Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k5ffIV8xwMHyJEMXaTbbu0LvoQM.roa
File: k5ffIV8xwMHyJEMXaTbbu0LvoQM.roa (raw, json)
Hash identifier: yizDeps0kpuGABJZWodj8W1mJQNhT3qdrsXZJlb8p38=
Subject key identifier: 93:97:DF:21:5F:31:C0:C1:F2:24:43:17:69:36:DB:BB:42:EF:A1:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A09E46142695655D72F7B214D7F41BB8D0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k5ffIV8xwMHyJEMXaTbbu0LvoQM.roa
Signing time: Mon 14 Sep 2026 04:56:27 +0000
ROA not before: Mon 14 Sep 2026 04:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 192.124.188.0/24 maxlen: 24
194.87.66.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:46:14:26:95:65:5d:72:f7:b2:14:d7:f4:1b:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 14 04:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9397df215f31c0c1f22443176936dbbb42efa103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:7a:0b:b8:2e:32:b0:b4:14:ca:83:6b:14:
2d:27:c5:63:35:47:8a:69:fc:5f:6f:fd:b1:43:fe:
e2:c5:4c:83:17:69:d1:fe:c0:87:c1:73:70:e3:f6:
6c:1d:eb:0c:c6:8c:ed:84:33:bc:6f:63:d8:24:85:
36:4a:e2:cc:77:35:2c:33:2a:40:19:95:d7:6d:75:
4f:77:55:76:f9:a7:49:6f:5f:7e:dd:59:61:be:97:
83:3c:49:6b:09:9c:3c:db:55:cd:89:b0:59:2c:65:
18:2a:77:0d:b3:27:06:76:4a:b8:c0:6f:20:6a:e5:
bc:06:e2:b1:a0:f7:b5:2d:23:d6:7c:8a:bb:93:d2:
f1:30:ab:5e:e0:63:68:7f:44:da:8a:02:36:59:16:
88:e6:fd:d6:7b:9d:4c:19:c6:35:7b:d4:ab:b7:fa:
54:2f:ea:f3:91:1b:bf:a0:52:1a:46:6b:19:1e:a4:
02:ae:e3:52:f5:30:73:09:08:33:ba:89:64:ab:eb:
ff:31:e0:ce:26:4b:b5:a1:41:e8:34:98:f1:d1:26:
4b:8f:08:e0:dc:3c:22:c5:5f:29:2f:bc:f7:b5:ba:
0b:f3:e6:b3:ed:43:ac:52:4f:55:17:8c:b7:ef:20:
b9:95:64:c0:a6:6d:25:a1:a1:d5:43:30:a4:9a:74:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:97:DF:21:5F:31:C0:C1:F2:24:43:17:69:36:DB:BB:42:EF:A1:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k5ffIV8xwMHyJEMXaTbbu0LvoQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
194.87.66.0/24
194.87.75.0/24
194.87.170.0/24
194.87.229.0/24
194.135.32.0/24
195.58.60.0/24
195.133.43.0/24
195.133.95.0/24
212.192.252.0/24
212.193.12.0/23
Signature Algorithm: sha256WithRSAEncryption
20:be:f7:87:23:8c:23:bd:48:58:2e:00:b4:8b:b0:e1:cd:b4:
58:d2:f9:e1:3c:5f:a1:d9:53:68:0d:6f:44:7c:f2:0d:91:cb:
b4:9f:99:7c:05:2a:12:fe:8e:d6:dd:82:53:86:7b:78:fe:9b:
6f:8a:bc:16:4e:58:87:ff:ab:80:64:df:7e:65:5b:35:7d:94:
52:06:b3:b6:eb:ab:d8:1b:42:cc:78:5f:f6:f2:1c:c4:1e:39:
28:ad:01:50:c9:41:ae:c4:38:ac:c6:20:4a:43:70:da:8e:d2:
a0:c5:18:1f:96:6c:cb:56:ac:2e:9f:f9:9a:e2:cb:6a:ee:0b:
8d:d7:92:56:55:80:16:04:6f:8d:70:92:34:b1:90:e1:34:43:
10:a2:e5:b2:b7:15:66:89:8e:d8:46:87:35:29:1e:51:b8:5b:
78:1b:b7:c2:47:13:77:62:cf:a6:e8:f7:ce:f2:88:d9:e2:c2:
e1:8a:ec:5e:6d:d0:b7:ff:4c:67:24:32:ac:d6:5a:0e:e7:7c:
b5:05:28:ac:45:01:97:59:83:51:7a:f0:98:f1:52:cf:2f:29:
de:bc:08:db:d7:0c:5b:e7:0c:75:41:6f:c9:f3:8f:27:1c:e7:
59:3e:67:b4:5c:6d:08:80:1f:d5:a1:c7:68:4b:e2:97:00:f2:
23:c6:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:21 2026 by rpki-client