Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wqFJgQqswlFZOhHD_yrweW35L3Q.roa
File: wqFJgQqswlFZOhHD_yrweW35L3Q.roa (raw, json)
Hash identifier: x3ZpeOXgky7GxaKkUj6zoqaMSx5W4t2bC6VNlhlLGvo=
Subject key identifier: C2:A1:49:81:0A:AC:C2:51:59:3A:11:C3:FF:2A:F0:79:6D:F9:2F:74
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E8DBC062A728CED628F378916751CC22C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wqFJgQqswlFZOhHD_yrweW35L3Q.roa
Signing time: Wed 03 Jun 2026 13:46:10 +0000
ROA not before: Wed 03 Jun 2026 13:46:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:bc:06:2a:72:8c:ed:62:8f:37:89:16:75:1c:c2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 3 13:46:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2a149810aacc251593a11c3ff2af0796df92f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:f7:48:2e:c2:86:30:37:86:04:98:3e:d2:
4f:0a:ad:7f:92:80:6b:da:6c:ab:f2:1a:9a:14:19:
b0:03:f0:65:60:c9:a6:63:0b:f2:ba:f2:90:9b:29:
0a:ff:a0:b8:5b:0b:c9:9e:c5:e4:6a:4c:5b:f5:0f:
b8:a6:b2:9a:59:aa:68:7c:19:61:2b:ec:ee:0f:5f:
99:49:60:d5:68:f2:c0:45:9b:8b:18:9a:52:8d:d4:
62:d3:56:a8:11:f6:0b:f5:70:f8:31:e4:55:05:9c:
35:c7:cb:48:d2:6d:fc:06:c6:09:10:83:18:76:b9:
8f:a0:b6:98:65:8e:94:f1:30:ac:ef:af:d2:85:c4:
b7:9b:ff:25:1d:5b:56:21:a3:6c:b3:4e:4e:56:86:
65:fd:3a:ba:6b:75:8e:4c:fe:77:11:7e:94:76:b1:
c9:7d:e3:e2:0c:43:29:01:74:23:1c:df:a1:15:08:
b0:40:63:35:14:14:2e:a9:0e:8a:b3:f7:39:6e:17:
39:ec:8c:2f:07:89:93:94:4d:e2:ec:cf:6c:8f:31:
48:40:12:86:5a:e9:f1:20:5e:61:75:a7:76:69:2c:
ea:ec:6f:7d:7a:bd:cb:14:98:02:ac:35:a4:a0:aa:
ac:0a:86:64:82:9a:5d:2e:e1:a3:bc:fb:4f:e2:34:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:49:81:0A:AC:C2:51:59:3A:11:C3:FF:2A:F0:79:6D:F9:2F:74
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wqFJgQqswlFZOhHD_yrweW35L3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
193.124.206.0/24
194.58.56.0/24
194.58.154.0/23
194.87.18.0/24
194.87.48.0/24
194.87.51.0/24
194.87.54.0/23
194.87.125.0/24
194.87.178.0/24
194.87.233.0/24
194.87.255.0/24
195.133.9.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a1:27:11:61:55:df:e9:ee:53:14:90:e2:58:ec:b9:85:fa:
20:29:fd:a7:20:3f:69:8a:50:83:4d:06:96:aa:64:d5:61:e5:
12:0c:bd:31:56:60:03:06:4d:eb:ac:c6:59:f9:95:2b:1f:4c:
dc:ee:7e:da:64:6e:63:21:db:06:51:31:cf:3a:38:a5:bf:d2:
b7:70:08:da:02:04:2f:bb:34:61:e6:24:5a:4f:7f:9e:57:72:
90:ba:e3:74:f6:97:7f:7b:82:25:96:85:bb:5c:4e:e5:7b:2f:
61:14:e8:0d:88:5c:72:7b:03:be:3f:7a:21:b3:9d:3d:3d:ab:
a1:51:81:f4:88:85:14:d9:e5:bb:0d:9f:b4:8e:57:50:71:d2:
8b:9e:76:04:14:40:71:52:15:4f:9b:d6:19:c2:bb:8a:3a:4b:
0e:1e:1e:5a:8d:34:d4:2e:56:d7:7a:46:03:3c:0e:04:36:f4:
c4:a0:86:b8:3d:aa:82:d0:59:1b:da:28:ab:88:11:4e:8a:75:
da:b0:ba:f2:34:d2:65:f1:8b:79:6a:97:67:d1:c0:c3:50:de:
da:53:6f:d4:6a:b8:74:d0:5a:6c:b9:63:ce:ae:8f:dd:4a:18:
8b:f2:02:5f:b1:d4:b9:fc:7a:3d:a2:56:cd:e7:da:0b:23:91:
1f:5a:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:36 2026 by rpki-client