Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rZHm_srJBbW_4fMTgJdLNQO-cE4.roa
File: rZHm_srJBbW_4fMTgJdLNQO-cE4.roa (raw, json)
Hash identifier: LL8Mv8ivlhdBWmX8CrCvIcOwzSbLfjlxTenW2ln7BCg=
Subject key identifier: AD:91:E6:FE:CA:C9:05:B5:BF:E1:F3:13:80:97:4B:35:03:BE:70:4E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019DAC278F18254FCA2E9A7B36DF9333A2A6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rZHm_srJBbW_4fMTgJdLNQO-cE4.roa
Signing time: Mon 20 Apr 2026 18:29:26 +0000
ROA not before: Mon 20 Apr 2026 18:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47585
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ac:27:8f:18:25:4f:ca:2e:9a:7b:36:df:93:33:a2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 20 18:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad91e6fecac905b5bfe1f31380974b3503be704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:29:54:c7:73:0d:55:8b:9f:32:25:1d:b9:
fe:78:31:55:78:41:38:7f:d7:34:e5:3f:97:0e:f7:
af:3d:33:00:18:5e:fe:96:ad:42:6c:8c:c8:c2:21:
20:54:e2:79:f2:ba:16:91:1b:ff:77:fe:74:56:bf:
b1:e8:ae:b4:1a:f9:4d:37:78:4b:02:70:d0:59:e9:
31:73:83:73:94:da:54:3b:29:d6:5d:f0:12:bc:57:
ea:58:3f:40:33:a3:79:3a:18:99:c3:9c:6c:5a:32:
d8:1e:87:5f:80:8d:5f:f5:b4:0a:d6:9d:1b:2b:e8:
1d:86:d2:19:71:f8:7b:cc:0c:70:ae:bb:5e:4c:5b:
ca:84:f2:06:19:8b:01:ce:10:8d:c5:0d:b7:b2:94:
39:33:72:02:0a:ab:80:5e:a4:ad:e2:18:cd:b9:84:
7e:78:73:39:a7:77:ef:33:44:93:70:6a:6b:1f:4b:
32:c8:74:e9:7e:9f:3f:0f:9c:84:cf:05:b5:b6:b5:
50:7e:3d:3f:7d:e3:72:5b:71:1f:50:ac:1e:9a:4e:
5b:13:a6:9d:94:a4:0a:c1:61:a0:a0:b7:71:cc:1a:
31:7b:31:1b:d3:6d:03:69:37:63:57:fd:49:9e:e7:
c3:f8:20:2a:4f:8c:1e:25:c9:82:b9:3b:3d:6b:ff:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:91:E6:FE:CA:C9:05:B5:BF:E1:F3:13:80:97:4B:35:03:BE:70:4E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rZHm_srJBbW_4fMTgJdLNQO-cE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e2:c9:cc:3e:38:c8:dd:0a:e6:84:d4:16:b5:b6:71:c7:97:
88:f1:d5:cf:9b:a0:69:7e:05:47:8e:bd:d0:43:81:8c:6d:1c:
2e:1c:f7:15:0a:17:4b:74:07:c1:c2:42:5d:af:62:84:11:1a:
90:04:ae:d5:1b:b0:02:b9:b7:89:f0:2d:7c:a8:d7:d2:94:3e:
e5:c8:a7:85:11:68:8a:59:ae:88:eb:1c:17:7a:ae:54:8a:4b:
d6:12:75:71:03:8d:c3:4b:d5:7d:66:45:b0:bb:d0:f8:af:9d:
98:88:d1:81:36:78:bf:21:6b:2c:c5:b9:ab:bb:81:ca:c2:d4:
59:38:2d:ae:06:4d:07:df:d9:b6:96:52:2d:14:ff:08:98:43:
0e:bf:71:d6:6c:13:f8:10:dc:c6:ae:a4:57:c4:ac:5b:b5:0a:
4b:3f:2a:6b:1a:55:f7:74:03:41:1e:f6:31:29:69:5d:28:cd:
86:82:00:5d:b7:2a:2a:70:cf:4c:6e:8b:78:40:6f:af:0a:93:
18:3a:e4:e3:72:3c:f4:27:ff:b0:1d:a2:e5:04:44:70:40:33:
7d:36:ef:91:aa:be:cd:e1:ef:6f:98:a6:64:9a:10:a8:53:84:
b8:7a:60:84:4f:6b:6a:06:9e:ab:83:de:62:22:50:98:b1:60:
ca:eb:3e:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2sJ48YJU/KLpp7Nt+TM6KmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNDIwMTgyOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDkxZTZmZWNhYzkwNWI1YmZlMWYzMTM4MDk3NGIzNTAzYmU3MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r0pVMdzDVWLnzIlHbn+eDFVeEE4
f9c05T+XDvevPTMAGF7+lq1CbIzIwiEgVOJ58roWkRv/d/50Vr+x6K60GvlNN3hL
AnDQWekxc4NzlNpUOynWXfASvFfqWD9AM6N5OhiZw5xsWjLYHodfgI1f9bQK1p0b
K+gdhtIZcfh7zAxwrrteTFvKhPIGGYsBzhCNxQ23spQ5M3ICCquAXqSt4hjNuYR+
eHM5p3fvM0STcGprH0syyHTpfp8/D5yEzwW1trVQfj0/feNyW3EfUKwemk5bE6ad
lKQKwWGgoLdxzBoxezEb020DaTdjV/1JnufD+CAqT4weJcmCuTs9a/9JywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2R5v7KyQW1v+HzE4CXSzUDvnBOMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvclpIbV9zckpCYldfNGZNVGdKZExOUU8tY0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkzmMA0G
CSqGSIb3DQEBCwUAA4IBAQAX4snMPjjI3QrmhNQWtbZxx5eI8dXPm6BpfgVHjr3Q
Q4GMbRwuHPcVChdLdAfBwkJdr2KEERqQBK7VG7ACubeJ8C18qNfSlD7lyKeFEWiK
Wa6I6xwXeq5UikvWEnVxA43DS9V9ZkWwu9D4r52YiNGBNni/IWssxbmru4HKwtRZ
OC2uBk0H39m2llItFP8ImEMOv3HWbBP4ENzGrqRXxKxbtQpLPyprGlX3dANBHvYx
KWldKM2GggBdtyoqcM9Mbot4QG+vCpMYOuTjcjz0J/+wHaLlBERwQDN9Nu+Rqr7N
4e9vmKZkmhCoU4S4emCET2tqBp6rg95iIlCYsWDK6z6v
-----END CERTIFICATE-----
Generated at Wed Apr 22 08:37:20 2026 by rpki-client