Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rNdI9SoRHZBDyUOxJBsqBFSvjxk.roa
File: rNdI9SoRHZBDyUOxJBsqBFSvjxk.roa (raw, json)
Hash identifier: 9cvdgvKaI0rH5WR1us2LY45C1wBw5Uk3jtPNajnlB3k=
Subject key identifier: AC:D7:48:F5:2A:11:1D:90:43:C9:43:B1:24:1B:2A:04:54:AF:8F:19
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E3F0F25E0864C6A3BA310536703CEA876
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rNdI9SoRHZBDyUOxJBsqBFSvjxk.roa
Signing time: Tue 19 May 2026 07:06:57 +0000
ROA not before: Tue 19 May 2026 07:06:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.153.0/24 maxlen: 24
195.58.57.0/24 maxlen: 24
212.193.16.0/24 maxlen: 24
212.193.17.0/24 maxlen: 24
212.193.19.0/24 maxlen: 24
212.193.21.0/24 maxlen: 24
212.193.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:0f:25:e0:86:4c:6a:3b:a3:10:53:67:03:ce:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 07:06:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acd748f52a111d9043c943b1241b2a0454af8f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:60:c7:ba:02:d9:ae:e0:05:75:48:7f:92:
46:52:cc:a6:88:dc:56:a8:d5:54:11:6b:ca:0b:81:
6a:30:8d:08:13:cc:2d:c0:e4:dc:2c:34:2a:58:b3:
d7:71:de:17:23:dc:57:c1:c8:3f:e4:68:7f:04:50:
4b:6b:c7:64:ef:d3:6e:90:47:9e:3f:e4:9d:f5:8c:
c4:f7:d7:21:4c:0a:99:91:d3:af:e0:4e:89:8b:1f:
c4:7e:b3:76:b8:73:87:67:7b:9c:d9:b8:d3:64:4c:
50:c1:21:b3:13:f5:73:ca:b4:f7:bd:a5:c1:23:4b:
11:43:52:43:40:47:55:20:c5:fe:a5:21:b7:e8:13:
3d:a8:fb:f8:d7:c2:07:72:2d:ba:6f:33:5c:d6:d9:
d4:60:4d:cf:24:37:68:bf:49:ee:63:13:a6:31:4e:
3a:8c:a9:cd:b4:5f:45:df:9e:83:73:27:71:00:95:
51:ae:84:65:09:c0:93:42:d2:6a:86:eb:e2:01:09:
91:39:ab:6a:29:97:58:7f:80:a5:de:37:61:ba:79:
be:26:1e:e1:8c:1e:38:57:bc:e7:63:20:77:98:35:
0f:b4:e3:47:46:30:5a:ba:33:83:c2:ce:67:3b:63:
2b:83:cc:5e:35:e0:19:ed:2e:24:79:c4:1d:0a:5c:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:48:F5:2A:11:1D:90:43:C9:43:B1:24:1B:2A:04:54:AF:8F:19
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rNdI9SoRHZBDyUOxJBsqBFSvjxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.1.0/24
194.87.153.0/24
195.58.57.0/24
212.193.16.0/23
212.193.19.0/24
212.193.21.0-212.193.22.255
Signature Algorithm: sha256WithRSAEncryption
39:70:0f:61:fb:41:f4:92:33:3c:87:2a:4e:90:e3:ea:f7:d2:
dc:93:eb:3b:34:0d:22:7a:8f:d7:06:5e:0b:cd:dd:f9:6a:ce:
99:fa:c6:30:ca:fc:db:f9:f5:31:37:be:1f:e2:02:ee:73:4e:
34:69:a5:84:4f:23:82:7b:4d:17:60:57:c1:08:8f:fd:d1:03:
8b:d0:90:4c:c8:d7:d0:64:a0:46:f8:d0:93:23:13:f2:cb:53:
af:f2:c0:8a:24:8b:0a:0e:54:0d:aa:60:72:d5:a5:b0:bc:43:
39:e5:98:26:47:2b:45:b7:fa:a5:5b:d8:5b:d0:60:68:18:3b:
98:2d:96:f3:d0:99:bb:47:fb:1a:d6:d0:34:88:21:c1:e6:24:
14:43:30:38:59:5d:d1:4a:97:2c:dd:07:3d:f3:2f:a3:6a:f2:
32:14:50:a1:25:3e:2b:a7:ee:84:5a:28:8d:cd:ec:dc:48:de:
16:b6:27:b9:01:ed:06:ba:f1:7c:38:52:7c:22:83:2f:33:de:
20:69:fd:db:e9:83:cb:1b:49:3d:04:d7:98:24:d0:d7:88:75:
f6:70:ca:ae:f1:fd:6b:da:b3:b3:6b:0f:1f:0c:e4:0a:78:66:
e7:9f:1c:f3:c0:2c:05:c7:a8:56:21:7f:82:f4:6d:f3:e9:68:
33:5d:6a:f3
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ4/DyXghkxqO6MQU2cDzqh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNTE5MDcwNjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2Q3NDhmNTJhMTExZDkwNDNjOTQzYjEyNDFiMmEwNDU0YWY4ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrVgx7oC2a7gBXVIf5JGUsymiNxW
qNVUEWvKC4FqMI0IE8wtwOTcLDQqWLPXcd4XI9xXwcg/5Gh/BFBLa8dk79NukEee
P+Sd9YzE99chTAqZkdOv4E6Jix/EfrN2uHOHZ3uc2bjTZExQwSGzE/VzyrT3vaXB
I0sRQ1JDQEdVIMX+pSG36BM9qPv418IHci26bzNc1tnUYE3PJDdov0nuYxOmMU46
jKnNtF9F356DcydxAJVRroRlCcCTQtJqhuviAQmROatqKZdYf4Cl3jdhunm+Jh7h
jB44V7znYyB3mDUPtONHRjBaujODws5nO2Mrg8xeNeAZ7S4kecQdClyEYwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFKzXSPUqER2QQ8lDsSQbKgRUr48ZMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvck5kSTlTb1JIWkJEeVVPeEpCc3FCRlN2anhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAwlcBAwQA
wleZAwQAwzo5AwQB1MEQAwQA1METMAwDBADUwRUDBADUwRYwDQYJKoZIhvcNAQEL
BQADggEBADlwD2H7QfSSMzyHKk6Q4+r30tyT6zs0DSJ6j9cGXgvN3flqzpn6xjDK
/Nv59TE3vh/iAu5zTjRppYRPI4J7TRdgV8EIj/3RA4vQkEzI19BkoEb40JMjE/LL
U6/ywIokiwoOVA2qYHLVpbC8QznlmCZHK0W3+qVb2FvQYGgYO5gtlvPQmbtH+xrW
0DSIIcHmJBRDMDhZXdFKlyzdBz3zL6Nq8jIUUKElPiun7oRaKI3N7NxI3ha2J7kB
7Qa68Xw4Unwigy8z3iBp/dvpg8sbST0E15gk0NeIdfZwyq7x/Wvas7NrDx8M5Ap4
ZuefHPPALAXHqFYhf4L0bfPpaDNdavM=
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:05 2026 by rpki-client