Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/U9Et2zxUUSspiz8hoCr41Y8wrHk.roa
File: U9Et2zxUUSspiz8hoCr41Y8wrHk.roa (raw, json)
Hash identifier: iNlRnAQo8qIna0VONsUYneeoxGril2vGa5TOxTg2Pjs=
Subject key identifier: 53:D1:2D:DB:3C:54:51:2B:29:8B:3F:21:A0:2A:F8:D5:8F:30:AC:79
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D24CB08F9E56CBA6EA0431DEAC495FA87
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/U9Et2zxUUSspiz8hoCr41Y8wrHk.roa
Signing time: Wed 25 Mar 2026 11:39:39 +0000
ROA not before: Wed 25 Mar 2026 11:39:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:cb:08:f9:e5:6c:ba:6e:a0:43:1d:ea:c4:95:fa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 25 11:39:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53d12ddb3c54512b298b3f21a02af8d58f30ac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:91:f3:22:d3:83:1f:6e:3b:19:64:f2:09:
07:ed:af:3f:75:d4:13:31:a9:17:d0:ad:25:56:99:
93:d4:28:11:c1:e4:13:87:db:2b:56:9c:f5:ef:1c:
ac:f1:69:fd:94:3d:42:82:12:df:3c:4a:ed:92:fa:
b2:2e:6f:fb:6e:84:2a:cd:c5:fc:75:87:04:b4:f2:
a5:ae:3e:0c:cf:fd:69:b7:49:ba:57:b8:5d:6f:64:
55:00:f2:a0:9f:7a:64:ff:b8:d1:c9:30:28:ec:a8:
32:a9:af:9a:fd:ee:e3:fc:a9:5c:d1:73:e3:9c:3b:
e7:23:a2:23:8c:48:d0:ea:00:48:08:d0:21:0b:f0:
ba:b9:3d:72:b9:22:1c:15:5e:ea:a2:d3:3f:21:fc:
bf:f0:a7:63:e5:0a:22:1f:7c:2d:9f:c4:6c:9e:8b:
83:84:9c:1d:7d:cb:d6:4a:db:6a:32:6c:aa:be:83:
1e:42:d6:74:78:a5:5d:f2:cc:81:b5:b0:dc:10:9b:
74:6e:fd:29:a4:d3:6c:7a:e5:5a:16:8c:f3:eb:e0:
00:e1:e9:74:71:4e:14:7f:82:d1:d5:12:e6:d3:e6:
68:bc:b6:72:7d:f4:4b:52:b3:68:f8:fc:97:25:53:
d9:01:ac:74:2f:53:d4:8a:d2:17:09:c3:76:58:49:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D1:2D:DB:3C:54:51:2B:29:8B:3F:21:A0:2A:F8:D5:8F:30:AC:79
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/U9Et2zxUUSspiz8hoCr41Y8wrHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.132.0-194.231.139.255
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:35:92:a5:58:9c:fd:e7:aa:1e:ac:1e:64:13:c9:d7:88:00:
4f:65:26:50:1f:6f:05:6a:13:ed:6d:09:c6:00:b7:a3:85:91:
a3:7c:03:35:5b:a0:9c:fb:a3:b0:1a:5f:52:aa:f3:11:b7:84:
0f:df:12:da:c8:07:1f:32:ea:19:13:36:80:b8:23:91:ea:61:
01:5c:75:b2:2f:4d:61:7a:80:3a:1d:db:ce:b3:2c:5f:e3:e7:
a8:e8:21:00:21:e0:03:14:ef:ce:3a:2d:a0:84:92:7d:58:ba:
c8:a1:1c:96:c3:aa:61:5c:82:35:fa:e9:1f:80:3b:e0:57:96:
7a:04:63:a1:a8:10:31:b3:d2:0a:7b:db:1d:82:7b:f6:18:e6:
42:3b:73:d2:49:97:3a:05:3a:da:51:55:5f:0f:96:a2:e6:96:
52:89:3f:fb:72:7b:49:cb:c5:b6:c0:39:f5:db:18:86:67:aa:
13:3a:91:76:ef:79:4d:a8:dd:0e:f7:3a:ca:3c:1d:6f:ef:ab:
73:23:3b:8b:50:fc:20:fc:e1:0c:66:94:4d:59:d9:e5:fd:52:
eb:b6:ea:3e:f5:89:f8:86:23:c0:d7:6b:10:c5:0f:c1:2d:f7:
ac:16:45:65:19:b5:76:ad:45:65:5f:0e:40:49:d0:88:5f:7f:
11:42:cd:48
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ0kywj55Wy6bqBDHerElfqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwMzI1MTEzOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2QxMmRkYjNjNTQ1MTJiMjk4YjNmMjFhMDJhZjhkNThmMzBhYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMmR8yLTgx9uOxlk8gkH7a8/ddQT
MakX0K0lVpmT1CgRweQTh9srVpz17xys8Wn9lD1CghLfPErtkvqyLm/7boQqzcX8
dYcEtPKlrj4Mz/1pt0m6V7hdb2RVAPKgn3pk/7jRyTAo7Kgyqa+a/e7j/Klc0XPj
nDvnI6IjjEjQ6gBICNAhC/C6uT1yuSIcFV7qotM/Ify/8Kdj5QoiH3wtn8RsnouD
hJwdfcvWSttqMmyqvoMeQtZ0eKVd8syBtbDcEJt0bv0ppNNseuVaFozz6+AA4el0
cU4Uf4LR1RLm0+ZovLZyffRLUrNo+PyXJVPZAax0L1PUitIXCcN2WEma1wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFFPRLds8VFErKYs/IaAq+NWPMKx5MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVTlFdDJ6eFVVU3NwaXo4aG9DcjQxWTh3ckhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBALC54QD
BALC54gwDAMEAcLnlgMEAsLnmDAMAwQAwuedAwQAwueeMAwDBADC58MDBAPC59AD
BALC59wwDQYJKoZIhvcNAQELBQADggEBAIw1kqVYnP3nqh6sHmQTydeIAE9lJlAf
bwVqE+1tCcYAt6OFkaN8AzVboJz7o7AaX1Kq8xG3hA/fEtrIBx8y6hkTNoC4I5Hq
YQFcdbIvTWF6gDod286zLF/j56joIQAh4AMU7846LaCEkn1YusihHJbDqmFcgjX6
6R+AO+BXlnoEY6GoEDGz0gp72x2Ce/YY5kI7c9JJlzoFOtpRVV8PlqLmllKJP/ty
e0nLxbbAOfXbGIZnqhM6kXbveU2o3Q73Oso8HW/vq3MjO4tQ/CD84QxmlE1Z2eX9
Uuu26j71ifiGI8DXaxDFD8Et96wWRWUZtXatRWVfDkBJ0IhffxFCzUg=
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:22:06 2026 by rpki-client