Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-42xD-lisYQHm_dg5SZ8qMy-RM.roa
File: 1-42xD-lisYQHm_dg5SZ8qMy-RM.roa (raw, json)
Hash identifier: 3HIZC4pmmJPEMBHHJ09XUgq+Ob7yO45iOqrQ80OCKt8=
Subject key identifier: D7:EE:36:C4:3F:A5:8A:C6:10:1E:6F:DD:83:94:99:F2:A3:32:F9:13
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EFE2C2795CC79023F2B354119CC560988
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-42xD-lisYQHm_dg5SZ8qMy-RM.roa
Signing time: Thu 25 Jun 2026 09:46:06 +0000
ROA not before: Thu 25 Jun 2026 09:46:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 194.77.24.0/23 maxlen: 24
194.77.60.0/23 maxlen: 24
195.21.147.0/24 maxlen: 24
212.168.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:2c:27:95:cc:79:02:3f:2b:35:41:19:cc:56:09:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 25 09:46:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7ee36c43fa58ac6101e6fdd839499f2a332f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:8c:4f:27:cd:02:84:01:64:8b:ef:94:07:
9e:0d:76:5e:ac:7a:5b:6c:d7:a0:59:a8:fc:3f:86:
31:e9:f6:f4:ec:3c:be:e9:e5:fa:e8:0d:47:5a:ac:
1d:27:4c:af:9e:85:85:7d:80:7a:56:f2:36:3f:dc:
26:19:5b:25:4f:33:d8:e3:b1:d1:a6:29:02:18:e1:
f2:69:dd:57:7a:1a:d9:5c:18:b1:ed:98:71:7e:32:
aa:5e:52:d2:2e:57:2b:a6:af:f9:55:e9:ff:d5:ce:
46:58:03:ad:1b:aa:dd:a4:69:80:1c:71:54:09:fd:
75:0d:d1:31:dd:65:58:b1:4a:7d:45:b6:b9:f1:7e:
68:3d:a1:a8:1d:91:a3:10:d7:f0:c0:b9:69:ff:37:
aa:f9:88:71:ac:e2:de:a7:1a:7e:c4:70:9a:ba:45:
73:d7:20:96:e7:d2:be:83:44:6c:67:b9:36:01:8e:
23:60:11:94:9c:01:c5:c9:34:2b:b5:31:ab:54:09:
aa:4a:34:71:1d:69:42:69:f1:4b:d7:1c:c1:97:34:
3a:06:ef:56:12:6f:35:24:36:54:06:81:bf:b5:ec:
99:06:97:90:18:54:b8:99:68:0c:22:21:07:82:44:
59:7e:db:da:ed:bd:3e:a5:7e:25:3b:43:1d:7e:c6:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:36:C4:3F:A5:8A:C6:10:1E:6F:DD:83:94:99:F2:A3:32:F9:13
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-42xD-lisYQHm_dg5SZ8qMy-RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.24.0/23
194.77.60.0/23
195.21.147.0/24
212.168.200.0/21
Signature Algorithm: sha256WithRSAEncryption
46:75:23:82:b0:a5:de:c1:a2:49:f3:8f:17:52:ca:2e:61:ed:
e5:99:21:7d:1b:1d:7f:ff:4f:62:7b:4e:33:c9:20:0f:50:ca:
a4:92:82:f0:ad:81:db:5d:d3:0c:fd:f3:78:53:19:98:87:c2:
e6:1c:2f:f4:2f:e0:9b:c3:40:c0:61:18:e1:8e:71:34:b9:62:
53:51:28:5f:9a:24:93:c3:fb:a0:fb:81:0f:12:8a:a6:a5:06:
74:fa:29:59:a4:e6:9d:c9:e2:f1:ab:a8:97:d5:aa:d9:87:fe:
93:3e:f2:18:a2:fa:7e:52:1d:80:82:3d:51:cf:e7:72:95:db:
62:af:a1:c6:31:7b:af:2b:e1:5e:ba:d7:bc:b8:11:cd:68:7c:
36:fb:16:fa:88:16:b9:af:1a:9e:5f:62:0e:13:a3:21:9f:21:
bc:87:6a:c0:0e:74:8c:6d:17:d4:56:52:9d:6c:92:63:e6:e5:
f8:09:fc:ed:31:a1:7e:fc:0c:14:57:35:03:05:ee:f0:6e:53:
28:17:86:66:f5:0b:b8:3f:3d:ae:72:29:62:fc:90:9c:72:71:
39:ed:5f:66:49:d4:a4:fd:93:23:22:2f:db:17:9e:2b:00:56:
26:b5:d8:19:dc:27:db:09:aa:bd:c2:37:e8:6f:69:ba:bf:01:
ba:a4:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:10 2026 by rpki-client