Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NTUqpW-Fwxgf22WCGI5TziyYO8c.roa
File: NTUqpW-Fwxgf22WCGI5TziyYO8c.roa (raw, json)
Hash identifier: O1oNxclVUBZQug7BP/vHyxtL7xYJa9aZ218yJ1oCeWE=
Subject key identifier: 35:35:2A:A5:6F:85:C3:18:1F:DB:65:82:18:8E:53:CE:2C:98:3B:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A10BCBEEE29581530695897046BB49BCA0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NTUqpW-Fwxgf22WCGI5TziyYO8c.roa
Signing time: Mon 05 Oct 2026 11:21:16 +0000
ROA not before: Mon 05 Oct 2026 11:21:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19669
IP address blocks: 87.120.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:cb:ee:e2:95:81:53:06:95:89:70:46:bb:49:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 5 11:21:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35352aa56f85c3181fdb6582188e53ce2c983bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:56:bd:3d:3d:0f:1a:e1:7d:8a:c5:30:7e:
e9:d3:af:71:28:b2:11:96:b1:e9:e9:ed:cc:16:b4:
ff:c3:7f:1a:e1:07:36:79:79:80:9e:d9:af:b8:39:
35:99:f6:26:1e:25:25:37:0e:15:4e:69:d0:3c:ec:
eb:73:24:7b:4b:dd:d9:9d:e4:57:81:e7:87:a5:fd:
8d:0e:11:e6:fe:9b:1a:1e:e6:5c:63:59:20:a5:ea:
11:f4:8d:75:c9:e8:17:51:20:96:16:1d:e4:87:ed:
f5:36:31:da:73:4d:5d:07:6a:97:89:2e:31:67:91:
e2:ed:bf:1e:c4:0b:9a:33:75:1d:48:c2:c5:52:1a:
c6:2e:f3:e8:b1:e2:12:84:56:c2:61:5a:52:1c:83:
87:1b:f2:5e:41:27:75:77:29:45:62:73:b2:f0:bc:
7a:15:13:74:47:5b:ea:a8:7b:46:ef:6f:dc:2d:a9:
12:87:11:92:8d:d8:37:68:54:9a:d2:5a:57:16:c0:
2f:df:d7:57:81:9c:4a:b2:bd:be:7f:98:4c:c6:2f:
e6:0f:a1:53:96:ee:fc:ce:aa:3d:22:22:da:fd:eb:
4a:f9:d6:fd:43:7e:9c:3a:92:14:79:0f:50:7e:53:
54:bf:0f:27:6c:20:88:7b:7c:68:d2:5c:62:ce:3c:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:2A:A5:6F:85:C3:18:1F:DB:65:82:18:8E:53:CE:2C:98:3B:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NTUqpW-Fwxgf22WCGI5TziyYO8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9e:66:68:e7:68:6f:ed:87:03:12:04:4d:b3:11:bd:3d:e9:
4f:bd:eb:d0:73:bf:31:f8:74:f4:d6:be:92:09:5a:cb:4a:bc:
ca:5b:da:54:85:e0:36:2b:1e:b4:6f:ed:0b:50:6d:f2:98:fd:
2e:8a:ba:26:22:84:71:1c:95:1d:0c:73:f1:df:c5:e8:a0:b5:
24:25:9d:8c:02:d5:1b:e7:6e:77:4e:47:8f:c4:af:5e:f7:ab:
42:cc:f0:1d:1a:c3:db:39:b0:7d:a7:9a:23:55:17:ef:c8:cd:
51:f3:23:4e:78:76:6d:64:e1:28:5e:16:56:26:fc:39:b5:6a:
9b:86:c2:8f:9c:9b:ab:a7:3a:a5:80:dc:e6:21:1a:48:86:ca:
c5:80:fc:3e:97:b1:eb:40:64:13:91:5d:4f:e6:33:58:1a:e5:
71:14:d2:62:81:40:85:a7:e5:65:91:11:9b:d3:08:07:ea:e6:
a8:dc:8b:e4:2e:12:c2:0a:21:ae:2f:ec:ef:fc:06:72:48:40:
dc:5e:04:8f:60:de:47:a2:39:d1:b2:9a:63:b4:a0:0b:89:0a:
a8:fd:eb:96:55:7c:77:4e:f3:95:7f:51:1f:0c:c9:f3:96:7f:
75:f9:8f:8b:5c:dd:17:32:d8:85:60:47:c1:e2:88:12:4c:01:
dd:a6:84:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaELy+7ilYFTBpWJcEa7SbygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYxMDA1MTEyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM1MmFhNTZmODVjMzE4MWZkYjY1ODIxODhlNTNjZTJjOTgzYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsxWvT09DxrhfYrFMH7p069xKLIR
lrHp6e3MFrT/w38a4Qc2eXmAntmvuDk1mfYmHiUlNw4VTmnQPOzrcyR7S93ZneRX
geeHpf2NDhHm/psaHuZcY1kgpeoR9I11yegXUSCWFh3kh+31NjHac01dB2qXiS4x
Z5Hi7b8exAuaM3UdSMLFUhrGLvPoseIShFbCYVpSHIOHG/JeQSd1dylFYnOy8Lx6
FRN0R1vqqHtG72/cLakShxGSjdg3aFSa0lpXFsAv39dXgZxKsr2+f5hMxi/mD6FT
lu78zqo9IiLa/etK+db9Q36cOpIUeQ9QflNUvw8nbCCIe3xo0lxizjzBCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDU1KqVvhcMYH9tlghiOU84smDvHMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTlRVcXBXLUZ3eGdmMjJXQ0dJNVR6aXlZTzhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hYMA0G
CSqGSIb3DQEBCwUAA4IBAQCmnmZo52hv7YcDEgRNsxG9PelPvevQc78x+HT01r6S
CVrLSrzKW9pUheA2Kx60b+0LUG3ymP0uiromIoRxHJUdDHPx38XooLUkJZ2MAtUb
5253TkePxK9e96tCzPAdGsPbObB9p5ojVRfvyM1R8yNOeHZtZOEoXhZWJvw5tWqb
hsKPnJurpzqlgNzmIRpIhsrFgPw+l7HrQGQTkV1P5jNYGuVxFNJigUCFp+VlkRGb
0wgH6uao3IvkLhLCCiGuL+zv/AZySEDcXgSPYN5HojnRsppjtKALiQqo/euWVXx3
TvOVf1EfDMnzln91+Y+LXN0XMtiFYEfB4ogSTAHdpoRz
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:42:59 2026 by rpki-client