Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/A-fomLSJSiKrCTbSv91bW5OVTck.roa
File: A-fomLSJSiKrCTbSv91bW5OVTck.roa (raw, json)
Hash identifier: 2DDKG6RBTuL/HQ7MrBSyAnwD6EFsNXfSsHexXa5hsF8=
Subject key identifier: 03:E7:E8:98:B4:89:4A:22:AB:09:36:D2:BF:DD:5B:5B:93:95:4D:C9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A186340AC1705D3D046E9F4792E1163D6B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/A-fomLSJSiKrCTbSv91bW5OVTck.roa
Signing time: Thu 29 Oct 2026 05:48:39 +0000
ROA not before: Thu 29 Oct 2026 05:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 92.71.160.0/19 maxlen: 19
194.122.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:34:0a:c1:70:5d:3d:04:6e:9f:47:92:e1:16:3d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 29 05:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03e7e898b4894a22ab0936d2bfdd5b5b93954dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:e1:70:98:4f:8e:e9:64:74:d1:c5:b2:fe:
22:8e:78:07:35:66:34:e5:6a:36:2e:56:9c:33:34:
4f:ec:af:f6:e2:18:9e:b9:38:cf:88:21:1e:e3:17:
07:b6:ea:71:7c:57:05:2b:d3:cc:fc:b8:d7:c4:11:
30:0d:9d:54:2e:2e:8b:bb:ce:90:dc:85:8e:22:92:
55:19:84:5e:9b:b4:f7:59:6b:ef:2f:c0:43:51:b2:
b2:1d:dd:c6:62:63:39:57:b1:21:64:fd:27:37:cd:
e7:fd:04:49:f0:fc:0c:35:bd:68:a5:7f:51:1b:42:
2c:03:63:b5:61:4d:b8:f9:e9:c4:20:2c:8f:ac:ca:
1d:62:f6:4d:8e:ea:02:2f:c4:15:a7:50:1f:32:c9:
5a:bb:90:ac:72:92:1a:03:2f:8c:f9:19:6f:c9:04:
8b:65:e0:c1:7c:e2:71:98:29:ec:68:e7:05:e6:26:
1f:b9:f1:d2:8a:30:67:6e:4e:72:7c:8e:4d:b8:d6:
be:49:64:55:b6:35:7c:75:ba:c0:b7:bd:05:b3:e4:
6a:e8:0b:1b:0a:72:33:74:1e:6e:61:e8:40:c7:87:
bc:f7:0c:03:ca:9a:04:d2:c1:60:50:d4:ce:ae:c0:
6e:ec:bb:21:8d:b9:00:f5:08:8f:1d:6c:08:1a:9c:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:E8:98:B4:89:4A:22:AB:09:36:D2:BF:DD:5B:5B:93:95:4D:C9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/A-fomLSJSiKrCTbSv91bW5OVTck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
194.122.83.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:8d:d1:da:53:c2:8e:d2:ed:0e:e1:fd:74:3f:a4:18:a7:a3:
90:f4:07:e1:ee:46:d5:5e:6a:15:d1:f9:5b:72:c7:06:33:9f:
d5:a6:7c:dd:68:bb:30:ee:f1:68:af:f6:3a:7f:71:c0:c1:94:
e5:a9:62:b4:49:32:62:1b:da:f8:ba:75:c9:bf:55:85:9c:40:
9e:94:5c:44:c1:a8:39:88:80:1e:7e:50:54:5e:e0:c9:38:ba:
65:b1:c5:4d:0e:e9:9c:8c:ab:66:46:69:97:89:37:4f:08:49:
33:ed:1c:48:41:4b:5a:80:21:07:d4:93:70:1d:d5:e9:29:79:
cb:db:b0:2e:e8:8a:ef:e8:42:f3:95:ff:9d:96:65:6f:fe:2c:
8e:76:e5:29:16:6c:19:fd:7a:1a:0d:b0:64:68:c7:8a:62:ea:
ad:1c:27:c4:f0:7d:1b:fa:2b:5c:7c:8b:b3:99:69:c8:6c:38:
06:a0:27:ed:f8:16:e2:eb:d0:07:31:bf:ed:47:d9:af:94:73:
6f:4a:6e:bf:b3:e0:91:7f:af:b8:f2:14:69:fc:6d:22:28:f4:
f6:49:59:17:80:8f:1c:76:98:38:76:c4:5d:31:8c:7f:bd:e1:
1a:a2:a7:9d:a8:aa:c6:6b:fb:70:10:30:80:27:31:10:c7:d5:
c8:db:e7:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGGNArBcF09BG6fR5LhFj1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDI5MDU0ODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2U3ZTg5OGI0ODk0YTIyYWIwOTM2ZDJiZmRkNWI1YjkzOTU0ZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJThcJhPjulkdNHFsv4ijngHNWY0
5Wo2LlacMzRP7K/24hieuTjPiCEe4xcHtupxfFcFK9PM/LjXxBEwDZ1ULi6Lu86Q
3IWOIpJVGYRem7T3WWvvL8BDUbKyHd3GYmM5V7EhZP0nN83n/QRJ8PwMNb1opX9R
G0IsA2O1YU24+enEICyPrModYvZNjuoCL8QVp1AfMslau5CscpIaAy+M+RlvyQSL
ZeDBfOJxmCnsaOcF5iYfufHSijBnbk5yfI5NuNa+SWRVtjV8dbrAt70Fs+Rq6Asb
CnIzdB5uYehAx4e89wwDypoE0sFgUNTOrsBu7LshjbkA9QiPHWwIGpyBwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAPn6Ji0iUoiqwk20r/dW1uTlU3JMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvQS1mb21MU0pTaUtyQ1RiU3Y5MWJXNU9WVGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFXEegAwQA
wnpTMA0GCSqGSIb3DQEBCwUAA4IBAQDTjdHaU8KO0u0O4f10P6QYp6OQ9Afh7kbV
XmoV0flbcscGM5/VpnzdaLsw7vFor/Y6f3HAwZTlqWK0STJiG9r4unXJv1WFnECe
lFxEwag5iIAeflBUXuDJOLplscVNDumcjKtmRmmXiTdPCEkz7RxIQUtagCEH1JNw
HdXpKXnL27Au6Irv6ELzlf+dlmVv/iyOduUpFmwZ/XoaDbBkaMeKYuqtHCfE8H0b
+itcfIuzmWnIbDgGoCft+Bbi69AHMb/tR9mvlHNvSm6/s+CRf6+48hRp/G0iKPT2
SVkXgI8cdpg4dsRdMYx/veEaoqedqKrGa/twEDCAJzEQx9XI2+fA
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:53 2026 by rpki-client