Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/o_pxtheBbUfVm-7r0ZMoEL-UEVc.roa
File: o_pxtheBbUfVm-7r0ZMoEL-UEVc.roa (raw, json)
Hash identifier: yAaBgxOnN8fecqdMRITFcZVNX1WEZgPCPAT8FUeNBkg=
Subject key identifier: A3:FA:71:B6:17:81:6D:47:D5:9B:EE:EB:D1:93:28:10:BF:94:11:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019D788A915B58E4ED1D874FAEA2E9542433
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/o_pxtheBbUfVm-7r0ZMoEL-UEVc.roa
Signing time: Fri 10 Apr 2026 17:57:20 +0000
ROA not before: Fri 10 Apr 2026 17:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213821
IP address blocks: 193.124.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:8a:91:5b:58:e4:ed:1d:87:4f:ae:a2:e9:54:24:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 10 17:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3fa71b617816d47d59beeebd1932810bf941157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:ff:aa:a3:e7:f2:34:77:f7:84:52:c7:c3:
2c:fe:a6:c5:9b:0d:84:e0:30:33:4e:46:62:7d:e9:
50:51:2c:fb:0c:ae:a0:55:17:09:49:9d:e8:e7:c1:
9c:ea:e0:0e:d1:6e:22:ef:3f:f8:f4:4f:b3:7f:ee:
bb:ba:8a:6a:75:04:1d:3a:4e:d8:4c:b2:5c:5a:ae:
fd:5c:08:3d:80:29:2e:b7:15:78:41:5c:f5:12:f5:
89:8c:1b:16:00:8f:49:0e:f7:18:e8:ef:77:b2:9b:
12:ee:c4:be:2e:4e:55:54:f3:f3:fa:04:47:ec:f9:
aa:d4:8b:d4:c2:30:4e:d4:d4:cd:b2:0e:49:af:d9:
8c:41:6a:0d:ae:15:29:e7:2e:a9:6c:40:b8:a1:25:
19:da:28:1a:ac:ef:66:22:15:5a:0c:34:cc:d2:d0:
92:ca:ff:9c:86:e7:b4:58:3c:94:d2:ce:5c:00:86:
0c:94:16:78:7a:d9:d0:97:46:2c:17:0a:4f:8e:33:
36:e4:f4:06:67:f0:35:a3:6a:09:90:88:ae:bf:24:
2e:07:b7:f8:ef:0c:cf:05:a2:4c:33:f5:0e:a0:de:
3c:36:59:f4:a6:bb:cc:a7:7d:b9:c0:6d:d2:07:3c:
dd:5f:7a:bd:13:4a:4f:dc:6d:db:75:aa:cd:e1:aa:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:71:B6:17:81:6D:47:D5:9B:EE:EB:D1:93:28:10:BF:94:11:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/o_pxtheBbUfVm-7r0ZMoEL-UEVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:07:76:74:b6:34:58:d8:ba:bc:5b:47:ff:22:22:47:ec:49:
c7:08:4c:01:1c:d1:f3:f0:06:f5:07:5a:4f:c0:0b:bb:be:15:
14:22:d5:3f:f1:47:da:95:31:53:01:46:96:8a:47:b6:55:0b:
c1:9d:28:26:6c:56:34:15:28:73:b8:f0:f7:9f:9d:7e:06:17:
64:5f:22:60:02:66:05:1b:b8:0c:ac:5a:9c:f5:50:bf:21:6b:
2b:1d:b6:c7:92:ff:87:f0:c7:4b:3f:24:43:f5:bf:40:40:fb:
25:e2:58:9e:83:64:af:ef:eb:7d:2a:28:24:a4:27:ba:83:20:
5b:b7:d7:0e:57:72:ae:41:0c:e3:82:fe:9c:fe:11:60:27:5e:
3e:f0:5b:05:68:06:84:ed:21:7c:7a:2c:1a:15:60:c7:2f:16:
a0:76:0d:ce:6d:1e:d8:b5:53:72:1e:26:29:dd:1c:66:d2:af:
5c:51:6f:77:9e:9a:40:b6:e8:0e:44:9c:3d:26:fc:df:bb:ff:
84:33:75:3a:7d:61:a9:e6:9e:e7:85:e3:a3:42:30:73:e8:1e:
1c:1e:fa:1a:b7:48:22:17:85:25:4f:f7:61:a7:da:5b:ff:b6:
be:bf:a3:65:7e:d7:12:9c:f8:a7:3f:2a:50:be:82:c6:14:76:
ef:32:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:04 2026 by rpki-client