Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oL6XpvfF6miMfh3PD8YNKfyisH8.roa
File: oL6XpvfF6miMfh3PD8YNKfyisH8.roa (raw, json)
Hash identifier: Z7WohZzTTnR6ym73b1T2xHFwGKNFS3M8KvhIkzZVnf0=
Subject key identifier: A0:BE:97:A6:F7:C5:EA:68:8C:7E:1D:CF:0F:C6:0D:29:FC:A2:B0:7F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FAEF0F4BF1F748F4972987B3EE6344D13
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oL6XpvfF6miMfh3PD8YNKfyisH8.roa
Signing time: Wed 29 Jul 2026 17:34:14 +0000
ROA not before: Wed 29 Jul 2026 17:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213035
IP address blocks: 194.87.132.0/24 maxlen: 24
195.133.16.0/24 maxlen: 24
212.192.216.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
212.192.243.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
212.193.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:f0:f4:bf:1f:74:8f:49:72:98:7b:3e:e6:34:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 29 17:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0be97a6f7c5ea688c7e1dcf0fc60d29fca2b07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:c8:23:92:5f:4d:7c:c2:7a:f5:78:57:8f:
3b:9c:e6:36:f5:2c:36:f0:53:91:28:bc:7c:16:50:
86:b6:2c:bf:ad:90:d9:8a:0b:38:1c:4c:de:47:6b:
87:fb:81:49:fc:0f:3d:5e:3d:37:e1:e9:ac:33:4c:
e1:e3:8a:25:15:9b:7e:79:79:e4:e5:2e:30:d1:0a:
a1:b7:07:55:aa:79:22:25:14:db:03:80:96:d5:5a:
f1:e5:84:1c:9a:dd:a7:01:57:47:73:c0:bd:56:00:
d0:34:7b:8a:cd:bb:1e:44:47:d1:e2:32:bb:ef:6e:
7c:f5:10:6f:70:7c:9c:f4:01:37:65:e9:98:38:da:
69:ce:3d:74:29:4d:2c:77:e8:92:5b:d7:97:6f:dc:
ad:32:3b:5c:cd:10:b9:d2:41:13:81:79:5b:d3:6a:
ed:8a:85:b8:5b:20:02:c0:74:89:d9:7f:8d:5e:59:
38:92:f9:00:69:9d:a1:95:68:dc:a1:00:a1:79:0f:
d8:b3:a7:32:d0:54:cd:66:f9:b6:83:d5:62:21:25:
da:fa:7b:fb:7a:35:82:86:b7:d9:b0:19:da:0d:27:
93:62:6b:36:94:e6:3d:ed:2a:eb:45:aa:b4:cb:68:
c3:62:f3:20:05:46:b2:f8:10:81:b5:4f:a8:9b:af:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BE:97:A6:F7:C5:EA:68:8C:7E:1D:CF:0F:C6:0D:29:FC:A2:B0:7F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oL6XpvfF6miMfh3PD8YNKfyisH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.132.0/24
195.133.16.0/24
212.192.216.0/24
212.192.240.0/24
212.192.243.0/24
212.192.245.0/24
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a9:a3:e3:a5:6f:21:e8:2e:03:3c:3a:48:b7:e3:ee:54:83:
b9:81:d4:88:58:a8:9a:4e:78:47:f3:49:2d:46:56:0a:3b:ff:
94:f9:2d:47:aa:44:0f:43:8a:34:74:86:8e:53:a9:6e:61:a8:
51:0f:da:4a:97:bc:38:c5:3a:26:94:6e:28:30:21:35:96:b4:
37:b6:ab:0c:89:22:80:ab:fe:ad:c1:86:97:00:4c:30:35:48:
83:e4:a6:44:db:bf:50:84:a1:29:e0:9d:19:d2:38:70:a7:30:
94:66:4f:ba:09:1e:e0:32:f7:c2:01:ed:17:3a:b6:45:a9:c2:
cf:f8:26:bd:ef:3c:02:8d:84:43:9b:27:62:6d:24:37:49:ac:
b5:3e:b6:01:1c:43:1f:f9:f5:ba:6a:30:34:09:00:b8:ef:51:
42:fc:5c:51:77:09:5a:b6:ba:c7:55:63:ce:85:34:76:3d:86:
0b:dc:2f:91:9e:84:97:c8:c8:bd:e5:eb:89:e8:be:73:e2:09:
78:6f:65:ba:b4:30:46:c5:56:1a:d6:91:47:8e:de:ed:31:46:
a8:77:ce:79:7c:3f:29:b5:5c:03:21:cd:c0:d9:25:b0:1f:01:
3d:b5:5b:bd:48:d3:07:28:49:8a:63:e4:31:62:22:4b:37:07:
d4:5d:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:03 2026 by rpki-client