Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vebjdd0SIoDV2kZk3hCN1N3bG74.roa
File: Vebjdd0SIoDV2kZk3hCN1N3bG74.roa (raw, json)
Hash identifier: TrciS44dJF4UXLKky8pBu8+BQh066Zbx6ov0utWyKKU=
Subject key identifier: 55:E6:E3:75:DD:12:22:80:D5:DA:46:64:DE:10:8D:D4:DD:DB:1B:BE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A082562CB74375FF677B0651347EA11443
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vebjdd0SIoDV2kZk3hCN1N3bG74.roa
Signing time: Tue 08 Sep 2026 18:44:40 +0000
ROA not before: Tue 08 Sep 2026 18:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3175
IP address blocks: 193.124.158.0/23 maxlen: 23
195.133.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:56:2c:b7:43:75:ff:67:7b:06:51:34:7e:a1:14:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 18:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e6e375dd122280d5da4664de108dd4dddb1bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:62:c6:9f:40:f5:dc:b6:20:80:9f:5a:33:
6d:15:f0:bf:e2:3a:2f:c2:07:96:ae:97:38:94:8f:
6d:06:bc:57:d0:2d:6d:21:a2:60:a2:3e:20:99:81:
9f:72:34:d9:37:d7:d1:6c:bf:2d:07:c2:f7:bf:2c:
eb:a5:37:44:de:11:0f:cf:1f:3e:dd:be:4a:81:cf:
e2:fd:16:71:65:4f:e2:88:9a:36:bc:79:d0:24:44:
6f:02:3e:e0:f3:af:17:cf:7d:53:85:61:ed:de:5d:
9e:ee:d3:7b:74:00:40:9d:8c:4b:97:5c:e3:6b:7c:
a1:a6:01:d6:e7:f4:7f:bd:4e:ad:a8:f6:3d:b8:64:
94:4d:0a:24:64:4e:7d:87:98:7b:b4:7c:ea:69:a4:
3e:59:80:67:82:84:a2:0c:1c:8b:6d:5b:7b:39:e7:
af:62:eb:1f:1d:e0:79:cd:6e:23:90:e1:db:b4:3c:
b8:46:31:24:b4:cd:c3:49:f7:f5:60:3d:c2:92:21:
88:bf:67:f4:49:01:34:d8:d0:65:f2:d1:82:83:d5:
ee:d5:7f:be:62:a2:eb:e7:f0:9f:6a:90:56:a2:27:
2e:2b:10:e9:50:61:19:ef:a1:37:da:3b:2e:8e:b0:
52:a3:fd:90:8b:df:2a:4f:6d:bb:d5:88:46:b4:96:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:E3:75:DD:12:22:80:D5:DA:46:64:DE:10:8D:D4:DD:DB:1B:BE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vebjdd0SIoDV2kZk3hCN1N3bG74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.158.0/23
195.133.200.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ef:5a:db:9f:df:1a:c5:84:12:91:bb:0b:ed:48:b1:a7:49:
ca:fb:76:31:91:c2:4b:d1:40:47:c9:cd:87:96:a8:c1:92:c4:
3c:fa:ee:a8:03:ca:a3:85:a7:34:fe:60:b7:68:cd:08:2d:e6:
96:8e:86:2e:04:71:a1:3e:3b:ff:6d:e4:a6:2f:69:27:f0:48:
80:ae:e1:4b:da:85:9f:1b:d7:6a:22:4a:d7:35:f2:02:a1:22:
77:b7:b6:a8:93:43:ff:e4:cc:22:d8:09:c1:85:41:f0:11:91:
d2:0a:8b:bb:08:c8:16:c7:0b:5f:da:82:52:f5:b2:0a:2b:60:
b4:d8:18:62:68:a5:c8:85:dd:05:76:59:76:8c:a1:81:52:18:
a6:a2:56:74:89:4c:8d:07:1b:e9:18:9f:77:7b:4e:79:ac:85:
6b:65:2e:28:2f:e0:c4:0a:4f:9f:21:3d:90:24:9b:82:78:b5:
5d:95:35:3a:46:6c:2f:f5:e4:c4:13:bd:41:e2:e8:ca:05:a7:
1a:02:54:16:af:b1:60:dc:e0:59:1b:d1:01:4c:96:42:e0:9f:
dd:35:ba:bf:19:bc:ff:69:57:0b:36:1b:22:e6:c3:0b:37:5f:
60:0b:32:3a:8d:3a:f0:be:a2:31:a5:0d:7c:9e:79:67:3b:cc:
b8:32:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:21:45 2026 by rpki-client