Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TiFbtL57PCJ5KTpK33hbaXtfmRc.roa
File: TiFbtL57PCJ5KTpK33hbaXtfmRc.roa (raw, json)
Hash identifier: nmbvvUAiU928YvkRIEdNoJCP/mXi0pSqxq6HluMofLk=
Subject key identifier: 4E:21:5B:B4:BE:7B:3C:22:79:29:3A:4A:DF:78:5B:69:7B:5F:99:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A09E4614A0A708BEA240C0F092047CB606
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TiFbtL57PCJ5KTpK33hbaXtfmRc.roa
Signing time: Mon 14 Sep 2026 04:56:27 +0000
ROA not before: Mon 14 Sep 2026 04:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 192.124.188.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:46:14:a0:a7:08:be:a2:40:c0:f0:92:04:7c:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 14 04:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e215bb4be7b3c2279293a4adf785b697b5f9917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:3e:92:34:75:73:b3:ee:68:7a:7e:4b:dd:
42:3b:e5:88:d0:ac:a8:e4:52:c0:23:f6:1e:2f:d6:
a8:44:fe:fe:72:ae:5c:dc:83:46:38:b0:1e:80:3b:
f1:4a:75:d0:cf:68:e3:84:ed:23:19:99:45:33:cc:
a9:ff:68:95:27:19:12:f4:fe:ad:4a:10:53:13:08:
98:4f:1f:33:12:3c:95:f8:f4:75:4f:16:c9:1a:c4:
6f:0a:c2:a9:79:4d:73:17:6e:76:43:a4:14:bf:83:
70:07:1f:f6:dc:7b:22:6f:82:f3:0f:e0:3c:ad:be:
1f:2e:36:92:33:15:a5:7d:fa:47:14:ab:8e:94:ff:
ec:ba:d0:b8:75:c1:51:12:26:80:22:9c:41:bb:82:
c7:b3:d2:a6:52:1d:f5:e5:8b:82:77:bf:2c:f3:2e:
24:fb:7d:f6:8c:3a:32:b7:f1:2f:42:ed:94:da:bf:
7e:2e:74:1a:c5:cc:85:08:19:03:2d:6f:d1:07:65:
d7:2c:0b:0b:9a:21:12:36:2e:a4:4f:37:4c:bc:71:
57:4d:c8:66:5e:d2:ae:86:12:55:32:96:20:34:80:
34:92:a3:b9:47:49:45:b7:0d:72:2c:4d:68:55:4e:
8e:74:67:c9:6c:47:8b:e3:55:df:9c:09:51:77:96:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:5B:B4:BE:7B:3C:22:79:29:3A:4A:DF:78:5B:69:7B:5F:99:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TiFbtL57PCJ5KTpK33hbaXtfmRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
194.87.66.0/24
194.87.75.0/24
194.87.170.0/24
194.87.229.0/24
194.135.32.0/24
195.58.60.0/24
195.133.43.0/24
195.133.95.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
68:54:50:34:15:3f:1c:49:8d:75:f9:47:7e:03:3f:9d:18:76:
30:d8:6e:71:05:b7:47:0e:be:51:83:0c:7b:da:65:32:5b:d9:
da:1b:64:8e:c9:4b:6c:56:3e:41:34:1c:4d:25:4e:0b:d6:56:
88:b3:e0:6e:9b:46:6c:60:54:df:6b:b6:23:06:16:eb:24:02:
0e:41:3a:fb:be:26:03:6f:2d:40:4a:51:85:59:3e:0c:bd:fe:
68:56:44:5c:62:5e:ed:e3:45:c2:5a:09:dc:e0:b8:c5:32:e5:
5e:21:2b:c0:a7:13:aa:f8:7e:49:d0:91:4c:5a:7b:7b:ee:19:
8b:a3:63:d5:86:32:27:ef:37:88:df:3f:c3:37:7b:8d:1b:d8:
70:70:fd:58:59:df:87:6a:f4:90:b8:1c:98:a2:7e:cd:74:12:
aa:85:3f:c9:1b:3d:09:4a:9c:b1:57:81:1d:78:a1:4b:e7:55:
4a:36:3b:b1:aa:5b:9e:cb:cf:e8:ac:0c:8d:48:20:55:e4:db:
b2:34:f0:cf:79:dc:93:20:75:47:45:9b:7e:c8:a3:b9:e0:5a:
14:a6:d8:c0:e4:43:79:a7:70:1a:8b:40:e2:11:6a:38:ed:e4:
76:2f:b6:fc:7a:41:78:13:e8:40:60:b8:3d:dc:aa:e0:1b:1d:
10:68:b0:d3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaCeRhSgpwi+okDA8JIEfLYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTE0MDQ1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTIxNWJiNGJlN2IzYzIyNzkyOTNhNGFkZjc4NWI2OTdiNWY5OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq44+kjR1c7PuaHp+S91CO+WI0Kyo
5FLAI/YeL9aoRP7+cq5c3INGOLAegDvxSnXQz2jjhO0jGZlFM8yp/2iVJxkS9P6t
ShBTEwiYTx8zEjyV+PR1TxbJGsRvCsKpeU1zF252Q6QUv4NwBx/23Hsib4LzD+A8
rb4fLjaSMxWlffpHFKuOlP/sutC4dcFREiaAIpxBu4LHs9KmUh315YuCd78s8y4k
+332jDoyt/EvQu2U2r9+LnQaxcyFCBkDLW/RB2XXLAsLmiESNi6kTzdMvHFXTchm
XtKuhhJVMpYgNIA0kqO5R0lFtw1yLE1oVU6OdGfJbEeL41XfnAlRd5a3fwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFE4hW7S+ezwieSk6St94W2l7X5kXMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVGlGYnRMNTdQQ0o1S1RwSzMzaGJhWHRmbVJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAwHy8AwQA
wldCAwQAwldLAwQAwleqAwQAwlflAwQAwocgAwQAwzo8AwQAw4UrAwQAw4VfAwQB
1MEMMA0GCSqGSIb3DQEBCwUAA4IBAQBoVFA0FT8cSY11+Ud+Az+dGHYw2G5xBbdH
Dr5Rgwx72mUyW9naG2SOyUtsVj5BNBxNJU4L1laIs+Bum0ZsYFTfa7YjBhbrJAIO
QTr7viYDby1ASlGFWT4Mvf5oVkRcYl7t40XCWgnc4LjFMuVeISvApxOq+H5J0JFM
Wnt77hmLo2PVhjIn7zeI3z/DN3uNG9hwcP1YWd+HavSQuByYon7NdBKqhT/JGz0J
SpyxV4EdeKFL51VKNjuxqluey8/orAyNSCBV5NuyNPDPedyTIHVHRZt+yKO54FoU
ptjA5EN5p3Aai0DiEWo47eR2L7b8ekF4E+hAYLg93KrgGx0QaLDT
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:04 2026 by rpki-client