Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RgPmcoMv-PbFxNa9BQPqi5XDMkM.roa
File: RgPmcoMv-PbFxNa9BQPqi5XDMkM.roa (raw, json)
Hash identifier: rZC/4YI8w5piBYT+8g80dkUgN/RXELboK1naJFwiRS8=
Subject key identifier: 46:03:E6:72:83:2F:F8:F6:C5:C4:D6:BD:05:03:EA:8B:95:C3:32:43
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10A58C04DB71152FBD047567D42BFD14D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RgPmcoMv-PbFxNa9BQPqi5XDMkM.roa
Signing time: Mon 05 Oct 2026 04:35:50 +0000
ROA not before: Mon 05 Oct 2026 04:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 194.77.187.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:58:c0:4d:b7:11:52:fb:d0:47:56:7d:42:bf:d1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 04:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4603e672832ff8f6c5c4d6bd0503ea8b95c33243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:02:fe:25:90:5d:b5:ec:e4:97:ca:4c:61:
36:a4:28:c1:58:e9:b3:7b:56:1f:c3:82:41:42:c1:
b8:da:c1:40:5e:8c:71:05:10:8f:02:40:7d:67:6d:
30:ca:87:b2:52:69:b4:08:9b:2c:95:df:aa:fe:54:
89:20:3e:65:5c:7a:0b:a1:3b:41:7d:1a:7b:ed:b1:
9a:d6:b9:00:ca:10:17:33:19:54:16:f6:95:3e:e1:
3e:91:04:18:55:90:3c:02:b3:4b:da:6d:34:c3:06:
96:37:19:d5:11:eb:d0:aa:4d:78:66:a8:8d:37:5e:
95:93:72:94:a2:50:f0:bd:d3:ea:5e:f0:f1:ca:55:
26:51:6d:36:18:40:a8:13:75:ff:0f:89:6a:4d:12:
de:08:e3:a2:44:ac:1a:c0:6e:64:fb:8c:36:f1:9e:
4b:50:3c:07:da:cb:e2:fd:96:b7:58:08:b8:45:c3:
5b:f2:21:4c:cb:86:75:be:b9:1d:d1:af:31:65:a3:
19:b7:99:79:f6:ab:53:fb:71:39:b1:43:68:f1:26:
d4:24:c3:39:91:60:df:29:b7:db:61:be:22:91:11:
76:18:66:a8:7f:56:88:e4:42:a7:9b:ad:cf:26:d5:
75:01:e4:18:b0:dd:e8:fe:1c:4d:29:07:df:5f:d7:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:E6:72:83:2F:F8:F6:C5:C4:D6:BD:05:03:EA:8B:95:C3:32:43
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RgPmcoMv-PbFxNa9BQPqi5XDMkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.187.0/24
212.189.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:31:50:6c:5d:16:b3:4f:a0:6e:ad:01:0c:2a:ef:2a:47:ab:
80:02:9c:1e:bb:2e:56:d4:99:ac:05:15:74:f2:26:04:9c:f4:
a7:45:f9:12:61:12:5e:15:ce:aa:af:f0:26:90:06:67:ec:3c:
d6:b5:d1:8f:23:3d:d4:bf:cb:f2:d5:3e:a6:28:a3:e4:ed:1b:
74:dc:5f:33:f3:02:7b:d3:53:aa:16:c9:6b:cb:e2:31:ad:ba:
2c:a7:64:5c:eb:5d:bd:b0:33:c6:db:2a:f2:eb:73:9c:f4:87:
18:bb:1b:a6:d3:0f:8a:57:09:0f:94:f2:60:24:64:3d:15:94:
be:f5:70:2c:a7:4b:4f:33:a5:9e:d0:57:ae:79:85:ae:92:0f:
77:95:20:a7:b6:92:64:55:c4:fc:74:1e:56:f9:53:d5:f3:68:
c9:36:cd:41:85:3e:67:7a:05:04:39:43:ac:4d:fc:29:b8:b8:
37:0f:07:2c:44:6b:fc:39:43:fe:70:fc:c0:be:7d:92:fa:18:
de:7e:2e:11:41:47:a1:34:6b:f6:9b:dd:2a:80:03:99:39:27:
1f:75:3d:ff:df:5e:17:fc:82:81:f0:a4:fd:82:18:b1:95:51:
db:48:c6:bc:39:b1:96:51:f3:fd:65:77:f6:d2:10:50:ca:49:
60:eb:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:38:53 2026 by rpki-client