Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa
File: NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa (raw, json)
Hash identifier: RLlBvyKQk7ZpNWvbBgNGnwpHL3NkcCrqlw1bbIkW97k=
Subject key identifier: 35:40:23:54:CC:68:E9:47:1D:E3:1B:08:4F:C4:6D:39:E2:E4:A2:CE
Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial: 019B7D5BEB39B4AE373DA9CD89BC9DBF681E
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa
Signing time: Fri 02 Jan 2026 06:18:54 +0000
ROA not before: Fri 02 Jan 2026 06:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35656
IP address blocks: 87.236.232.0/21 maxlen: 21
87.236.232.0/24 maxlen: 24
87.236.233.0/24 maxlen: 24
87.236.234.0/24 maxlen: 24
87.236.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:eb:39:b4:ae:37:3d:a9:cd:89:bc:9d:bf:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Validity
Not Before: Jan 2 06:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35402354cc68e9471de31b084fc46d39e2e4a2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ae:b1:2e:e9:f5:54:18:16:ea:5a:b1:1d:22:
bb:af:e9:c4:e7:02:a7:d8:16:f1:e6:25:46:41:06:
7e:e6:ba:2e:80:3f:72:c5:06:57:f9:fe:a5:ee:16:
2c:a1:f2:20:69:84:83:f3:a5:7a:1d:9a:ed:86:c7:
b7:57:3f:06:27:6e:c4:57:78:08:41:e5:91:2b:22:
dc:a7:8c:8c:2f:47:77:70:ca:21:b7:93:a2:55:20:
26:45:1f:3c:ab:e2:a9:2a:12:64:78:3b:f9:36:91:
be:27:ec:c8:38:56:cc:fd:0f:4b:4a:69:1a:29:67:
82:e1:65:21:96:97:60:73:f6:37:e5:1d:b9:7d:2f:
f3:96:a8:5e:cc:94:56:46:ad:1d:1d:0a:fd:c9:54:
49:e6:32:78:23:08:9d:98:b9:c6:bb:dd:65:67:de:
d7:21:d3:98:bd:39:6f:20:eb:7a:a2:d4:10:37:81:
19:01:8a:ec:5c:b5:6b:13:de:e8:ad:f7:d5:f6:6a:
e1:0e:72:a8:32:8f:1a:67:ff:2b:7d:f7:4e:d7:cf:
4b:60:0b:b8:92:98:1f:59:19:84:e1:1c:f0:df:f0:
ad:d9:48:80:72:e6:e4:ae:63:d5:b6:e6:f3:43:81:
d2:af:b5:bb:eb:58:0e:28:5b:46:51:f6:44:22:aa:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:23:54:CC:68:E9:47:1D:E3:1B:08:4F:C4:6D:39:E2:E4:A2:CE
X509v3 Authority Key Identifier:
keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/NUAjVMxo6Ucd4xsIT8RtOeLkos4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.232.0/21
Signature Algorithm: sha256WithRSAEncryption
98:aa:f0:7c:e2:2a:5b:73:7e:03:4c:13:f2:4e:93:a6:6d:03:
b6:87:bf:f5:e5:53:ad:b7:c8:14:78:55:ed:96:4d:56:c3:c4:
b4:b4:30:38:4f:77:af:32:a8:f7:80:c4:68:d3:78:2d:23:28:
3c:8d:31:2a:99:65:4b:94:ff:d4:e5:49:69:f7:89:2b:53:85:
dd:fe:6d:bc:ed:5c:67:84:30:85:bc:15:45:c6:cc:2a:cc:dd:
88:25:a3:6e:d4:bd:1c:9c:37:06:b7:c7:1c:52:81:df:1a:2c:
2f:d3:b8:40:b4:c5:5a:2d:71:57:97:5f:ef:9e:8b:b2:9c:99:
9d:f7:87:9f:73:36:0a:5d:4e:77:30:1a:00:90:5b:7a:72:55:
38:e8:c2:19:4c:a7:56:2f:e8:df:c2:df:fd:ca:20:69:f3:1d:
8b:0b:e7:00:2a:c0:36:61:1e:b8:13:f3:8d:4b:bd:2e:76:49:
9e:a4:6f:9d:44:f6:b0:2b:c3:2e:49:9d:fb:6b:41:64:8a:54:
97:63:24:e7:b2:15:c7:90:12:2f:53:f3:c0:45:b5:c7:a0:a8:
45:2b:bf:98:88:24:dc:81:20:04:64:bc:9f:26:e8:bc:ba:ae:
4a:ba:ab:a5:e4:0c:ea:ae:14:02:11:b7:62:18:7a:29:17:32:
6b:f6:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:44 2026 by rpki-client