Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/W_YFBvD9mOZJqNv9fM0Y_ip5lcc.roa
File: W_YFBvD9mOZJqNv9fM0Y_ip5lcc.roa (raw, json)
Hash identifier: hL35AFcUUQOnR0vR5dX+WZUt+I/+1jJFNOHHK8uxKw4=
Subject key identifier: 5B:F6:05:06:F0:FD:98:E6:49:A8:DB:FD:7C:CD:18:FE:2A:79:95:C7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F5FFF24D6FEA7739C8ED5581EACC34D9D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/W_YFBvD9mOZJqNv9fM0Y_ip5lcc.roa
Signing time: Tue 14 Jul 2026 09:39:44 +0000
ROA not before: Tue 14 Jul 2026 09:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 194.77.200.0/24 maxlen: 24
212.189.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:ff:24:d6:fe:a7:73:9c:8e:d5:58:1e:ac:c3:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 09:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bf60506f0fd98e649a8dbfd7ccd18fe2a7995c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:93:c0:7e:3c:e6:6b:98:e9:42:be:86:5a:
a6:8f:fc:10:e4:cd:1c:41:62:43:99:c2:8a:65:e7:
b7:94:74:76:96:fe:3a:4f:65:93:c1:7d:81:4d:13:
bf:42:66:e6:ad:6d:03:28:0d:a6:14:e5:41:87:1a:
1b:68:11:f8:d9:83:eb:bd:8b:fa:be:99:2a:49:9b:
88:df:9f:1b:6b:73:d1:60:6a:86:66:bc:1b:c9:70:
13:f7:30:9f:79:da:3d:03:3c:9c:7b:91:9e:13:da:
f3:76:dd:81:b7:04:20:9a:89:7a:52:78:39:d1:63:
2e:c9:cb:c2:9f:34:f9:fb:98:b7:85:27:74:8f:88:
f3:fc:03:2b:d5:56:09:2d:49:f7:17:0c:80:30:0b:
60:0c:3d:e0:36:46:7b:e1:1f:1c:b5:c6:e0:ed:59:
23:a7:1c:67:49:67:c7:64:a1:4b:b8:e3:85:a9:d8:
f1:f4:53:66:73:1f:37:50:a7:a2:d0:db:cc:ff:36:
cb:a1:cd:14:3a:c8:10:90:ab:81:73:9f:46:de:94:
e0:11:36:45:8a:39:57:c8:fe:a2:4f:f9:60:5c:50:
b4:a5:86:ed:99:93:da:b4:e3:54:59:61:87:e1:23:
6f:96:9a:8c:71:aa:4b:43:f5:d6:20:8f:9f:83:9b:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:05:06:F0:FD:98:E6:49:A8:DB:FD:7C:CD:18:FE:2A:79:95:C7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/W_YFBvD9mOZJqNv9fM0Y_ip5lcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.200.0/24
212.189.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f8:29:80:b5:fd:a7:06:bc:f4:69:98:b6:85:fa:01:88:62:
88:c6:09:51:3b:c5:b3:f9:b8:29:dc:bb:dc:29:57:7e:de:99:
08:48:8c:3f:2b:59:2b:e8:7b:93:1d:96:a3:b3:c5:5a:21:d0:
9c:64:da:3c:c9:d3:78:0b:66:cc:af:66:0e:b3:7a:0d:bb:d3:
17:f1:08:3b:6c:40:e1:43:d2:de:3a:7f:1c:6e:84:4c:7e:87:
a4:6a:a0:a0:02:35:3a:09:5a:2c:56:51:13:25:b8:49:0e:d2:
21:c1:bd:25:15:22:01:7b:64:d3:7f:cf:41:2a:30:a9:25:70:
8a:38:88:56:d5:93:c2:34:71:1a:17:57:c5:af:29:b7:49:fe:
e7:03:58:ea:1d:7c:dc:d4:61:3f:ab:8c:f6:b4:3f:16:5f:ce:
ff:9a:97:ab:f0:b6:8f:91:5e:1a:c7:a2:b7:b9:24:fb:51:52:
40:11:67:19:69:4c:21:ea:7c:bc:a2:ce:0a:9c:01:a4:4c:1c:
4f:ca:ff:87:bb:a1:01:64:f2:b8:78:da:88:44:9f:89:12:e3:
96:3a:6e:5b:df:e1:cb:83:f4:d8:35:a5:c7:21:52:02:7d:83:
9a:51:90:d2:60:c7:84:99:bc:66:e5:e4:fe:0a:f6:e7:2d:62:
6b:fa:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:59 2026 by rpki-client