Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DA7XTnkocppxh5iZXgQ-etusIBs.roa
File: DA7XTnkocppxh5iZXgQ-etusIBs.roa (raw, json)
Hash identifier: sB6llYtIXFneF0Hc/l9ocWOv+8c7/0Aq7PoRBIlC9Cg=
Subject key identifier: 0C:0E:D7:4E:79:28:72:9A:71:87:98:99:5E:04:3E:7A:DB:AC:20:1B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1D11832E0B3D939BDAED83A7A69E2255B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DA7XTnkocppxh5iZXgQ-etusIBs.roa
Signing time: Thu 12 Nov 2026 18:49:46 +0000
ROA not before: Thu 12 Nov 2026 18:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 212.221.26.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:18:32:e0:b3:d9:39:bd:ae:d8:3a:7a:69:e2:25:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Nov 12 18:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c0ed74e7928729a718798995e043e7adbac201b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:26:0f:1e:b0:a8:0b:e2:eb:8a:40:5b:00:
ad:3f:25:cd:23:99:c4:ee:6b:7a:6f:52:e7:5a:14:
35:c9:91:b1:7c:56:b4:d1:a9:7c:13:2d:44:26:bb:
32:74:e8:b5:b6:50:cf:7e:9e:63:9f:d4:f0:4f:be:
85:c5:0b:39:df:9b:5f:37:07:0e:9a:4f:8d:f0:31:
84:a4:53:82:47:68:4a:c4:06:a2:14:cb:3e:ba:ac:
ef:59:83:c3:97:65:73:15:ef:a3:20:9c:05:5a:31:
04:56:0b:71:63:51:be:1a:af:78:a3:b5:51:b2:85:
7c:08:b2:c5:4e:4e:6f:04:d2:0c:fd:f1:90:cc:31:
6a:c0:a4:01:0d:6a:3b:09:52:82:60:aa:74:05:a6:
e2:59:99:6e:90:0f:87:ca:fb:41:28:de:22:ba:a4:
47:7f:86:00:ed:0e:60:13:1c:dd:ee:01:11:c6:dc:
a6:f9:82:05:2d:11:00:ae:00:c1:d4:32:cb:e9:e3:
13:1d:db:71:a2:c5:d1:4b:f1:84:1c:96:1c:bd:a7:
ed:f4:99:ed:07:3b:ba:80:ae:35:df:f2:69:34:8a:
28:d1:82:45:eb:e9:1a:9c:06:83:67:27:6c:df:d4:
f5:e5:f8:ca:89:fa:29:67:92:18:11:2b:95:bd:f1:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:D7:4E:79:28:72:9A:71:87:98:99:5E:04:3E:7A:DB:AC:20:1B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DA7XTnkocppxh5iZXgQ-etusIBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.221.26.0/24
217.8.197.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:df:45:58:b0:be:e6:9f:7d:e3:0b:c7:f9:0f:b0:22:31:58:
45:d4:1a:e8:17:96:68:95:9a:7c:ae:99:18:5c:88:ca:cf:52:
dc:5a:ed:fa:bb:d2:57:eb:a3:f9:57:a8:c3:af:fb:0e:e7:5e:
9c:2f:05:02:42:19:7b:fc:32:1c:11:07:23:fc:31:17:d6:11:
70:05:8f:9b:8f:dc:f4:6d:5d:ef:3b:1b:3a:e1:9e:8b:e9:51:
ed:34:db:f1:a7:d0:18:3d:68:84:21:6c:5d:a3:3d:63:ea:a7:
42:a2:64:f4:a5:4f:ca:20:4e:5b:3e:df:97:c8:6f:56:a4:4f:
08:bb:d2:7a:28:1b:ba:0a:26:14:98:d7:09:65:b4:0b:9c:21:
d5:37:82:74:87:09:e1:47:6e:f0:53:4e:4b:1b:70:01:18:91:
52:dd:86:18:8e:40:fb:0d:d8:05:3c:c1:0f:3e:27:f4:a2:bc:
fa:31:0b:26:85:bd:21:85:25:d7:c7:94:c3:f8:05:6c:09:39:
60:09:8f:a2:99:91:91:23:90:b2:a4:a4:3a:2e:07:13:e1:c0:
a4:82:23:b8:f4:c7:bd:1d:c1:25:fc:11:38:34:18:f4:74:c2:
e8:37:b2:33:d3:da:96:1d:72:a3:55:b1:70:5d:26:44:a8:e5:
63:7d:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:25 2026 by rpki-client