Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PiqykdRZdKanc-4YSNp5skuPEks.roa
File: PiqykdRZdKanc-4YSNp5skuPEks.roa (raw, json)
Hash identifier: 179cBm6tSAYyqsY/k/uXEys8+gAo672B7jBnnqdHX8M=
Subject key identifier: 3E:2A:B2:91:D4:59:74:A6:A7:73:EE:18:48:DA:79:B2:4B:8F:12:4B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019CDC5260277FD5F2DEA34705A98EB82E11
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PiqykdRZdKanc-4YSNp5skuPEks.roa
Signing time: Wed 11 Mar 2026 09:55:11 +0000
ROA not before: Wed 11 Mar 2026 09:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216093
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.28.0/24 maxlen: 24
195.133.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:52:60:27:7f:d5:f2:de:a3:47:05:a9:8e:b8:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 11 09:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e2ab291d45974a6a773ee1848da79b24b8f124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e0:81:d8:cb:16:06:ef:97:e0:cb:24:d8:dc:
70:57:c8:9d:62:ad:a6:43:7d:28:6c:08:36:a4:cc:
69:d0:63:47:df:ff:60:63:b4:7e:a7:2e:b4:e4:09:
e9:ad:d2:9c:a5:5d:03:d1:2f:86:7e:a3:0b:cb:82:
66:4c:64:0d:72:a7:91:2c:04:95:f1:f8:97:9d:fa:
fa:32:d5:53:3a:42:d4:31:8d:61:33:64:a0:81:e2:
37:e9:4b:43:8e:9b:9b:01:02:61:ec:a2:2e:6e:6c:
f7:68:3d:7a:32:5d:e4:87:a0:3f:8a:76:9e:5c:06:
c1:ec:06:4b:35:ef:2c:cb:15:80:e2:4a:6a:91:9d:
c3:84:ef:fd:c3:66:ad:4e:2d:c1:39:01:69:04:ff:
1c:bb:bb:4f:17:36:94:30:ac:ad:12:45:34:2e:1f:
35:20:93:97:71:33:ce:69:ae:1e:32:12:e4:9f:18:
7b:10:e1:a9:ce:fb:9a:2a:98:87:5f:cd:99:eb:a8:
c4:71:57:33:da:1e:0d:e9:83:88:6d:67:b3:90:78:
33:14:0a:57:19:1d:6f:96:ed:4c:a0:82:2a:1a:fa:
a4:2c:9e:d4:8c:ab:8f:9f:57:63:ea:41:ac:19:cc:
a2:08:20:27:a8:62:8b:02:ed:14:3e:de:b1:1b:9e:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:B2:91:D4:59:74:A6:A7:73:EE:18:48:DA:79:B2:4B:8F:12:4B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PiqykdRZdKanc-4YSNp5skuPEks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
194.87.11.0/24
194.87.28.0/24
195.133.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:65:b3:26:c9:34:64:d6:72:51:47:24:2b:60:ed:9d:ae:af:
ab:f1:3c:c8:99:32:14:04:20:ad:27:97:62:9d:e9:ca:20:26:
d9:6f:cd:e9:14:d1:d6:84:e4:86:04:3b:39:7f:6b:ee:17:db:
de:9f:a3:d8:9a:3b:75:2e:1c:92:f3:7c:97:0c:47:41:8b:82:
8d:26:32:0a:c3:d7:27:bc:a6:9f:a9:05:44:f1:46:41:6a:53:
92:e6:9e:99:1d:82:18:d9:9e:0b:b4:31:c5:95:60:e6:6a:07:
d8:3a:8a:48:be:70:7a:46:1e:e2:6f:53:70:0f:93:7d:44:a9:
49:5d:2d:63:39:65:b9:f4:49:5f:2c:2f:bd:d4:86:b7:9d:df:
9b:99:9a:94:a2:f0:b4:79:c2:97:a3:17:26:5f:34:27:03:e2:
a8:46:17:8c:b7:f2:65:66:dd:97:d7:6d:32:93:88:58:53:28:
9d:aa:70:5b:31:e2:d9:23:61:4d:f6:c5:46:5a:00:77:a6:f7:
f8:d9:69:35:97:7b:ca:83:df:2e:b5:73:cd:d3:8a:05:f1:fe:
e8:e0:05:77:9e:9c:48:5a:a4:db:99:ba:cb:fd:5e:27:21:b8:
d8:8b:ac:54:ba:fe:17:24:47:25:13:69:12:30:a2:6e:a6:20:
96:2b:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:31 2026 by rpki-client