Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/917bWav4e-3uSOEle46DMPVlaB0.roa
File: 917bWav4e-3uSOEle46DMPVlaB0.roa (raw, json)
Hash identifier: EpRJTfI5SrfSuu2FU6ZOtDwOPuHuWhGiQTuaukvhTvs=
Subject key identifier: F7:5E:DB:59:AB:F8:7B:ED:EE:48:E1:25:7B:8E:83:30:F5:65:68:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A08FDAABA851C28E7A59D9568F648D4939
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/917bWav4e-3uSOEle46DMPVlaB0.roa
Signing time: Fri 11 Sep 2026 09:44:27 +0000
ROA not before: Fri 11 Sep 2026 09:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 62.76.231.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:da:ab:a8:51:c2:8e:7a:59:d9:56:8f:64:8d:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 09:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f75edb59abf87bedee48e1257b8e8330f565681d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:b2:76:ee:37:7d:fa:63:46:a4:b0:13:c3:
13:26:43:61:16:a7:8c:75:d4:c2:af:07:d5:da:3d:
d3:1d:4e:ad:c0:0c:db:f3:9f:4f:05:f8:d1:61:92:
e4:d6:1f:ee:36:e4:95:ed:b5:23:a7:18:88:52:3d:
51:11:c5:0d:af:d9:80:e4:cc:c0:b8:52:df:67:ee:
88:72:2e:01:8b:25:2a:68:ab:b9:be:65:9e:de:7b:
7b:64:88:bb:51:2f:d3:55:c3:db:1d:26:9c:f8:18:
a2:7d:55:1b:d8:0f:c3:c8:a5:de:07:d8:98:27:4f:
5c:fe:70:9a:7c:ea:93:1f:94:c0:a5:77:6d:bd:9b:
4a:fa:4a:9f:18:a2:f8:27:03:16:69:3d:c1:4c:53:
2a:56:45:2e:e1:10:84:da:89:dc:c9:fb:db:f8:c8:
3c:dd:50:3d:8e:d3:80:b4:43:90:79:85:5b:9c:1f:
9d:ef:0e:e2:a4:1d:b4:76:9e:31:35:e5:83:6e:45:
b9:c5:49:8d:35:f5:e0:8a:fb:04:1a:77:e9:b1:e9:
67:90:9d:25:b5:f7:22:4b:4b:7b:ce:e1:bd:06:fe:
da:e0:66:78:b5:32:32:9f:15:3a:b3:8e:aa:ed:23:
88:46:1f:54:d9:b0:1e:29:f6:e0:c7:71:ae:8c:e7:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5E:DB:59:AB:F8:7B:ED:EE:48:E1:25:7B:8E:83:30:F5:65:68:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/917bWav4e-3uSOEle46DMPVlaB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.173.0/24
194.87.61.0/24
194.87.228.0/24
Signature Algorithm: sha256WithRSAEncryption
97:11:5e:50:8e:3e:69:58:76:eb:76:5b:fb:7c:23:5c:91:57:
ba:de:f2:df:3e:04:e9:21:75:dd:2c:04:b2:f3:60:4d:da:ff:
3d:31:58:52:6a:8b:67:7b:5d:41:78:82:5e:49:0d:b2:c3:15:
86:af:c4:f4:5d:5e:7e:fb:d7:d9:98:74:90:a0:45:d3:40:be:
52:c8:09:2b:e0:50:cd:1a:b0:62:6a:8b:b3:6a:c0:bf:b8:25:
b3:63:53:e4:f5:9b:88:64:32:52:6d:9e:72:d4:b5:da:f4:1b:
ac:1e:be:de:9b:10:27:55:aa:9c:37:e5:9e:87:78:3b:a4:2a:
38:17:4f:6d:c7:86:e5:7a:ee:b5:27:7b:f7:e0:9c:bd:fb:c9:
3d:4e:4f:dc:2a:02:28:75:04:87:f5:26:9b:42:d3:f5:6c:73:
0f:80:9e:7d:b1:d9:37:d5:3a:74:4c:e6:fc:61:67:bd:35:8e:
f1:2c:64:81:80:22:70:d3:6a:de:60:97:69:5a:7e:cb:f8:08:
5e:da:f8:c5:df:c5:3b:33:07:f0:a8:4b:7b:35:d8:8e:d1:ad:
ae:10:46:fe:f3:74:03:a7:ce:58:94:08:52:03:c8:56:1d:d3:
5a:fa:38:33:8e:03:8a:72:6a:0e:1b:73:17:f9:dc:00:29:3d:
29:0c:f6:8d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaCP2quoUcKOelnZVo9kjUk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTExMDk0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzVlZGI1OWFiZjg3YmVkZWU0OGUxMjU3YjhlODMzMGY1NjU2ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25aydu43ffpjRqSwE8MTJkNhFqeM
ddTCrwfV2j3THU6twAzb859PBfjRYZLk1h/uNuSV7bUjpxiIUj1REcUNr9mA5MzA
uFLfZ+6Ici4BiyUqaKu5vmWe3nt7ZIi7US/TVcPbHSac+BiifVUb2A/DyKXeB9iY
J09c/nCafOqTH5TApXdtvZtK+kqfGKL4JwMWaT3BTFMqVkUu4RCE2oncyfvb+Mg8
3VA9jtOAtEOQeYVbnB+d7w7ipB20dp4xNeWDbkW5xUmNNfXgivsEGnfpselnkJ0l
tfciS0t7zuG9Bv7a4GZ4tTIynxU6s46q7SOIRh9U2bAeKfbgx3GujOcJZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPde21mr+Hvt7kjhJXuOgzD1ZWgdMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOTE3YldhdjRlLTN1U09FbGU0NkRNUFZsYUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPkznAwQA
wHytAwQAwlc9AwQAwlfkMA0GCSqGSIb3DQEBCwUAA4IBAQCXEV5Qjj5pWHbrdlv7
fCNckVe63vLfPgTpIXXdLASy82BN2v89MVhSaotne11BeIJeSQ2ywxWGr8T0XV5+
+9fZmHSQoEXTQL5SyAkr4FDNGrBiaouzasC/uCWzY1Pk9ZuIZDJSbZ5y1LXa9Bus
Hr7emxAnVaqcN+Weh3g7pCo4F09tx4bleu61J3v34Jy9+8k9Tk/cKgIodQSH9Sab
QtP1bHMPgJ59sdk31Tp0TOb8YWe9NY7xLGSBgCJw02reYJdpWn7L+Ahe2vjF38U7
MwfwqEt7NdiO0a2uEEb+83QDp85YlAhSA8hWHdNa+jgzjgOKcmoOG3MX+dwAKT0p
DPaN
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:12 2026 by rpki-client