cd:58:d2:87:
b8:27:16:cc:74:98:39:99:a4:94:82:48:a0:39:0b:
55:23:9b:e6:e1:2a:e4:52:b6:5c:30:56:7d:4f:c4:
88:23:4a:04:ae:1a:cf:d7:11:82:ee:c2:08:31:cf:
95:b7:28:e2:d1:74:6f:a0:4c:29:49:1a:5b:10:e6:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:43:8D:C6:6E:DD:8C:01:B2:A3:C8:30:E3:96:F5:85:97:80:4F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n0VDjcZu3YwBsqPIMOOW9YWXgE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
194.87.11.0/24
194.87.28.0/24
195.133.51.0/24
212.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
35:29:79:af:17:cf:e0:3b:0d:cd:d8:41:b9:c2:66:a5:40:c8:
23:1f:21:e4:77:bc:b6:03:3f:8e:f3:0f:2b:60:eb:8d:21:d0:
f4:6c:4b:75:1d:e6:b9:5f:ea:c8:dd:03:4f:53:3f:fa:7f:b5:
f3:ae:eb:df:2c:de:c5:1c:79:24:e0:0a:3d:14:70:9d:3e:64:
84:dd:3f:47:08:71:ba:d9:23:95:8e:51:f4:c8:7c:ec:17:e5:
0f:29:54:17:7f:ca:4b:58:2d:ca:9c:45:96:2f:27:46:ca:ad:
b4:b0:92:29:75:ed:4c:84:7f:6a:44:1f:57:b4:0e:74:4d:71:
27:fd:0e:1b:0f:36:e3:1b:76:50:1b:5d:1d:df:eb:de:5f:1d:
9e:3a:cc:e8:64:35:d8:bc:65:c8:05:f2:15:94:7e:45:32:b5:
49:5d:97:70:35:9e:ca:3a:29:85:be:77:59:b9:88:c0:22:0a:
1a:68:1c:0b:4b:ea:c9:97:c0:ef:d3:0e:48:a9:3c:0c:0e:c7:
15:5f:8f:02:23:36:fb:ad:60:8d:22:e7:39:9e:a8:89:4c:8d:
99:13:87:3f:1c:0c:c3:57:ba:a4:eb:b2:31:48:07:bb:5d:26:
f1:be:96:ec:48:af:45:42:4d:ef:58:37:6b:ea:d9:bc:dd:13:
82:58:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:44 2026 by rpki-client