Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ScMoZltXC97bM4jVro9JPxjNWts.roa
File: ScMoZltXC97bM4jVro9JPxjNWts.roa (raw, json)
Hash identifier: dpkiyimracB8HRfhq7TTC5p5cP9B5aw+awGGBQJwQkU=
Subject key identifier: 49:C3:28:66:5B:57:0B:DE:DB:33:88:D5:AE:8F:49:3F:18:CD:5A:DB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1D7A3BA36E93402E880F9466E7528A768
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ScMoZltXC97bM4jVro9JPxjNWts.roa
Signing time: Sat 14 Nov 2026 01:19:53 +0000
ROA not before: Sat 14 Nov 2026 01:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 194.77.229.0/24 maxlen: 24
212.189.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d7:a3:ba:36:e9:34:02:e8:80:f9:46:6e:75:28:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Nov 14 01:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49c328665b570bdedb3388d5ae8f493f18cd5adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:50:31:c0:bb:a5:10:2a:dd:a0:05:17:3e:
65:be:96:a8:29:3a:6c:42:b2:dd:70:c9:cd:d3:69:
76:86:7c:50:7b:c7:03:eb:d1:ea:72:39:49:af:56:
3a:a5:37:b9:76:41:41:12:ab:b9:e4:e7:74:89:04:
d2:ea:6f:f3:44:88:12:30:8c:0f:44:67:1e:e8:42:
55:25:8a:21:b2:c0:fa:69:10:e5:66:7e:68:0f:cc:
5a:c4:16:7f:31:d0:79:21:97:bd:60:de:4e:6f:8f:
2a:0f:c2:47:a1:2d:04:33:fd:05:1d:a6:07:7a:d3:
b5:47:9f:a2:eb:38:b0:a8:b8:c7:6c:5a:6c:5f:84:
bf:0f:4d:70:2a:b7:72:19:b0:fa:13:a5:71:43:6c:
1a:66:6d:cf:35:dc:14:ef:07:f7:a7:00:3b:75:55:
a3:79:a4:a3:ab:f6:0f:df:e4:b8:14:ec:89:08:76:
0b:14:ea:ac:fe:21:a9:24:a6:95:ed:3e:f3:d0:03:
b6:98:ac:b7:88:3a:b1:a5:22:e2:78:9d:85:f7:7a:
a7:72:da:91:b1:52:8b:89:a6:0f:4e:14:33:90:bd:
d5:b2:98:2d:12:0b:48:f7:3f:05:dc:e3:8e:73:9c:
3c:4b:b9:9a:1d:ba:20:63:c5:19:c5:16:2e:ee:4f:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:28:66:5B:57:0B:DE:DB:33:88:D5:AE:8F:49:3F:18:CD:5A:DB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ScMoZltXC97bM4jVro9JPxjNWts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.229.0/24
212.189.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5b:36:e6:d0:b5:95:9b:74:c4:2a:cc:38:80:33:31:13:1c:
bf:ec:64:e0:eb:a9:ab:b3:af:5f:75:d4:fd:98:c5:b1:39:6c:
66:ea:1d:52:33:27:48:fd:9d:62:11:75:30:67:a8:b6:5b:9a:
fe:0a:12:7e:fa:af:00:66:01:e8:aa:5b:4a:52:83:8c:1e:49:
10:12:cf:b0:03:7c:1b:43:97:02:32:2b:be:f3:f9:ef:4c:87:
9c:78:c5:e3:29:e5:d7:8e:0d:2a:9b:8c:a2:86:cc:cc:f4:66:
65:e1:cc:9d:49:a8:94:ef:5e:18:4e:ce:a0:af:bc:f4:e0:00:
df:5e:b4:aa:83:2a:9a:56:95:5c:ed:53:6b:ac:55:89:74:3f:
88:07:cc:1e:17:ee:4a:1b:1a:1a:a3:06:3e:a8:5b:95:55:7c:
3f:48:05:6a:cb:9b:5a:b9:fd:a4:9b:c7:aa:d1:dc:e7:58:2e:
1e:11:c7:62:9a:fd:81:59:69:fc:58:e9:f3:71:5b:c7:f1:84:
35:e3:38:78:37:ce:01:1a:dd:f2:1c:10:16:3a:17:b0:c2:f6:
8d:a7:82:3c:99:1b:fa:fe:e1:6c:95:44:f9:d0:5b:21:2a:fb:
09:d5:94:88:02:b5:a8:2d:04:f6:1f:f7:5b:ec:26:8c:26:ca:
c3:46:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:55:44 2026 by rpki-client