Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U_t6EHf4OVFgLw59JBXCtR74_MA.roa
File: U_t6EHf4OVFgLw59JBXCtR74_MA.roa (raw, json)
Hash identifier: PaOFxvzSHglptqr3uVjvkwyl3QCrNXBhuZPrhqGUB2o=
Subject key identifier: 53:FB:7A:10:77:F8:39:51:60:2F:0E:7D:24:15:C2:B5:1E:F8:FC:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019C5CBECA26CAA8017E77A511B9439EA746
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U_t6EHf4OVFgLw59JBXCtR74_MA.roa
Signing time: Sat 14 Feb 2026 15:22:13 +0000
ROA not before: Sat 14 Feb 2026 15:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5c:be:ca:26:ca:a8:01:7e:77:a5:11:b9:43:9e:a7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 14 15:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53fb7a1077f83951602f0e7d2415c2b51ef8fcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:b9:ed:c1:ca:46:19:f4:dd:8d:5d:97:ae:
41:d3:4a:bc:e7:77:ba:0a:f2:2b:35:9c:9c:a7:82:
8e:82:92:3f:6e:53:97:12:ab:a0:95:c8:ca:c0:d8:
d1:49:c8:6c:87:9a:0b:40:3c:32:68:d4:bb:58:76:
ab:e9:a1:05:11:90:29:31:cb:07:d1:07:26:7b:4c:
4f:2c:af:a4:3e:69:d6:0f:80:6d:c8:ae:1e:31:5c:
9c:e5:a2:0c:29:4f:8c:89:75:9a:10:42:18:cc:06:
ff:58:89:8d:f7:6f:0e:17:f0:64:bf:85:a3:74:1a:
0f:70:a4:20:a2:51:56:4e:a9:1c:d3:41:40:a1:05:
d4:e1:7d:1c:e0:aa:f3:4b:d2:8b:f1:b8:4b:52:df:
d3:38:e0:c2:fd:a3:58:1c:9e:2f:d9:a1:c5:ec:c9:
f4:70:6d:a2:eb:60:b7:1a:58:92:2e:bc:fc:eb:1a:
e4:fd:2d:68:d0:50:b2:50:d6:07:d1:69:cd:b6:19:
64:4f:90:6d:92:e8:da:96:a2:c9:e4:c9:46:9e:36:
6d:f9:26:15:a5:fc:00:5c:b0:fe:59:03:06:98:97:
cf:8f:73:58:90:6b:63:11:e8:f9:06:00:92:2f:10:
a7:e0:86:b8:08:bb:f2:a9:a9:18:19:50:61:e9:f1:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:7A:10:77:F8:39:51:60:2F:0E:7D:24:15:C2:B5:1E:F8:FC:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U_t6EHf4OVFgLw59JBXCtR74_MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.5.0/24
194.87.12.0/24
194.87.22.0/24
194.87.40.0/24
194.87.124.0/24
194.87.142.0/24
194.87.150.0/24
194.87.185.0/24
195.133.6.0/24
195.133.42.0/23
195.133.72.0/24
195.133.85.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a5:69:f2:67:55:49:96:33:0c:35:02:1c:0a:1f:67:8c:07:
2e:d9:93:60:57:8f:f4:f5:ae:1b:c2:5f:9f:94:1a:0f:41:b3:
b3:24:c7:4f:7c:54:d3:fa:d4:b0:50:96:b2:55:d1:62:39:56:
7f:5e:17:ad:a2:ba:21:d1:d2:04:17:2b:36:4e:1c:d3:83:d1:
63:af:05:e8:25:a8:99:56:24:2f:d8:61:a9:d2:e9:1d:06:6b:
9d:23:ba:52:75:73:4c:b3:b1:6a:a3:40:15:ba:94:df:99:fb:
5d:15:eb:d9:35:4f:17:5a:c0:1a:61:f6:f6:5a:75:1c:c7:dd:
37:41:5a:ba:24:7d:74:9e:83:e1:d0:5e:e1:15:46:89:f9:8d:
07:19:20:9a:ce:08:50:d3:d8:ef:a1:8a:35:5a:92:d9:10:89:
1d:2e:fb:06:cd:62:24:4e:a3:b2:12:cc:13:b9:9b:77:56:c0:
a2:af:fb:08:b2:64:c1:11:cd:db:bd:18:63:22:4e:1b:b7:8b:
cf:fc:23:1a:3a:82:c0:57:7b:cc:b3:7c:05:1a:05:cb:ee:f4:
20:92:2d:4d:54:98:31:08:ff:bf:99:82:89:33:77:5d:81:24:
61:4e:69:b6:9b:38:46:bb:fe:c5:e8:b0:5c:3e:6d:0f:90:29:
79:f6:f2:5a
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZxcvsomyqgBfnelEblDnqdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwMjE0MTUyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2ZiN2ExMDc3ZjgzOTUxNjAyZjBlN2QyNDE1YzJiNTFlZjhmY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+657cHKRhn03Y1dl65B00q853e6
CvIrNZycp4KOgpI/blOXEquglcjKwNjRSchsh5oLQDwyaNS7WHar6aEFEZApMcsH
0Qcme0xPLK+kPmnWD4BtyK4eMVyc5aIMKU+MiXWaEEIYzAb/WImN928OF/Bkv4Wj
dBoPcKQgolFWTqkc00FAoQXU4X0c4KrzS9KL8bhLUt/TOODC/aNYHJ4v2aHF7Mn0
cG2i62C3GliSLrz86xrk/S1o0FCyUNYH0WnNthlkT5BtkujalqLJ5MlGnjZt+SYV
pfwAXLD+WQMGmJfPj3NYkGtjEej5BgCSLxCn4Ia4CLvyqakYGVBh6fHz+QIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFFP7ehB3+DlRYC8OfSQVwrUe+PzAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVV90NkVIZjRPVkZnTHc1OUpCWEN0Ujc0X01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAwHy/AwQA
wXwFAwQAwlcMAwQAwlcWAwQAwlcoAwQAwld8AwQAwleOAwQAwleWAwQAwle5AwQA
w4UGAwQBw4UqAwQAw4VIAwQAw4VVAwQA1MEOMA0GCSqGSIb3DQEBCwUAA4IBAQA7
pWnyZ1VJljMMNQIcCh9njAcu2ZNgV4/09a4bwl+flBoPQbOzJMdPfFTT+tSwUJay
VdFiOVZ/Xhetoroh0dIEFys2ThzTg9FjrwXoJaiZViQv2GGp0ukdBmudI7pSdXNM
s7Fqo0AVupTfmftdFevZNU8XWsAaYfb2WnUcx903QVq6JH10noPh0F7hFUaJ+Y0H
GSCazghQ09jvoYo1WpLZEIkdLvsGzWIkTqOyEswTuZt3VsCir/sIsmTBEc3bvRhj
Ik4bt4vP/CMaOoLAV3vMs3wFGgXL7vQgki1NVJgxCP+/mYKJM3ddgSRhTmm2mzhG
u/7F6LBcPm0PkCl59vJa
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:47 2026 by rpki-client