Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uL-soIEfHSqT8_oLlUZbcYdJPDw.roa
File: uL-soIEfHSqT8_oLlUZbcYdJPDw.roa (raw, json)
Hash identifier: MrVdES1f98EmqFjOGfcbUvViQu35aixPlgUlvCBgz2I=
Subject key identifier: B8:BF:AC:A0:81:1F:1D:2A:93:F3:FA:0B:95:46:5B:71:87:49:3C:3C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019DD40A5A7AECE088B96B79CDF7A1863FF7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uL-soIEfHSqT8_oLlUZbcYdJPDw.roa
Signing time: Tue 28 Apr 2026 12:22:21 +0000
ROA not before: Tue 28 Apr 2026 12:22:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213751
IP address blocks: 193.124.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:0a:5a:7a:ec:e0:88:b9:6b:79:cd:f7:a1:86:3f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 28 12:22:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8bfaca0811f1d2a93f3fa0b95465b7187493c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:ac:6b:b2:ef:71:18:a1:36:04:37:54:84:
a6:13:6d:29:e2:03:57:d4:b6:44:79:a1:4d:ac:61:
f7:89:ec:ec:b3:70:65:4e:b4:d1:9b:48:66:7b:dc:
e0:31:c2:17:71:f1:0b:da:2b:df:11:1e:c3:27:84:
67:7e:a8:9e:e2:ed:ab:5e:9e:1e:81:52:d0:a3:c4:
f2:59:c7:28:28:29:bb:63:21:d3:e7:cf:47:cf:5d:
51:15:f2:8b:66:13:9b:6c:76:52:03:83:77:6e:e9:
2f:b0:08:3c:49:d8:7f:03:7b:37:73:58:4d:68:39:
b2:1e:8f:85:9c:a3:82:d1:d9:1b:ab:f3:e9:b5:2b:
16:f4:a2:3c:ea:ec:ad:5b:62:2e:b9:f4:0e:22:53:
74:bb:00:f9:88:84:af:57:9e:71:fa:f9:fa:44:f9:
1c:44:f3:ab:2b:64:5b:b6:b1:91:ff:8d:f2:60:1e:
fa:0e:3d:81:41:17:02:1b:a0:1a:38:f4:3a:b3:d3:
a7:c1:ce:7e:79:af:08:9a:17:33:a5:65:49:86:6c:
89:20:d0:89:af:6e:77:32:4a:e4:29:a4:f6:29:92:
61:5b:20:c5:b9:51:70:8a:6f:59:d2:e1:37:e9:c3:
96:1d:19:fb:e2:24:6f:34:af:24:82:16:5a:05:3d:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:AC:A0:81:1F:1D:2A:93:F3:FA:0B:95:46:5B:71:87:49:3C:3C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uL-soIEfHSqT8_oLlUZbcYdJPDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.124.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c2:b5:31:02:08:41:bf:e4:05:62:cb:7f:69:bc:93:d2:a3:
0b:df:f2:87:8c:96:bf:16:a8:49:4b:fc:07:79:5b:08:5d:e6:
61:b7:9b:50:32:c9:6b:85:ac:76:0c:96:f7:ab:a4:5a:45:e8:
cc:ff:59:50:19:ba:44:a5:4e:e9:35:ad:f8:99:10:2e:8f:50:
f9:32:d3:77:ea:f9:c9:ab:a1:f0:a3:ee:fe:3c:38:25:83:df:
97:81:95:23:fa:5a:1a:81:c0:bb:ef:92:30:0d:46:2d:c4:21:
14:7c:24:1c:64:5c:4a:60:b2:77:51:1b:b7:a2:c5:71:5e:18:
15:a8:5b:94:f1:02:5e:3c:ef:0a:72:ea:68:66:e3:66:5a:b9:
43:4c:ed:69:f4:48:2a:a5:46:1e:64:d2:e8:ce:79:a9:e1:0b:
42:bb:52:d2:2a:f9:02:25:a5:82:80:0c:68:fa:08:f8:e3:3f:
0f:4b:fe:4a:41:e6:e8:ba:21:d8:71:df:e8:8d:39:46:9a:f0:
f8:47:9a:b3:21:81:d7:db:0e:60:d6:41:3a:61:b2:a4:32:ee:
b3:29:c5:24:54:8f:ed:a2:0c:2a:b2:f6:cb:db:b5:54:16:27:
24:f0:5d:14:45:52:5e:7e:b5:b8:bf:31:95:32:de:18:d3:9c:
9f:4b:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:56 2026 by rpki-client