Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yjihdyuNvcxme_Gvw8BLDPIZ-tg.roa
File: yjihdyuNvcxme_Gvw8BLDPIZ-tg.roa (raw, json)
Hash identifier: 5WOP02fCPe3DzeO1XbbRk+N9UjC/sEA0VoM9VjnZDGs=
Subject key identifier: CA:38:A1:77:2B:8D:BD:CC:66:7B:F1:AF:C3:C0:4B:0C:F2:19:FA:D8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0E80073C7181323E8267A6697D2440F4B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yjihdyuNvcxme_Gvw8BLDPIZ-tg.roa
Signing time: Mon 28 Sep 2026 12:32:18 +0000
ROA not before: Mon 28 Sep 2026 12:32:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:00:73:c7:18:13:23:e8:26:7a:66:97:d2:44:0f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 28 12:32:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca38a1772b8dbdcc667bf1afc3c04b0cf219fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:f7:31:d9:96:37:97:5e:c3:c9:66:09:07:
3c:e5:5a:12:89:25:5e:61:fa:d7:bc:3c:9a:7c:51:
bf:69:b0:72:a8:c8:9c:bc:8b:10:63:dd:1b:85:73:
0a:99:2d:89:06:65:e2:2c:40:d6:f0:70:e0:3c:f3:
b2:9a:ce:e3:13:3e:1b:c8:e7:03:4e:10:c1:e0:57:
a7:7c:bd:24:48:df:9b:92:b6:e5:f7:9d:4b:39:b3:
21:42:66:bb:b1:44:13:72:44:ff:cd:41:6d:09:53:
93:2f:45:af:9c:b4:ae:f2:50:e9:f5:ab:32:1a:e9:
22:7a:ce:55:21:eb:14:64:15:40:48:7d:08:a2:15:
b9:97:8d:9d:7c:69:59:f3:14:5f:96:91:1b:97:20:
4c:49:cd:88:e5:16:ac:5b:d1:02:d6:6d:26:2f:22:
ff:7c:ca:58:75:71:b1:6c:ab:07:f7:90:6d:1c:b3:
62:c0:97:03:9d:df:a0:96:1f:92:4e:f4:70:82:f4:
d7:c4:e9:38:62:eb:f1:97:a0:fb:6e:5a:ea:ad:97:
cf:0d:ca:3f:84:83:8e:be:5d:a3:2e:d5:5d:58:3f:
23:41:ee:8e:1f:3d:54:57:6d:c8:e7:c7:69:75:d3:
f2:61:bf:d4:22:e3:a9:2a:af:92:b1:b7:59:a0:0b:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:A1:77:2B:8D:BD:CC:66:7B:F1:AF:C3:C0:4B:0C:F2:19:FA:D8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yjihdyuNvcxme_Gvw8BLDPIZ-tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.91.0/24
194.87.12.0/24
194.87.22.0/24
194.87.40.0/24
194.87.124.0/24
195.133.6.0/24
195.133.85.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ad:0a:94:a6:7d:58:ae:55:87:63:96:54:d2:ac:be:3b:b5:
8b:69:84:71:83:5f:33:bf:cc:1f:b0:f9:a8:5c:08:ce:3d:f9:
d9:fa:53:4a:f6:18:8f:ac:b1:89:9b:7d:fa:55:1c:f0:9e:dc:
22:5b:d6:ff:6b:f5:87:a3:a8:68:c3:51:6d:bd:fc:c8:0f:9a:
cb:d0:ca:9f:30:0b:21:b5:ab:a4:76:c3:f9:72:59:a4:65:79:
9f:13:77:3f:8d:90:ad:6f:85:9c:33:92:9f:e9:2d:cd:82:f8:
11:15:e1:8b:01:1b:fe:a9:c9:e9:32:e1:9b:ea:30:0d:22:a3:
fc:d8:4f:9f:0d:fd:2d:65:3f:87:d3:04:c2:40:2f:57:77:a1:
89:7b:67:4a:09:96:13:d1:f6:6f:6e:69:36:3d:00:c5:04:75:
00:cc:16:91:3d:53:10:dc:ce:b3:83:a6:60:69:27:42:4d:35:
72:5d:e2:11:ab:66:97:ce:be:02:54:1e:43:c3:fd:b9:22:d7:
70:38:bd:fd:15:79:80:44:52:dc:92:2b:fc:66:d2:89:9b:66:
7f:1e:1d:4a:15:b1:42:20:31:54:bc:17:e7:1c:40:05:2d:84:
8a:b2:ac:d5:06:1f:ac:a7:46:98:fe:60:5c:eb:6e:88:01:39:
4f:1e:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:19:51 2026 by rpki-client