Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XNKLz3vM4ua3mNyZqzxlTy0Y3Ys.roa
File: XNKLz3vM4ua3mNyZqzxlTy0Y3Ys.roa (raw, json)
Hash identifier: GGjzz5zAxBeZ7ci1oQucBxOW1iUBmKfcsqYzifFzmR4=
Subject key identifier: 5C:D2:8B:CF:7B:CC:E2:E6:B7:98:DC:99:AB:3C:65:4F:2D:18:DD:8B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A091619A1B2193F1754BBB8C75DBBBF160
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XNKLz3vM4ua3mNyZqzxlTy0Y3Ys.roa
Signing time: Fri 11 Sep 2026 16:51:27 +0000
ROA not before: Fri 11 Sep 2026 16:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 194.77.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:61:9a:1b:21:93:f1:75:4b:bb:8c:75:db:bb:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 16:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cd28bcf7bcce2e6b798dc99ab3c654f2d18dd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:76:41:00:5e:30:80:35:2b:ff:e4:a9:e2:
96:e2:1b:d6:b2:b4:f5:44:df:38:96:bb:9b:20:b5:
3f:ec:0d:ff:8a:22:37:cc:37:70:0d:68:21:ff:c0:
ff:eb:54:bb:6b:f1:71:90:ce:2b:64:f3:c7:f3:12:
07:57:8f:1f:09:a4:f4:19:e4:70:7b:f0:1e:46:9b:
77:1d:17:16:0a:22:1a:09:fb:bd:77:8f:8c:49:8b:
af:9e:09:4d:b6:c4:fd:ac:9f:1a:5a:af:51:2f:4a:
e1:9c:0f:5b:2c:de:26:bd:0a:2e:06:f8:3f:ba:df:
95:cd:57:47:82:8a:58:0e:49:eb:d7:c3:1e:37:69:
83:57:90:ae:05:16:08:90:eb:17:ef:45:70:4e:9d:
3a:01:4e:7e:c4:3b:bf:76:92:d6:cf:6b:bf:ce:c7:
66:92:a6:3e:e4:ef:9e:65:b4:9f:d2:0c:e8:84:55:
6a:58:bb:db:08:24:82:1f:a6:02:d6:f4:3b:3d:14:
e8:6a:b7:91:e5:dd:a9:1c:83:b4:de:8c:f0:bb:54:
09:29:88:0e:04:b7:31:cb:4d:06:97:96:99:f3:50:
58:25:c8:6c:03:33:eb:e7:25:ed:c4:2d:cc:67:95:
a9:34:70:9f:9e:90:e9:43:43:ee:ab:22:12:7a:f2:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:8B:CF:7B:CC:E2:E6:B7:98:DC:99:AB:3C:65:4F:2D:18:DD:8B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/XNKLz3vM4ua3mNyZqzxlTy0Y3Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.76.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:b2:fe:8f:31:51:db:c7:c0:41:ee:42:ed:dc:a6:de:e2:d9:
dc:44:45:af:20:34:6f:8a:60:1f:0c:99:05:ea:fa:22:0a:4d:
c3:dd:88:96:62:43:18:6c:77:9f:de:68:54:9e:cf:e5:26:fb:
eb:30:75:11:6c:63:ed:26:bd:b8:af:1b:96:8f:fa:08:cb:90:
20:3f:74:68:70:09:cb:96:2d:53:5d:5d:21:c6:74:09:71:28:
2f:49:bc:24:4c:32:f1:a1:54:66:2f:0b:73:8f:85:bf:32:fd:
ce:10:c3:3d:86:ba:49:94:de:56:55:50:09:d9:63:cf:95:13:
0c:8e:82:49:1d:fe:ae:ac:a7:26:14:34:2f:82:67:78:bc:b1:
07:b9:3c:e1:a7:ba:a9:04:6f:39:1c:00:01:4b:04:d3:a8:f3:
7d:62:69:92:2e:81:6c:d0:a6:f6:ac:03:9b:68:1a:82:60:b9:
8b:ba:fc:f0:ef:95:76:a9:09:f8:86:82:b9:36:03:61:ce:0e:
17:ee:d0:0b:70:bf:00:15:3e:05:07:df:cd:72:25:cd:f1:83:
81:ef:41:af:09:23:f9:6d:0f:97:05:2a:1a:d2:a9:21:f0:9d:
40:c4:27:dd:bb:c2:99:a2:4c:e9:5a:16:7a:a0:50:c1:a7:14:
db:d4:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:01:43 2026 by rpki-client