Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4R2ucafVNcq9qfE-UFs-1UVST7k.roa
File: 4R2ucafVNcq9qfE-UFs-1UVST7k.roa (raw, json)
Hash identifier: P9ADS7yfRoOihD4jQ0jj/bUCmEA8oniKBlgdFzbCGMI=
Subject key identifier: E1:1D:AE:71:A7:D5:35:CA:BD:A9:F1:3E:50:5B:3E:D5:45:52:4F:B9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EB19635D41244F40CF75829F3472D0CAB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4R2ucafVNcq9qfE-UFs-1UVST7k.roa
Signing time: Wed 10 Jun 2026 12:51:11 +0000
ROA not before: Wed 10 Jun 2026 12:51:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 194.87.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:96:35:d4:12:44:f4:0c:f7:58:29:f3:47:2d:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 10 12:51:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e11dae71a7d535cabda9f13e505b3ed545524fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:23:54:af:31:99:2e:c8:dc:6b:e1:a1:5a:
fa:4a:a7:b2:77:a4:2b:97:61:5a:86:9b:9a:7c:5f:
f3:cf:71:1e:69:2c:b5:c8:da:86:a2:f7:0f:ec:c3:
d5:4e:dd:bc:7a:55:ab:cd:d3:c7:07:ce:a9:57:02:
2c:e9:fe:58:b3:94:ea:22:11:01:d1:8a:fe:06:72:
ef:cb:46:22:ea:4e:28:06:77:71:a4:ae:ee:ed:64:
d2:f5:f1:66:ee:5d:6f:1a:da:e3:ce:3d:ee:2b:2a:
4c:39:c2:c5:fa:b6:8f:48:b1:d2:01:60:75:aa:24:
2a:25:55:f5:4a:0e:3c:21:3d:dc:2e:ec:31:1b:81:
b7:e0:3a:f7:43:af:ab:bc:f1:b1:aa:28:e9:bb:75:
18:b7:ef:53:ab:eb:3c:ae:1a:ac:7f:a7:3a:9a:cd:
95:e1:b8:c2:19:e5:8c:68:e7:b1:f3:fa:7b:0a:12:
e1:78:61:1d:e9:53:40:a6:c0:63:5d:5e:b1:0e:e6:
6e:bc:75:b6:4c:f3:21:72:05:a5:1a:2a:6a:ad:49:
de:bc:79:24:29:9b:02:fc:42:e1:87:30:3d:8b:a1:
01:cf:4e:a8:6e:ad:ca:38:2b:fb:c3:8b:99:d4:fe:
49:9f:22:ef:47:bc:75:bd:92:bd:41:8f:10:18:38:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:AE:71:A7:D5:35:CA:BD:A9:F1:3E:50:5B:3E:D5:45:52:4F:B9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4R2ucafVNcq9qfE-UFs-1UVST7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.159.0/24
Signature Algorithm: sha256WithRSAEncryption
13:eb:8c:29:bd:38:2d:f3:e2:16:0b:16:22:0e:d2:c8:2f:8f:
0c:6b:02:55:b5:dd:91:ec:e5:ae:33:2a:95:86:ce:a1:22:20:
7d:6d:96:3a:9e:d3:7b:80:fd:9b:4d:c2:b3:4e:52:2d:26:e3:
22:6f:52:d0:69:ae:a4:bd:d8:d8:ce:82:a9:9c:3b:61:db:81:
bc:a6:9a:c0:40:96:c5:9c:a4:15:38:7c:51:28:2d:09:a6:e8:
90:37:38:92:8e:01:b1:fc:fb:95:dc:02:04:39:72:b1:84:27:
50:d2:2f:8f:ad:98:3c:ba:0b:53:19:0f:2e:50:2c:59:11:76:
fb:6a:87:f5:20:0c:bc:fd:3b:f8:67:38:48:a3:b4:29:95:9a:
3f:9f:20:86:f5:a6:d9:49:ed:6f:0c:d5:6b:55:9e:81:9f:4e:
e7:0f:ea:64:a3:0c:79:76:d1:08:2b:cf:7d:7b:d2:6c:e0:46:
38:eb:b8:01:e6:22:e1:99:9e:f3:e3:6e:9a:33:a7:1d:75:b2:
7b:dc:f7:e4:4e:38:22:12:bb:a4:60:f8:06:74:3d:bd:3c:63:
35:45:ad:de:54:2d:2c:84:c5:8b:c1:b2:8b:ca:b9:d0:df:54:
d8:d1:df:f7:b5:9c:59:83:46:2a:23:79:a9:d7:dd:bd:3d:e1:
dc:42:f2:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6xljXUEkT0DPdYKfNHLQyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNjEwMTI1MTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTFkYWU3MWE3ZDUzNWNhYmRhOWYxM2U1MDViM2VkNTQ1NTI0ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlesjVK8xmS7I3GvhoVr6Sqeyd6Qr
l2FahpuafF/zz3EeaSy1yNqGovcP7MPVTt28elWrzdPHB86pVwIs6f5Ys5TqIhEB
0Yr+BnLvy0Yi6k4oBndxpK7u7WTS9fFm7l1vGtrjzj3uKypMOcLF+raPSLHSAWB1
qiQqJVX1Sg48IT3cLuwxG4G34Dr3Q6+rvPGxqijpu3UYt+9Tq+s8rhqsf6c6ms2V
4bjCGeWMaOex8/p7ChLheGEd6VNApsBjXV6xDuZuvHW2TPMhcgWlGipqrUnevHkk
KZsC/ELhhzA9i6EBz06obq3KOCv7w4uZ1P5JnyLvR7x1vZK9QY8QGDhNYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEdrnGn1TXKvanxPlBbPtVFUk+5MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNFIydWNhZlZOY3E5cWZFLVVGcy0xVVZTVDdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlefMA0G
CSqGSIb3DQEBCwUAA4IBAQAT64wpvTgt8+IWCxYiDtLIL48MawJVtd2R7OWuMyqV
hs6hIiB9bZY6ntN7gP2bTcKzTlItJuMib1LQaa6kvdjYzoKpnDth24G8pprAQJbF
nKQVOHxRKC0JpuiQNziSjgGx/PuV3AIEOXKxhCdQ0i+PrZg8ugtTGQ8uUCxZEXb7
aof1IAy8/Tv4ZzhIo7QplZo/nyCG9abZSe1vDNVrVZ6Bn07nD+pkowx5dtEIK899
e9Js4EY467gB5iLhmZ7z426aM6cddbJ73PfkTjgiErukYPgGdD29PGM1Ra3eVC0s
hMWLwbKLyrnQ31TY0d/3tZxZg0YqI3mp1929PeHcQvKq
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:53 2026 by rpki-client