Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TxLsTxl2ys1lvB9pB6iB_80ptM8.roa
File: TxLsTxl2ys1lvB9pB6iB_80ptM8.roa (raw, json)
Hash identifier: QlWmsWkUnmAQlIFvc5La92pL0N1wZPgLmRb2zrjyzpo=
Subject key identifier: 4F:12:EC:4F:19:76:CA:CD:65:BC:1F:69:07:A8:81:FF:CD:29:B4:CF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EEB7B6A4A5A58090610A9FC86CF179BC1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TxLsTxl2ys1lvB9pB6iB_80ptM8.roa
Signing time: Sun 21 Jun 2026 18:39:54 +0000
ROA not before: Sun 21 Jun 2026 18:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 194.77.197.0/24 maxlen: 24
194.77.222.0/24 maxlen: 24
194.122.82.0/24 maxlen: 24
212.222.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:7b:6a:4a:5a:58:09:06:10:a9:fc:86:cf:17:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 21 18:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f12ec4f1976cacd65bc1f6907a881ffcd29b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:b7:75:33:88:ca:15:1a:2a:e3:6a:ca:00:
b5:65:11:f2:e5:d2:4c:7e:84:ce:9d:a4:4b:c7:90:
91:93:60:97:9e:54:0c:6d:00:7e:e1:aa:76:3c:99:
79:a2:cf:d0:96:1d:0d:c4:f4:7e:18:77:20:52:c0:
38:47:47:20:a4:23:ea:18:28:19:11:5a:e6:71:46:
ec:f1:50:78:43:38:fc:a2:9a:39:51:cf:ea:09:b9:
2b:ed:32:c0:61:b9:05:58:ba:cd:99:cd:ce:fa:f2:
e7:45:32:4e:f7:2b:b9:86:a4:ec:90:01:eb:57:07:
7d:f1:3a:61:6d:b6:86:6e:b3:07:33:d5:b1:eb:6c:
54:d0:3a:2f:b0:9f:3d:1a:08:47:cd:a9:b6:da:03:
f7:aa:a8:7b:30:6d:87:5c:23:6b:71:22:86:4b:18:
27:63:db:14:7b:cb:0a:65:cf:48:54:c5:18:40:28:
9f:d0:18:a5:92:a5:a5:c1:b3:40:4c:d4:71:ff:be:
a9:52:93:1c:e2:1e:2c:de:b2:ae:37:d7:36:16:77:
68:66:be:c8:ac:e6:4e:05:b0:14:61:1a:e4:e6:49:
9b:d6:ef:ae:00:db:1e:d0:6b:78:77:50:7b:e4:78:
75:bd:40:6e:c2:bb:38:7b:32:8c:70:aa:09:02:c7:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:EC:4F:19:76:CA:CD:65:BC:1F:69:07:A8:81:FF:CD:29:B4:CF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TxLsTxl2ys1lvB9pB6iB_80ptM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.197.0/24
194.77.222.0/24
194.122.82.0/24
212.222.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8f:80:bf:d9:89:70:fd:98:ce:45:34:81:6a:4c:00:3d:33:
1d:5a:24:de:53:62:da:d5:e3:71:17:fd:80:65:ce:84:1a:dc:
f5:b3:f1:7b:44:a8:29:4a:c0:b6:63:e5:92:0f:1b:b0:c5:90:
70:a5:0e:58:6f:c8:40:c7:22:3a:67:08:18:7f:31:50:30:d6:
24:94:02:94:c8:df:cc:e6:09:c7:63:ee:c0:73:98:06:cb:5c:
c8:04:f1:13:68:53:90:6b:e5:a0:c4:df:dd:05:de:91:d4:f9:
1c:51:31:f5:3f:70:ad:ea:34:8f:92:32:1d:9b:cf:aa:31:46:
3e:4b:f4:7e:1d:ff:53:1c:e7:a7:e5:7b:40:8f:ae:0d:6b:10:
b8:c3:da:3b:29:1e:b1:c4:50:10:82:26:03:9e:c1:f4:27:84:
2e:05:2b:10:33:43:4e:99:57:08:6c:87:88:ee:c4:2f:68:3b:
1a:f3:d6:9d:bd:cd:56:11:38:68:e2:cd:87:99:89:b9:29:2d:
25:c1:7a:7e:ca:28:d1:a4:cd:94:89:d0:bc:1d:6b:f6:f4:80:
a8:fb:74:4a:53:1c:88:c1:ba:ec:31:d5:9d:50:7c:ce:0d:78:
d2:48:1c:ba:64:e9:38:cd:ac:15:f9:5d:fb:7b:c5:4e:90:29:
49:f4:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:17 2026 by rpki-client