Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa
File: NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa (raw, json)
Hash identifier: w5wTWXfJi4JyaAkM3S35Sztsv2m7MFD4x5Xkavn1W38=
Subject key identifier: 35:C3:FA:40:B6:CF:00:66:D2:9C:CB:8E:1C:60:5D:00:86:3E:F2:A7
Certificate issuer: /CN=072e29cad6add22a21b562151187841c8f53f2e5
Certificate serial: 019F37F13978410EB12E438F94ADB87F9D8B
Authority key identifier: 07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa
Signing time: Mon 06 Jul 2026 14:59:43 +0000
ROA not before: Mon 06 Jul 2026 14:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 194.213.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f1:39:78:41:0e:b1:2e:43:8f:94:ad:b8:7f:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072e29cad6add22a21b562151187841c8f53f2e5
Validity
Not Before: Jul 6 14:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35c3fa40b6cf0066d29ccb8e1c605d00863ef2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:49:4c:f2:12:e4:e6:eb:bd:11:94:1e:2d:
37:e7:9e:98:f2:17:50:48:0f:27:41:a9:24:f3:1e:
96:bd:99:c1:ab:0d:4e:08:b0:c9:b1:b0:36:ea:c2:
24:97:72:55:fb:7d:22:49:d0:45:0e:cf:99:e6:ae:
fd:8c:3b:fe:a0:e7:6f:7b:d3:2c:57:7c:c3:9c:c3:
24:a2:c3:34:aa:9a:bb:fc:59:52:f0:5c:45:ec:d8:
4f:14:46:7f:6b:af:bd:1d:c6:37:4f:91:21:4d:43:
fb:7b:94:74:a3:00:57:08:fc:cc:14:d5:18:06:a7:
5d:5e:08:55:bf:ec:bf:f1:fa:a5:8f:60:b7:1e:96:
66:ad:0a:e8:a5:b4:d7:c0:5f:83:12:c3:c8:db:c1:
6c:d9:73:76:34:0b:5d:91:ca:6c:43:64:27:c3:f1:
13:0d:53:25:e5:9d:da:1f:5f:72:28:a4:7e:db:62:
85:62:94:43:41:c9:89:07:e0:52:de:77:34:a0:5c:
81:32:05:a9:67:ca:1e:f6:02:5e:c3:3d:16:e6:92:
7c:59:0c:21:eb:04:e3:4d:3d:61:46:86:d1:13:9d:
33:94:82:cf:f6:f8:57:a8:38:2e:d5:e8:21:36:c9:
05:7b:6c:33:e1:43:89:74:bd:2e:29:f4:67:1f:70:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:FA:40:B6:CF:00:66:D2:9C:CB:8E:1C:60:5D:00:86:3E:F2:A7
X509v3 Authority Key Identifier:
keyid:07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.118.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1b:ad:c0:a1:60:cd:84:a7:31:99:d3:1e:c4:be:1a:b0:df:
50:74:4a:21:7f:9f:6f:a1:75:6a:28:df:ec:b6:6f:e6:bb:71:
d0:bc:54:41:b4:61:e9:f4:82:cf:aa:fb:74:76:1c:c3:7c:4d:
32:1c:4b:80:93:a0:85:e2:03:3f:43:5a:b1:1e:53:49:0e:bc:
dd:62:34:0c:5e:9d:b6:a5:db:8b:20:13:24:43:f8:2f:31:cf:
1d:a8:6f:e0:9b:fe:7d:ee:bd:98:38:6d:dd:8c:4c:d1:9a:d8:
18:e6:22:be:7a:31:6e:8f:4c:8f:2a:52:81:3e:5f:60:aa:48:
d4:39:cf:9e:4a:82:74:5e:36:22:8d:a2:21:c6:96:03:39:26:
c4:2f:f0:0d:08:d1:12:8e:58:77:9d:c3:67:46:2f:aa:a0:23:
29:34:77:c0:e3:58:2f:a0:8e:1e:f2:fe:22:c1:03:0e:21:69:
9f:fa:84:3a:ac:50:3f:1c:e9:26:be:19:53:4f:85:9f:ba:2c:
31:b6:59:7b:8f:3b:5e:29:14:31:63:a4:ad:e0:8b:c3:19:f6:
7f:f9:77:67:a4:c3:2e:a4:63:e5:72:11:55:b3:3e:24:55:ea:
bc:e0:4e:84:03:37:7f:09:56:65:4e:d1:94:c8:77:ce:d7:aa:
c0:c8:92:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ838Tl4QQ6xLkOPlK24f52LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MmUyOWNhZDZhZGQyMmEyMWI1NjIxNTExODc4NDFjOGY1
M2YyZTUwHhcNMjYwNzA2MTQ1OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWMzZmE0MGI2Y2YwMDY2ZDI5Y2NiOGUxYzYwNWQwMDg2M2VmMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4FJTPIS5ObrvRGUHi03556Y8hdQ
SA8nQakk8x6WvZnBqw1OCLDJsbA26sIkl3JV+30iSdBFDs+Z5q79jDv+oOdve9Ms
V3zDnMMkosM0qpq7/FlS8FxF7NhPFEZ/a6+9HcY3T5EhTUP7e5R0owBXCPzMFNUY
BqddXghVv+y/8fqlj2C3HpZmrQropbTXwF+DEsPI28Fs2XN2NAtdkcpsQ2Qnw/ET
DVMl5Z3aH19yKKR+22KFYpRDQcmJB+BS3nc0oFyBMgWpZ8oe9gJewz0W5pJ8WQwh
6wTjTT1hRobRE50zlILP9vhXqDgu1eghNskFe2wz4UOJdL0uKfRnH3DPFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXD+kC2zwBm0pzLjhxgXQCGPvKnMB8GA1UdIwQY
MBaAFAcuKcrWrdIqIbViFRGHhByPU/LlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnk0cHl0YXQwaW9odFdJVkVZZUVISTlUOHVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hYmUxNjEtNmU3ZC00YzNmLThiMDgt
NzFiNDUwZmJhZmJjLzEvTmNQNlFMYlBBR2JTbk11T0hHQmRBSVktOHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hYmUxNjEtNmU3ZC00YzNmLThiMDgtNzFiNDUwZmJhZmJj
LzEvQnk0cHl0YXQwaW9odFdJVkVZZUVISTlUOHVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtV2MA0G
CSqGSIb3DQEBCwUAA4IBAQBYG63AoWDNhKcxmdMexL4asN9QdEohf59voXVqKN/s
tm/mu3HQvFRBtGHp9ILPqvt0dhzDfE0yHEuAk6CF4gM/Q1qxHlNJDrzdYjQMXp22
pduLIBMkQ/gvMc8dqG/gm/597r2YOG3djEzRmtgY5iK+ejFuj0yPKlKBPl9gqkjU
Oc+eSoJ0XjYijaIhxpYDOSbEL/ANCNESjlh3ncNnRi+qoCMpNHfA41gvoI4e8v4i
wQMOIWmf+oQ6rFA/HOkmvhlTT4Wfuiwxtll7jzteKRQxY6St4IvDGfZ/+XdnpMMu
pGPlchFVsz4kVeq84E6EAzd/CVZlTtGUyHfO16rAyJKa
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:32 2026 by rpki-client