Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V-eLzwPtOnemGNs4XfBG_uXCElI.roa
File: V-eLzwPtOnemGNs4XfBG_uXCElI.roa (raw, json)
Hash identifier: w+mJ4+Fn/ujAqkAPzVCet/x716DlXFAsaveRf5OA3bk=
Subject key identifier: 57:E7:8B:CF:03:ED:3A:77:A6:18:DB:38:5D:F0:46:FE:E5:C2:12:52
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A08B5AEFCB280570ABF79655BE9971E324
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V-eLzwPtOnemGNs4XfBG_uXCElI.roa
Signing time: Thu 10 Sep 2026 12:46:27 +0000
ROA not before: Thu 10 Sep 2026 12:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.41.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.89.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.58.47.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.83.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
212.193.18.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:5a:ef:cb:28:05:70:ab:f7:96:55:be:99:71:e3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 10 12:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57e78bcf03ed3a77a618db385df046fee5c21252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:0a:1e:08:83:00:43:b9:e0:e8:7d:04:93:
ad:1b:ae:c3:97:e7:1e:65:61:05:58:8b:4f:88:f7:
0d:ac:b8:1c:43:7b:62:96:00:57:36:5c:af:d9:01:
59:04:b7:cd:c5:ed:15:ea:a0:65:bd:e3:55:85:58:
1d:54:b8:5b:6f:fd:4b:65:d1:50:3f:ff:e3:bf:2b:
e1:06:8e:17:11:6a:3f:c5:a5:99:d4:9b:99:c1:0d:
4d:8f:d4:de:98:05:ef:b4:9b:5e:84:bd:c4:78:2d:
37:b6:ff:8c:65:0b:6b:a3:f2:af:5b:fe:ce:bc:4f:
7c:86:4e:f8:7c:5c:e4:26:4d:32:79:93:6d:35:b5:
ff:d6:95:c5:b2:e0:40:d3:74:dd:a4:93:90:82:30:
bd:b6:77:25:97:b9:ed:8a:06:c3:33:a3:39:5b:30:
6a:1c:f7:a2:6b:cb:c4:22:44:6f:9c:dd:b0:a9:51:
25:01:f8:8f:9b:b1:d3:fb:0c:82:57:40:77:ad:ad:
bd:0f:58:16:ee:9f:ad:24:37:11:6d:d0:41:92:b8:
03:f9:19:19:1b:a1:5b:73:ee:d4:c9:f3:64:77:ab:
04:a5:a5:52:a4:a8:25:1a:78:59:76:1e:42:27:a3:
be:98:26:ca:c0:24:18:9d:88:fc:fc:47:c3:e0:26:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:8B:CF:03:ED:3A:77:A6:18:DB:38:5D:F0:46:FE:E5:C2:12:52
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V-eLzwPtOnemGNs4XfBG_uXCElI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.234.0/24
62.76.238.0/23
192.124.172.0/24
192.124.175.0-192.124.176.255
192.124.209.0/24
193.108.112.0/24
193.124.2.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
194.58.38.0-194.58.40.255
194.58.59.0/24
194.58.66.0/24
194.58.68.0/24
194.87.2.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.41.0/24
194.87.47.0-194.87.48.255
194.87.58.0/24
194.87.73.0/24
194.87.82.0/24
194.87.89.0/24
194.87.105.0-194.87.106.255
194.87.108.0/24
194.87.123.0/24
194.87.125.0/24
194.87.128.0/24
194.87.137.0/24
194.87.162.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.58.47.0/24
195.133.55.0/24
