Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Jq8G4WO38JeRcsVtXg9fBFe_lro.roa
File: Jq8G4WO38JeRcsVtXg9fBFe_lro.roa (raw, json)
Hash identifier: LmQmmsS03/p4GRx25khOOMl8r/u68n9h1ElV/zYY34k=
Subject key identifier: 26:AF:06:E1:63:B7:F0:97:91:72:C5:6D:5E:0F:5F:04:57:BF:96:BA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10B2463A5457071C2CFE1740D1C9613A6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Jq8G4WO38JeRcsVtXg9fBFe_lro.roa
Signing time: Mon 05 Oct 2026 08:18:16 +0000
ROA not before: Mon 05 Oct 2026 08:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 194.77.204.0/22 maxlen: 24
194.77.224.0/22 maxlen: 24
212.189.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:24:63:a5:45:70:71:c2:cf:e1:74:0d:1c:96:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 08:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26af06e163b7f0979172c56d5e0f5f0457bf96ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:44:9b:d4:3d:3f:8f:f6:3e:98:b1:4b:21:
e0:45:32:82:69:d1:98:94:51:e1:4c:9d:02:a0:f3:
8a:6e:32:d5:07:bd:e5:e8:3b:e6:a7:58:88:6a:1f:
18:fc:b2:67:7e:82:be:c6:b8:dd:42:b9:d1:08:c8:
76:c6:a7:cd:ef:1c:09:fa:97:86:46:50:30:42:cf:
e7:45:01:56:20:0c:14:e4:d4:d7:a7:b8:95:4d:bf:
a4:4e:4f:90:04:ac:9c:df:8f:65:b9:f2:a1:59:7a:
02:1a:ac:c0:ef:d3:28:c9:d4:c5:cc:66:c3:54:10:
d7:f6:63:2b:4d:2c:25:bc:39:86:c5:b0:c9:2b:50:
86:ed:3c:46:de:60:ac:82:e8:71:a8:e1:51:cf:13:
97:dd:b4:b1:1f:c8:dc:1c:be:67:86:48:64:59:c7:
29:24:16:7f:ae:75:1f:04:2c:5c:cb:84:5f:25:a9:
9d:dc:3f:f1:71:a9:6e:3b:bf:ef:50:29:15:50:b2:
49:88:20:a5:d0:f7:b7:8f:59:ed:6a:a9:b3:d4:51:
b5:10:be:c3:0b:5e:cc:2c:6d:e9:d0:fe:22:d0:78:
e6:d5:fe:78:26:30:09:c4:e7:46:43:1c:48:56:12:
08:ad:50:d6:41:73:3d:5c:8a:a2:93:db:81:94:0f:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:06:E1:63:B7:F0:97:91:72:C5:6D:5E:0F:5F:04:57:BF:96:BA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Jq8G4WO38JeRcsVtXg9fBFe_lro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.204.0/22
194.77.224.0/22
212.189.64.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:96:fe:be:54:f7:e0:c7:ec:4b:0b:37:02:80:a2:b7:1c:fc:
a4:dd:11:31:9c:7d:64:6f:a0:1a:72:46:93:5f:7d:a0:6b:f0:
15:8e:9e:75:89:73:39:86:19:72:17:ed:5b:f9:73:e8:db:47:
05:32:82:50:e8:15:84:75:62:3f:4d:8d:37:4b:d8:2a:88:66:
12:ee:1c:cc:2c:ec:89:69:e5:5c:19:28:f7:62:96:4f:66:64:
85:0c:0d:7f:b1:d4:23:a4:21:0f:63:2a:c7:11:f4:15:fe:94:
8d:70:da:12:a8:5f:36:53:b6:c9:6a:c0:c6:6c:d6:50:9d:e2:
1f:96:00:89:1e:db:66:85:93:45:4a:ea:89:9b:bd:40:05:c1:
b5:89:44:1e:e4:56:b1:5b:f0:a6:37:c4:41:b0:03:83:b4:8a:
79:b5:84:f2:56:e6:ad:11:9a:97:7a:fa:52:d5:10:be:a3:07:
e0:04:a8:fc:a8:ae:ed:ae:14:c6:92:75:a7:b8:86:74:a6:16:
8a:26:a1:8b:35:e9:be:4b:70:72:a3:f0:c6:67:12:36:ae:d9:
27:de:31:2b:4c:68:66:22:df:e3:ea:2b:99:30:a4:cf:9e:c0:
42:c5:e2:35:36:54:98:7b:94:ac:93:1c:15:f4:79:40:64:25:
ba:75:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:43:33 2026 by rpki-client