Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B1CYTworuTbZRdP2dDu33aazs3E.roa
File: B1CYTworuTbZRdP2dDu33aazs3E.roa (raw, json)
Hash identifier: vpDCExzr098QQKACJbnhP16M0hROEPFuPli5qDb+IGY=
Subject key identifier: 07:50:98:4F:0A:2B:B9:36:D9:45:D3:F6:74:3B:B7:DD:A6:B3:B3:71
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FA7FF0378FEE1F53A53CA1F204CDEBED5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B1CYTworuTbZRdP2dDu33aazs3E.roa
Signing time: Tue 28 Jul 2026 09:12:15 +0000
ROA not before: Tue 28 Jul 2026 09:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 194.87.116.0/23 maxlen: 23
194.87.154.0/23 maxlen: 23
194.87.176.0/23 maxlen: 23
194.87.180.0/23 maxlen: 23
195.58.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:ff:03:78:fe:e1:f5:3a:53:ca:1f:20:4c:de:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 28 09:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0750984f0a2bb936d945d3f6743bb7dda6b3b371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:50:ce:89:42:f9:0f:8e:6b:52:cf:43:77:
12:cc:98:81:d4:f3:a1:00:c7:55:6d:ec:62:18:b2:
88:19:cb:00:9b:13:4e:f0:fe:fc:1e:fe:79:76:bf:
63:73:80:24:b6:81:4b:3e:e7:45:c7:e8:dd:0f:00:
2a:82:11:78:fe:5d:8e:81:34:e4:d5:dc:41:ea:79:
f2:58:e8:5b:32:94:3c:ae:ff:ea:5b:d0:3c:3e:21:
e9:64:19:77:15:d0:2e:6c:5b:1c:19:6c:d6:85:70:
4c:19:4d:29:25:9b:c6:bf:53:6d:5c:8d:f6:81:c5:
3e:14:4c:42:33:54:81:39:80:d0:2b:a4:7b:11:e4:
d1:cf:38:28:e4:f7:f8:ee:61:b6:a2:0c:dc:c7:ec:
e6:68:72:55:54:3b:1e:32:2b:bf:71:70:53:94:50:
56:4c:d7:cc:b5:70:ef:af:bc:f2:9b:9b:e8:e5:b7:
60:de:f4:be:de:5d:35:35:4c:bd:69:54:e1:3b:e1:
4c:90:16:20:62:1c:45:77:c4:f3:fb:ea:a6:97:7b:
cd:9e:d8:88:f8:ff:4a:4d:ce:7c:63:5e:0d:18:8c:
db:9f:a2:22:22:1c:64:86:6e:d0:7d:17:ab:2d:83:
3c:1d:9d:68:be:16:c2:4d:e3:6a:8d:9a:46:3d:37:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:98:4F:0A:2B:B9:36:D9:45:D3:F6:74:3B:B7:DD:A6:B3:B3:71
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B1CYTworuTbZRdP2dDu33aazs3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.116.0/23
194.87.154.0/23
194.87.176.0/23
194.87.180.0/23
195.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ee:5e:23:a9:01:f4:f6:18:70:90:49:a0:35:61:70:e2:03:
b4:4b:74:22:bf:37:b3:57:9d:85:14:fc:b5:76:d9:8b:a3:ca:
32:cb:6a:d4:c4:90:3e:4f:92:8e:7b:c5:76:69:02:6a:b6:2c:
1c:69:f3:92:40:e7:f7:63:d5:a7:fd:b5:48:ad:fb:75:f1:ec:
a7:b4:41:ad:d8:c3:fe:02:fd:4f:fc:7c:dd:23:b9:25:7d:a4:
79:ec:dd:e2:9c:7a:8a:2b:5c:d7:3c:94:f0:87:10:37:4b:8f:
79:08:97:ae:74:f8:f4:fc:5b:57:59:24:1c:ee:38:c8:a2:13:
1b:7e:50:88:7a:9e:cd:c5:b8:fa:7f:e5:77:4f:64:72:66:e1:
19:8e:84:e7:b2:c7:11:35:37:2f:e1:8a:b9:24:88:94:58:2f:
65:8f:72:99:39:9a:be:a6:af:00:fd:14:0b:d1:92:fd:74:98:
64:90:ce:a6:10:f7:84:d5:25:a4:fb:3d:f5:ec:22:1d:d3:bb:
20:2a:cc:22:a0:d3:9c:c8:a0:88:67:eb:cd:98:0a:bb:c3:b7:
cf:e3:b3:ef:46:7a:18:d5:4d:b7:5a:c3:de:0e:dd:19:34:0e:
1a:ab:9f:00:d0:80:41:96:6e:87:55:22:3e:97:e6:23:24:26:
32:80:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:47 2026 by rpki-client