Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PtMqr7XOEchmnN0UpuDUa87416U.roa
File: PtMqr7XOEchmnN0UpuDUa87416U.roa (raw, json)
Hash identifier: u8GzigVLod9OIOdMP/BuOntaFR4Nciw4tkPhsBD9BUI=
Subject key identifier: 3E:D3:2A:AF:B5:CE:11:C8:66:9C:DD:14:A6:E0:D4:6B:CE:F8:D7:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0E800734EDE82B22D15876996B3DC7617
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PtMqr7XOEchmnN0UpuDUa87416U.roa
Signing time: Mon 28 Sep 2026 12:32:18 +0000
ROA not before: Mon 28 Sep 2026 12:32:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:00:73:4e:de:82:b2:2d:15:87:69:96:b3:dc:76:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 28 12:32:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ed32aafb5ce11c8669cdd14a6e0d46bcef8d7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:6e:c7:a5:de:fd:5c:f4:d2:63:c6:bf:b7:
ed:10:f1:1b:2b:e3:25:b9:f5:a7:09:3f:ae:ec:7a:
98:9f:5a:23:00:4d:4c:cc:01:28:d7:61:93:40:69:
74:bf:80:ad:3c:c8:50:6d:b6:ea:83:8a:59:e6:b7:
27:d9:9d:33:d5:cf:f2:e8:d9:7c:f8:40:1a:f5:17:
29:05:12:83:72:a7:4e:23:88:49:0c:07:88:9d:25:
2e:c8:f9:66:ec:dd:a4:40:a2:50:b8:c7:1d:cc:78:
34:37:47:11:f3:f1:2d:4e:17:52:44:6f:ba:2d:11:
8d:eb:1b:54:b3:af:31:73:4f:44:57:7d:b6:68:01:
4b:90:39:b3:c9:30:cf:0b:9b:08:a4:73:c0:00:d3:
b8:ed:0e:c2:f1:ab:0a:3d:35:6e:6e:e8:27:1c:52:
3d:15:d4:e9:31:74:0e:d7:a1:21:0d:fd:66:46:e2:
dd:0c:1e:47:28:ee:10:d6:9d:6e:a0:82:d7:38:67:
8b:b3:4c:35:19:aa:b0:64:36:4d:6a:a6:02:5b:02:
b6:ce:f8:7d:35:d1:97:fc:b1:56:d9:8d:5e:5c:fd:
c9:b4:c0:d0:82:9f:ca:7e:0e:5b:60:df:c0:b4:00:
0e:72:9d:9a:85:c7:96:b7:e5:b8:34:37:9f:c0:50:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:2A:AF:B5:CE:11:C8:66:9C:DD:14:A6:E0:D4:6B:CE:F8:D7:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PtMqr7XOEchmnN0UpuDUa87416U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.200.0/24
193.124.202.0/24
193.124.206.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.6.0/23
194.87.53.0/24
194.87.59.0/24
194.87.67.0/24
194.87.81.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.160.0/24
194.87.163.0/24
194.87.172.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.251.0/24
212.193.0.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
40:4b:23:9b:0a:33:cd:b1:78:60:c4:50:5c:0a:3a:e6:12:ec:
2c:cd:ac:ee:2d:3e:38:17:9e:57:cc:71:3a:40:94:3f:8c:f7:
a3:6f:16:f8:4f:3c:8c:54:55:0a:e6:4b:b9:ba:a0:c1:62:c7:
f8:29:d4:b2:1a:a6:de:25:93:93:f1:9e:e3:51:1e:92:5f:2c:
a7:5b:ad:c6:2a:ac:99:cb:3a:d4:bf:74:0e:97:32:9b:78:33:
52:18:20:1e:ab:81:a2:d4:a5:39:ef:18:4d:93:f2:4f:34:76:
f2:35:38:ef:2d:15:22:3a:24:fd:82:59:55:1c:44:f7:b6:50:
77:b2:42:0f:78:d5:d0:f3:af:af:0d:14:87:0a:e2:9b:e8:56:
1c:65:9c:6b:35:23:97:ca:7e:f3:20:c2:24:fb:c8:2e:0e:8b:
89:0a:ae:cf:cf:6b:87:0d:d9:7f:9d:1e:0e:f8:37:ef:70:f7:
67:9e:8f:53:d9:a6:38:f3:48:6d:7a:d3:e7:03:79:c9:64:7c:
bc:d2:ba:27:8e:e6:6a:c0:a0:96:f2:b8:18:46:4e:d0:a8:89:
b4:6f:3f:e7:95:ee:17:c2:2e:37:bc:74:7e:21:f7:fa:39:d7:
91:23:93:1b:aa:6e:24:39:b0:86:c0:e2:b1:e3:71:ae:39:b8:
40:93:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:31:45 2026 by rpki-client