Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0BLLWmZ_ENHX5CXu1VhzGalKCPA.roa
File: 0BLLWmZ_ENHX5CXu1VhzGalKCPA.roa (raw, json)
Hash identifier: RfStXpgKzx1QMs5k5Z6JV4JLKxSD+Ku8zoWAmoNMvYU=
Subject key identifier: D0:12:CB:5A:66:7F:10:D1:D7:E4:25:EE:D5:58:73:19:A9:4A:08:F0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0A4D6FE79695549EFDED9E4E944D0D490
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0BLLWmZ_ENHX5CXu1VhzGalKCPA.roa
Signing time: Tue 15 Sep 2026 11:32:28 +0000
ROA not before: Tue 15 Sep 2026 11:32:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 212.189.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:d6:fe:79:69:55:49:ef:de:d9:e4:e9:44:d0:d4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 15 11:32:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d012cb5a667f10d1d7e425eed5587319a94a08f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:e5:05:54:ed:97:a2:5e:ef:8a:88:9a:87:
b8:47:96:01:a9:22:d1:33:7c:0a:a7:e4:c4:ef:2e:
78:55:1e:8e:c6:a6:14:bf:60:18:e5:a4:fe:d7:75:
2d:fc:00:4c:ee:e6:05:f1:39:54:2e:cd:32:e5:8f:
2b:6f:c7:67:da:28:22:dd:e0:99:73:32:2e:77:5c:
cb:cb:aa:26:ed:ea:3f:20:f4:69:49:d9:43:ab:97:
ae:de:d2:c1:d2:31:4c:9c:56:f4:62:66:15:c0:6d:
fe:ac:d1:e2:db:bc:0f:e1:58:32:58:04:84:47:5c:
11:36:7f:7e:b0:f0:87:e3:72:dc:14:83:f9:8e:58:
85:26:f5:ce:66:d5:fb:5b:c8:e1:e8:20:35:fa:25:
70:42:36:04:39:80:05:23:db:4a:16:8a:f3:96:b3:
14:c3:ec:28:6d:fc:1b:5f:6e:cc:94:da:5b:22:0a:
eb:df:31:b4:d0:d6:96:ed:8c:2c:85:fe:a0:51:13:
5d:6f:35:a0:50:6e:32:a6:1a:4d:4d:dc:d6:e6:1f:
f9:c6:96:47:eb:19:70:70:65:39:6c:ce:21:cc:be:
6c:40:ce:df:0a:ea:da:e1:aa:24:98:43:7c:e9:2b:
c8:92:6d:1b:46:bf:f8:c3:4d:9d:55:9d:69:86:38:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:CB:5A:66:7F:10:D1:D7:E4:25:EE:D5:58:73:19:A9:4A:08:F0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0BLLWmZ_ENHX5CXu1VhzGalKCPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.69.0/24
Signature Algorithm: sha256WithRSAEncryption
76:52:15:f1:db:17:15:1a:3e:b5:ff:ce:89:db:06:87:c5:00:
89:64:e5:7b:9e:20:20:2e:be:d3:ef:f9:1f:83:17:57:2f:55:
00:57:20:c6:10:7d:1b:a4:ba:63:eb:97:42:2f:9c:50:ca:56:
c8:9b:3b:5b:cc:00:d2:04:89:17:61:f2:fe:6c:03:02:11:c2:
8e:c6:e9:e4:cc:54:c0:36:53:30:a5:96:b9:d8:3f:8f:00:87:
b1:49:07:16:2d:f1:be:ec:0f:68:ec:94:8e:e5:6b:ad:77:68:
6a:8e:70:2d:fa:d5:9c:ef:11:6f:7b:47:79:86:90:48:76:c0:
94:dd:4b:f2:e0:58:fd:76:87:0a:40:6e:1a:fd:c4:af:c6:29:
96:74:c3:c8:17:59:af:34:85:41:72:e7:95:1a:8f:10:ae:e0:
d4:02:38:ae:27:2c:76:a1:00:a7:09:fa:e7:19:71:60:00:1d:
30:af:80:26:32:41:c8:98:f2:5d:56:6c:b5:40:70:fe:d4:35:
11:cf:56:7c:5d:e0:b9:a9:61:78:88:88:56:f3:e0:49:6e:14:
79:21:bc:28:18:94:c1:19:ca:ea:dc:4a:69:4b:00:33:67:28:
83:fa:d0:3a:84:9a:24:d2:f0:e0:88:c6:12:a2:53:3f:91:88:
f0:a9:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:04:50 2026 by rpki-client