Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/X2en-iRKkcGBYMbtzfLAORmg4bQ.roa
File: X2en-iRKkcGBYMbtzfLAORmg4bQ.roa (raw, json)
Hash identifier: uuZ5bGJZgJduH5i+hkXtPOiX/l+iTeqGTeylszBJFfw=
Subject key identifier: 5F:67:A7:FA:24:4A:91:C1:81:60:C6:ED:CD:F2:C0:39:19:A0:E1:B4
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10CA31455256EB97960460A8C37E6BBBE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/X2en-iRKkcGBYMbtzfLAORmg4bQ.roa
Signing time: Mon 05 Oct 2026 15:16:16 +0000
ROA not before: Mon 05 Oct 2026 15:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 194.122.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:a3:14:55:25:6e:b9:79:60:46:0a:8c:37:e6:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 15:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f67a7fa244a91c18160c6edcdf2c03919a0e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:fe:8f:66:25:23:7b:7b:93:7f:24:b3:24:
1d:dd:e0:9b:81:cb:d0:91:6b:54:a4:d3:54:64:44:
51:02:af:4e:a7:fb:1f:43:8e:6f:95:6b:79:dc:95:
f3:05:af:fc:4c:95:64:29:30:a2:bf:a2:d6:24:ca:
d2:8b:13:f0:68:fc:37:00:76:f0:a2:da:30:1a:59:
7b:35:7e:5d:b9:99:09:4c:e5:8d:b0:9f:c6:89:cf:
a6:69:58:78:1e:2f:81:39:35:9c:b4:3e:e9:2c:d9:
4d:91:87:b2:bc:d0:80:b4:fb:bc:8a:1f:c9:07:ad:
37:c7:78:2a:d6:ec:da:30:de:27:e4:1d:38:ee:a6:
15:27:d9:a9:1a:13:5f:56:83:00:b3:ec:5b:bc:fc:
fe:67:4e:6e:9c:74:22:8f:a5:6d:01:1a:5d:71:84:
75:43:c8:c8:e6:ce:42:f1:6a:35:9b:69:d3:34:75:
20:e0:52:9e:45:5e:5e:27:3c:51:27:cf:06:8b:80:
89:9b:21:27:d7:e1:ef:4d:a4:a1:c8:36:3b:0a:74:
51:5e:cd:4c:f3:e1:c5:a0:0a:f6:03:9c:6e:d4:c9:
ab:62:a3:47:15:f1:f6:53:f2:32:00:fd:81:b6:1e:
4e:83:83:c9:3e:86:ad:31:6c:7c:f8:7c:fe:74:61:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:67:A7:FA:24:4A:91:C1:81:60:C6:ED:CD:F2:C0:39:19:A0:E1:B4
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/X2en-iRKkcGBYMbtzfLAORmg4bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.122.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0f:93:a5:78:bb:d7:b5:95:79:7b:60:aa:18:ed:17:7d:d2:
84:62:8a:64:3f:b7:51:3f:e1:83:3b:6b:75:cf:0b:f4:be:a2:
d3:08:8c:97:49:41:a8:cb:83:90:84:f7:e9:52:01:b9:44:fc:
6d:ac:0c:8e:78:d8:1c:45:b0:39:4f:fb:21:04:7b:8b:df:f3:
07:49:81:a2:1a:90:29:bd:b5:bf:79:62:af:b5:8a:c5:59:5f:
88:88:70:45:4f:d8:6a:47:92:e6:95:c0:57:05:1c:50:af:1e:
d1:d8:c0:a3:e9:b7:cf:c3:9d:8e:f4:74:fa:39:2a:9f:f1:02:
44:97:61:60:09:01:a8:dc:49:bc:2d:a5:b1:e7:96:4b:c9:ca:
a0:92:95:4c:9c:00:2a:9e:db:de:9e:56:1e:0a:c3:13:3b:ec:
a4:d1:d7:2d:39:a8:25:6a:6b:0d:eb:07:a8:b4:69:db:b2:af:
f9:e6:b6:93:d4:b7:36:dc:e9:e1:0f:f3:2a:a7:b0:90:3c:0f:
a0:80:57:27:44:1f:c8:b6:84:c2:af:86:85:b9:ee:42:ae:6e:
37:0c:1d:5e:a8:2a:a9:c0:1f:f6:74:f1:7c:93:eb:42:2c:e9:
5d:2e:13:0f:b9:ec:84:8d:71:a7:6a:4a:43:40:3f:3f:a3:ce:
e8:1a:20:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEMoxRVJW65eWBGCow35ru+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDA1MTUxNjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjY3YTdmYTI0NGE5MWMxODE2MGM2ZWRjZGYyYzAzOTE5YTBlMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CL+j2YlI3t7k38ksyQd3eCbgcvQ
kWtUpNNUZERRAq9Op/sfQ45vlWt53JXzBa/8TJVkKTCiv6LWJMrSixPwaPw3AHbw
otowGll7NX5duZkJTOWNsJ/Gic+maVh4Hi+BOTWctD7pLNlNkYeyvNCAtPu8ih/J
B603x3gq1uzaMN4n5B047qYVJ9mpGhNfVoMAs+xbvPz+Z05unHQij6VtARpdcYR1
Q8jI5s5C8Wo1m2nTNHUg4FKeRV5eJzxRJ88Gi4CJmyEn1+HvTaShyDY7CnRRXs1M
8+HFoAr2A5xu1MmrYqNHFfH2U/IyAP2Bth5Og4PJPoatMWx8+Hz+dGGhFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9np/okSpHBgWDG7c3ywDkZoOG0MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvWDJlbi1pUktrY0dCWU1idHpmTEFPUm1nNGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnpUMA0G
CSqGSIb3DQEBCwUAA4IBAQCMD5OleLvXtZV5e2CqGO0XfdKEYopkP7dRP+GDO2t1
zwv0vqLTCIyXSUGoy4OQhPfpUgG5RPxtrAyOeNgcRbA5T/shBHuL3/MHSYGiGpAp
vbW/eWKvtYrFWV+IiHBFT9hqR5LmlcBXBRxQrx7R2MCj6bfPw52O9HT6OSqf8QJE
l2FgCQGo3Em8LaWx55ZLycqgkpVMnAAqntvenlYeCsMTO+yk0dctOaglamsN6weo
tGnbsq/55raT1Lc23OnhD/Mqp7CQPA+ggFcnRB/ItoTCr4aFue5Crm43DB1eqCqp
wB/2dPF8k+tCLOldLhMPueyEjXGnakpDQD8/o87oGiBn
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:28 2026 by rpki-client