Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_LP7sYiDVEdY3qtGaNPeUNTQtAY.roa
File: _LP7sYiDVEdY3qtGaNPeUNTQtAY.roa (raw, json)
Hash identifier: Jivy4wWSOU3q9FfIu7EQen6A4bXPvUjxyZFhAPXmMkg=
Subject key identifier: FC:B3:FB:B1:88:83:54:47:58:DE:AB:46:68:D3:DE:50:D4:D0:B4:06
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E0B3B3EAF8156C5478CEB34EB519E1635
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_LP7sYiDVEdY3qtGaNPeUNTQtAY.roa
Signing time: Sat 09 May 2026 05:34:52 +0000
ROA not before: Sat 09 May 2026 05:34:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 194.231.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0b:3b:3e:af:81:56:c5:47:8c:eb:34:eb:51:9e:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 9 05:34:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcb3fbb18883544758deab4668d3de50d4d0b406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:49:0a:57:71:0b:f5:39:9e:4f:3a:f0:0d:
62:d4:aa:77:17:00:a3:76:d8:33:4e:b8:f6:6d:d8:
b8:7a:e8:e9:40:b1:bb:83:bf:22:03:37:a8:be:66:
ac:ae:3c:be:d9:c3:48:c3:52:c1:ad:c6:36:03:d8:
fa:25:e7:2c:81:fe:ca:44:de:bb:5b:7c:7a:6f:f8:
1a:fb:75:bb:c5:60:31:88:4a:76:be:93:94:9d:70:
3a:da:50:60:3f:f1:28:73:89:57:4a:4f:85:6b:a8:
e9:f6:2f:7e:60:8c:22:a8:9e:42:88:9e:65:18:c0:
89:b9:f5:ae:0a:39:d5:62:9a:80:f5:9c:73:57:5b:
6c:db:cd:0d:0f:38:e3:b0:f3:95:e8:bf:65:4b:b9:
4f:3d:14:4f:c7:e2:33:21:e3:7e:c5:5a:f7:08:21:
0f:a2:76:8e:cd:5d:9a:38:74:62:a0:a0:64:aa:cd:
53:a4:c1:79:87:47:2f:b9:56:a1:5c:dd:1e:3e:67:
0a:54:f6:9c:ca:a2:69:9c:20:9f:74:84:8e:99:09:
87:08:7c:69:7c:b0:ab:e4:aa:b5:f0:4e:9b:b2:58:
ee:b5:23:73:92:92:f1:42:35:b8:3e:c6:ba:1f:11:
24:05:e6:be:00:be:ba:22:bd:98:42:82:d3:8a:e8:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:FB:B1:88:83:54:47:58:DE:AB:46:68:D3:DE:50:D4:D0:B4:06
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_LP7sYiDVEdY3qtGaNPeUNTQtAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c2:7f:90:cc:b3:30:fa:64:9f:a3:87:f1:03:22:5f:65:95:
1c:63:85:b9:d7:72:67:e5:82:e7:ef:b1:f5:9f:51:af:e7:a6:
0f:d9:96:74:a0:83:9f:39:ca:af:5a:c2:01:27:3d:2d:b8:55:
46:a9:6a:51:0d:32:b3:6c:9a:f3:6b:9b:44:6d:19:8c:01:98:
f4:14:58:3f:c4:a4:65:a5:e7:0a:48:10:f8:cd:31:fd:42:9d:
6e:6b:08:92:52:29:78:94:e1:5b:44:85:ce:6a:71:40:69:5f:
89:35:eb:1f:d3:85:23:7a:67:c9:12:90:90:00:fd:26:ca:d4:
c0:76:67:fb:f0:75:02:01:57:44:8d:bc:a3:24:78:6b:68:d7:
58:52:fc:30:92:24:10:a7:b4:eb:5b:97:73:14:d6:87:16:0c:
65:a3:9c:95:89:9f:39:54:91:fd:53:e8:dc:b5:ae:cc:64:ef:
97:b7:fb:4e:14:43:be:55:d8:cc:63:67:aa:84:c3:d5:1d:c9:
40:4c:7e:d0:19:7f:20:62:30:a2:19:dc:a5:cf:a9:7c:7f:02:
26:c0:7c:7a:bf:fb:f2:c3:8b:26:ed:e3:fd:1a:56:da:b9:e0:
0b:b3:f4:1a:0a:af:ae:02:5d:29:45:41:3b:5c:65:56:55:df:
6e:a1:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:56 2026 by rpki-client