Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/utF1Hb3bzsO09sTloqJeLO08SqU.roa
File: utF1Hb3bzsO09sTloqJeLO08SqU.roa (raw, json)
Hash identifier: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=
Subject key identifier: BA:D1:75:1D:BD:DB:CE:C3:B4:F6:C4:E5:A2:A2:5E:2C:ED:3C:4A:A5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FA4F3AC586748E17DF156B3BD382A2B4E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/utF1Hb3bzsO09sTloqJeLO08SqU.roa
Signing time: Mon 27 Jul 2026 19:01:00 +0000
ROA not before: Mon 27 Jul 2026 19:01:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 194.146.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:f3:ac:58:67:48:e1:7d:f1:56:b3:bd:38:2a:2b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 27 19:01:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad1751dbddbcec3b4f6c4e5a2a25e2ced3c4aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:aa:f9:9d:b1:2a:5d:5e:f4:e2:97:05:0e:
b4:0e:38:a9:ab:72:f7:47:19:85:07:eb:c2:e3:d0:
84:19:0e:2e:4b:94:7d:a2:2e:07:02:c2:26:bc:ae:
82:2f:e5:82:0a:39:c6:9e:79:d0:0f:53:2c:ac:62:
42:f0:f2:72:cc:79:63:d2:86:1f:98:07:2d:06:ea:
87:32:09:55:67:d1:eb:11:01:2d:56:f5:ce:20:ca:
7c:a7:9e:72:93:44:95:d2:17:40:aa:e3:7c:c4:8b:
bd:67:2a:a3:d3:26:d0:2c:1e:10:f8:ca:53:e8:7d:
35:6a:4a:f4:0b:03:33:a0:3b:e6:d3:6c:b0:bd:4f:
5c:81:1e:4f:80:14:01:54:c8:6b:8e:70:5a:e7:bb:
9f:cc:79:ed:ed:a6:1d:55:47:59:cb:b6:62:d0:93:
13:89:4e:c9:ce:19:c1:19:2b:f3:a0:1a:8d:ef:a7:
d1:ef:e1:8d:eb:0d:7a:54:b4:b5:eb:25:12:7d:e7:
06:e5:83:81:00:13:21:29:43:d3:8e:dc:96:91:83:
89:34:80:15:54:42:99:e2:82:39:9e:31:4a:22:dc:
c1:bb:81:c2:36:84:6a:25:7f:6b:e2:e8:38:38:e5:
78:95:aa:36:20:cd:ba:d3:c9:6d:7a:db:b0:af:97:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:75:1D:BD:DB:CE:C3:B4:F6:C4:E5:A2:A2:5E:2C:ED:3C:4A:A5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/utF1Hb3bzsO09sTloqJeLO08SqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:84:b8:8d:83:01:c7:46:09:6b:c8:cc:71:6e:a0:c2:c0:db:
93:e0:5d:d6:ce:1b:b8:6c:b0:17:f1:16:eb:c6:a1:7e:d0:18:
1d:92:f1:6d:c3:3d:92:b8:5b:68:a0:65:7c:fa:e2:56:3a:ad:
c9:f7:c6:a6:8c:e8:7d:1a:fc:fa:3b:cd:a7:97:42:ae:94:2b:
f2:bf:16:2c:d0:4b:49:a7:88:e2:b3:61:6c:ec:5b:61:e0:25:
d5:e6:d6:c3:c5:39:c5:65:aa:5d:28:cd:e2:dc:53:2c:aa:db:
80:91:ee:76:b5:03:f6:23:e4:80:95:f0:a0:22:bc:22:7b:bb:
f3:cf:09:fe:8e:9c:0c:52:6a:ef:48:88:14:a5:84:96:ee:b0:
cf:ea:a3:50:b3:9c:12:80:00:3d:dd:0b:84:20:20:c9:68:4c:
11:02:41:52:de:8a:75:bb:80:bc:a6:bf:c2:ac:64:d8:8a:56:
38:ef:97:86:27:0b:c3:03:4e:12:fc:96:ab:7b:4f:53:97:3d:
da:5b:dd:8a:e1:2f:01:ea:7b:a6:93:58:50:73:2e:c7:47:c2:
12:65:93:99:1f:59:af:52:10:05:fb:a4:3d:d9:b2:0d:ab:93:
b9:11:dd:68:49:0f:be:45:ae:35:48:db:c4:04:39:30:09:66:
40:b6:6a:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+k86xYZ0jhffFWs704KitOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwNzI3MTkwMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWQxNzUxZGJkZGJjZWMzYjRmNmM0ZTVhMmEyNWUyY2VkM2M0YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdWq+Z2xKl1e9OKXBQ60Djipq3L3
RxmFB+vC49CEGQ4uS5R9oi4HAsImvK6CL+WCCjnGnnnQD1MsrGJC8PJyzHlj0oYf
mActBuqHMglVZ9HrEQEtVvXOIMp8p55yk0SV0hdAquN8xIu9Zyqj0ybQLB4Q+MpT
6H01akr0CwMzoDvm02ywvU9cgR5PgBQBVMhrjnBa57ufzHnt7aYdVUdZy7Zi0JMT
iU7JzhnBGSvzoBqN76fR7+GN6w16VLS16yUSfecG5YOBABMhKUPTjtyWkYOJNIAV
VEKZ4oI5njFKItzBu4HCNoRqJX9r4ug4OOV4lao2IM2608ltetuwr5dq5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrRdR29287DtPbE5aKiXiztPEqlMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvdXRGMUhiM2J6c08wOXNUbG9xSmVMTzA4U3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJcMA0G
CSqGSIb3DQEBCwUAA4IBAQAPhLiNgwHHRglryMxxbqDCwNuT4F3Wzhu4bLAX8Rbr
xqF+0BgdkvFtwz2SuFtooGV8+uJWOq3J98amjOh9Gvz6O82nl0KulCvyvxYs0EtJ
p4jis2Fs7Fth4CXV5tbDxTnFZapdKM3i3FMsqtuAke52tQP2I+SAlfCgIrwie7vz
zwn+jpwMUmrvSIgUpYSW7rDP6qNQs5wSgAA93QuEICDJaEwRAkFS3op1u4C8pr/C
rGTYilY475eGJwvDA04S/Jare09Tlz3aW92K4S8B6numk1hQcy7HR8ISZZOZH1mv
UhAF+6Q92bINq5O5Ed1oSQ++Ra41SNvEBDkwCWZAtmo4
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:50 2026 by rpki-client