Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HtjoJ7Bghd0QrCD1qf5sO5JSxw4.roa
File: HtjoJ7Bghd0QrCD1qf5sO5JSxw4.roa (raw, json)
Hash identifier: XEiXKR+x6qr2/EF+CWtQC5csInQeDOpifaeWYNzj4FU=
Subject key identifier: 1E:D8:E8:27:B0:60:85:DD:10:AC:20:F5:A9:FE:6C:3B:92:52:C7:0E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0D182E0A94F2A51C06807CFA5911E5069
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HtjoJ7Bghd0QrCD1qf5sO5JSxw4.roa
Signing time: Thu 24 Sep 2026 03:43:30 +0000
ROA not before: Thu 24 Sep 2026 03:43:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 194.77.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:82:e0:a9:4f:2a:51:c0:68:07:cf:a5:91:1e:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 24 03:43:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ed8e827b06085dd10ac20f5a9fe6c3b9252c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:a3:ff:c5:2f:d0:1f:90:81:43:2d:9b:fb:
d9:d2:15:5e:81:0a:87:61:c1:f4:e6:4b:ae:c0:83:
ca:93:1a:da:7b:39:22:60:af:9f:76:46:c9:15:a3:
ce:76:cd:19:9e:a8:f7:09:df:37:4b:cd:c7:79:4e:
34:3b:12:b9:04:bf:08:a2:b6:fc:87:a0:54:56:ff:
6e:f1:7e:f6:b3:d2:38:2f:16:b4:01:67:de:e1:0e:
da:42:29:49:c3:1d:d3:dd:6d:39:6c:be:7c:68:9a:
65:69:aa:06:5c:e0:90:d2:b6:91:dd:a3:a9:0b:8d:
e1:9f:13:0c:ed:cb:ce:0b:0e:3d:ee:38:f1:61:17:
ce:f5:e5:1a:64:1a:3c:bc:8d:d2:b5:94:23:49:0f:
9e:78:fc:ad:84:f9:a6:d0:6c:e8:a4:40:e6:9f:4e:
9c:b4:ae:37:71:3d:5a:e9:22:f4:9b:7f:bf:c4:57:
98:51:5a:f6:9d:fd:44:c8:fb:99:c5:54:d6:05:aa:
99:45:41:e7:74:ef:00:c9:df:7e:1a:fb:8f:17:72:
ea:f9:a8:a9:f9:04:5a:6b:ac:4f:64:9d:e8:a2:6d:
d0:98:44:87:d7:32:88:7b:83:f7:f2:b1:46:f0:91:
33:c0:b7:b7:69:98:ed:09:e7:01:61:ee:3e:7f:96:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:E8:27:B0:60:85:DD:10:AC:20:F5:A9:FE:6C:3B:92:52:C7:0E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HtjoJ7Bghd0QrCD1qf5sO5JSxw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.91.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9a:6e:d9:58:6e:2a:c2:c1:f0:55:7d:fe:ad:e2:95:a8:f4:
eb:62:ca:f9:eb:7c:6e:01:e9:f9:51:f5:49:73:3f:e9:40:54:
7f:4c:f5:d2:2a:1a:57:5f:b1:01:da:71:7c:43:50:88:28:3f:
e0:d6:d7:ad:21:ae:72:4d:5a:ed:a0:74:9a:bd:96:1b:cc:d0:
87:31:4d:8c:45:44:85:51:05:13:82:8a:83:29:5a:bd:a5:f5:
62:cd:77:31:3c:aa:cc:50:a1:d7:57:bc:3c:eb:2a:23:b0:1c:
47:10:ee:a1:08:34:a1:01:39:64:8b:5f:3a:d6:be:7e:81:23:
c5:32:9f:35:28:30:1f:35:13:f0:7e:f2:be:50:17:29:14:8e:
60:cf:5e:29:61:1d:c2:2e:ce:f9:1b:3a:65:37:ab:39:af:6e:
ca:fa:b7:d7:09:03:a8:63:f6:36:ce:ef:a6:13:62:50:78:37:
24:25:75:cf:72:09:3d:25:48:db:f9:44:02:eb:2f:56:23:7d:
a2:57:59:97:7b:12:8e:2a:51:52:6e:86:0b:6f:09:1c:6f:07:
68:76:e6:ff:e4:32:fc:17:6d:0f:cd:97:e9:0a:12:8e:27:35:
f4:52:74:24:ef:76:a9:d4:5d:27:92:03:9d:32:50:92:9d:56:
44:11:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:34 2026 by rpki-client