Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2PdxCFUiW-01NWpidVz7FoUM8c.roa
File: z2PdxCFUiW-01NWpidVz7FoUM8c.roa (raw, json)
Hash identifier: 1uH83ft5QIWecEpnwSn+jitT9EuIf0NqFMl1iwsyF+s=
Subject key identifier: CF:63:DD:C4:21:54:89:6F:B4:D4:D5:A9:89:D5:73:EC:5A:14:33:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A075D3A92A2E58FE4776238C50A6A0F348
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2PdxCFUiW-01NWpidVz7FoUM8c.roa
Signing time: Sun 06 Sep 2026 08:26:40 +0000
ROA not before: Sun 06 Sep 2026 08:26:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 194.87.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:d3:a9:2a:2e:58:fe:47:76:23:8c:50:a6:a0:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 08:26:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf63ddc42154896fb4d4d5a989d573ec5a1433c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:da:b3:23:db:18:18:5f:32:d8:4b:f4:e5:
02:fe:4b:a3:2b:e2:53:70:f9:92:8d:12:b6:09:52:
b0:ad:dc:fe:c0:f2:e3:5e:01:04:fd:ed:ac:fc:96:
5d:c3:17:c6:3e:35:6f:e2:bc:58:3e:ff:7b:0d:50:
2a:ad:d0:cc:98:c2:3d:93:eb:21:19:80:ed:ec:b7:
74:ae:b3:32:cb:f1:82:e1:51:eb:7e:e3:86:ff:5d:
d1:47:fd:44:14:a9:ce:27:f6:83:44:50:9a:aa:6e:
80:3a:9c:02:6c:76:b2:b5:d4:60:7d:96:2b:eb:6f:
c9:91:8b:d0:be:0c:8a:1d:36:75:92:28:98:2a:a5:
03:c2:6a:3a:30:56:89:5c:23:e1:73:71:86:21:b7:
a8:e1:9c:4d:a8:68:53:34:94:32:28:52:6d:70:f9:
fe:31:9b:3e:74:90:c4:d8:04:e7:5a:ed:97:7a:81:
60:91:b4:b1:c2:a4:74:3a:b7:17:7f:f6:07:20:d0:
31:b4:aa:c3:da:2f:8a:6d:2a:57:2e:3c:77:f4:81:
e0:d5:86:08:c2:6f:90:bf:77:73:74:b6:8e:56:c7:
70:db:6f:44:c4:d9:f3:16:6f:26:07:47:af:64:04:
1c:09:8f:57:8f:67:1e:e1:79:cc:1d:66:9b:93:15:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:63:DD:C4:21:54:89:6F:B4:D4:D5:A9:89:D5:73:EC:5A:14:33:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2PdxCFUiW-01NWpidVz7FoUM8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.59.0/24
Signature Algorithm: sha256WithRSAEncryption
25:65:7e:ad:df:8a:da:01:e2:ab:5f:d7:9b:6a:18:34:0e:3b:
41:1b:b1:ae:67:22:fa:bf:b8:73:d6:c5:72:64:cb:f9:bb:67:
e8:31:be:2f:ca:cf:83:25:81:74:84:b1:f0:71:6e:6f:05:7d:
91:fa:a6:67:a5:cc:1c:b2:06:1e:55:2e:e0:b8:3a:0b:6b:f0:
89:b8:7f:0f:19:b0:dd:aa:78:fc:2d:89:08:ba:4e:64:f8:3b:
db:4f:7c:18:37:91:05:09:6f:b2:ae:bb:3c:d3:84:63:46:fa:
ac:cb:df:1b:cf:86:c8:6a:34:ca:a2:63:ed:68:46:a4:ea:ac:
ab:2e:68:55:04:77:14:9e:45:47:f0:a2:75:a9:6b:21:95:cb:
2f:7a:e3:93:2e:a3:d1:10:e8:38:10:96:b5:ed:01:05:6b:95:
b9:0b:61:89:37:2b:67:d8:dd:a4:4e:20:0b:60:19:a1:50:ef:
f7:78:4b:e1:5e:35:1d:0d:c2:c0:03:64:da:0d:3d:60:92:a5:
0a:f6:65:e5:86:d3:03:c1:bf:92:b2:29:7e:1a:f4:31:83:05:
2c:bb:65:5f:95:d5:6a:c3:5e:97:24:51:4c:61:3b:1a:25:23:
96:f4:65:48:7b:1c:d5:9a:37:3b:04:77:60:45:be:9c:df:a2:
9a:04:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:28:48 2026 by rpki-client