195.133.67.0/24
195.133.83.0/24
195.133.92.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
212.193.18.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a0:ab:fb:41:11:ae:af:6d:a1:07:3b:21:a0:ab:e6:59:13:
c3:f0:4a:d4:3f:74:33:c4:cf:b0:2d:89:ca:98:3e:b3:b4:5e:
c7:58:e1:d1:a7:77:ad:cc:b9:0c:0b:aa:93:a9:02:ce:51:c9:
30:bf:bc:ef:30:2f:b6:ea:88:42:51:46:0d:00:fe:3d:67:64:
12:8e:d0:16:c5:0b:b6:07:8c:6e:9f:37:a4:95:fc:2c:39:3f:
63:15:42:09:69:58:88:f8:f7:b0:d6:38:8d:05:d0:8f:09:53:
1a:ea:f2:b2:98:ef:ca:55:a0:7f:d9:64:10:65:68:46:a6:c7:
a0:00:55:ad:04:71:77:9f:dd:27:6e:d8:21:ad:2b:b0:fd:22:
54:bd:2d:0d:c6:12:4f:79:8e:00:eb:92:b5:10:90:b8:a3:fb:
1b:d3:c6:79:d4:b0:2c:06:3f:71:d2:8e:6e:95:f8:91:63:35:
10:0e:00:af:21:2c:51:f6:10:dd:a1:29:72:73:fb:2b:25:03:
62:49:30:eb:3a:61:77:7b:60:fc:e3:15:73:86:02:49:39:b0:
e0:87:5b:2b:fc:23:67:86:ed:98:9c:2b:73:01:e9:ce:66:40:
c1:79:d8:c5:ba:04:95:51:50:36:01:5d:04:7d:68:86:f5:2f:
09:f4:3c:d3
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISAaCLWu/LKAVwq/eWVb6ZceMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTEwMTI0NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2U3OGJjZjAzZWQzYTc3YTYxOGRiMzg1ZGYwNDZmZWU1YzIxMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkwKHgiDAEO54Oh9BJOtG67Dl+ce
ZWEFWItPiPcNrLgcQ3tilgBXNlyv2QFZBLfNxe0V6qBlveNVhVgdVLhbb/1LZdFQ
P//jvyvhBo4XEWo/xaWZ1JuZwQ1Nj9TemAXvtJtehL3EeC03tv+MZQtro/KvW/7O
vE98hk74fFzkJk0yeZNtNbX/1pXFsuBA03TdpJOQgjC9tncll7ntigbDM6M5WzBq
HPeia8vEIkRvnN2wqVElAfiPm7HT+wyCV0B3ra29D1gW7p+tJDcRbdBBkrgD+RkZ
G6Fbc+7UyfNkd6sEpaVSpKglGnhZdh5CJ6O+mCbKwCQYnYj8/EfD4CZ+JQIDAQAB
o4IDbzCCA2swHQYDVR0OBBYEFFfni88D7Tp3phjbOF3wRv7lwhJSMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVi1lTHp3UHRPbmVtR05zNFhmQkdfdVhDRWxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBgwYIKwYBBQUHAQcBAf8EggFyMIIBbjCCAWoEAgABMIIB
YgMEAD5M6AMEAD5M6gMEAT5M7gMEAMB8rDAMAwQAwHyvAwQAwHywAwQAwHzRAwQA
wWxwAwQAwXwCAwQAwXwWAwQAwXwpAwQAwXwuMAwDBAHCOiYDBADCOigDBADCOjsD
BADCOkIDBADCOkQDBADCVwIDBADCVwowDAMEAMJXEQMEAMJXEgMEAMJXFwMEAMJX
HgMEAMJXJwMEAMJXKTAMAwQAwlcvAwQAwlcwAwQAwlc6AwQAwldJAwQAwldSAwQA
wldZMAwDBADCV2kDBADCV2oDBADCV2wDBADCV3sDBADCV30DBADCV4ADBADCV4kD
BADCV6IDBADCV7IDBADCV8YDBADCV+MDBADCV+YDBADCV/ADBADCV/UDBADDOi8D
BADDhTcDBADDhUMDBADDhVMDBADDhVwDBADUwN8wDAMEANTBAQMEANTBAgMEANTB
BgMEANTBEgMEANTBFAMEANTBFzANBgkqhkiG9w0BAQsFAAOCAQEAWaCr+0ERrq9t
oQc7IaCr5lkTw/BK1D90M8TPsC2Jypg+s7Rex1jh0ad3rcy5DAuqk6kCzlHJML+8
7zAvtuqIQlFGDQD+PWdkEo7QFsULtgeMbp83pJX8LDk/YxVCCWlYiPj3sNY4jQXQ
jwlTGuryspjvylWgf9lkEGVoRqbHoABVrQRxd5/dJ27YIa0rsP0iVL0tDcYST3mO
AOuStRCQuKP7G9PGedSwLAY/cdKObpX4kWM1EA4AryEsUfYQ3aEpcnP7KyUDYkkw
6zphd3tg/OMVc4YCSTmw4IdbK/wjZ4btmJwrcwHpzmZAwXnYxboElVFQNgFdBH1o
hvUvCfQ80w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:29 2026 by rpki-client