Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/b5xvoLjygfxqEMHLTpt-iVR7FC8.roa
File: b5xvoLjygfxqEMHLTpt-iVR7FC8.roa (raw, json)
Hash identifier: SDY60SfVExw9CRSYNxyL0ML415rp2ITP0aGk1fQEuhc=
Subject key identifier: 6F:9C:6F:A0:B8:F2:81:FC:6A:10:C1:CB:4E:9B:7E:89:54:7B:14:2F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0CB90AFB4F397378A72DC5C0AC7B205B9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/b5xvoLjygfxqEMHLTpt-iVR7FC8.roa
Signing time: Wed 23 Sep 2026 00:00:51 +0000
ROA not before: Wed 23 Sep 2026 00:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 194.77.60.0/23 maxlen: 24
195.21.147.0/24 maxlen: 24
212.168.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:af:b4:f3:97:37:8a:72:dc:5c:0a:c7:b2:05:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 23 00:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f9c6fa0b8f281fc6a10c1cb4e9b7e89547b142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:4f:db:4e:53:26:ee:4f:20:bb:7c:f3:bf:
22:37:75:d6:e1:f9:05:37:bd:11:b4:08:28:b6:a0:
be:b6:92:e0:4e:95:fe:be:69:6f:36:4b:87:68:1c:
fe:7b:22:b8:15:ef:3b:44:21:5c:6d:38:a6:b2:e5:
44:b6:31:67:f5:26:3f:a7:be:55:ad:2c:57:80:81:
af:c6:c0:0a:f0:3a:df:ee:6e:c4:34:cd:be:c5:3f:
ec:90:6d:70:a5:98:b3:ae:79:f9:b4:d2:28:5c:8b:
b5:d6:52:fd:8b:55:b1:3d:c0:0b:b0:37:44:f1:b5:
28:2c:d8:fa:02:25:41:7b:9a:8e:cb:ce:4e:a2:9a:
86:0d:ee:f6:ab:96:f3:f5:44:d8:b7:f4:2f:32:46:
2d:23:c2:d2:76:65:70:ba:b4:9a:cc:e9:14:e6:09:
ff:c6:90:ef:6b:d9:5b:89:96:59:72:26:83:58:97:
fb:a3:18:2a:b2:32:22:fa:00:db:3c:43:13:19:93:
cd:50:9b:72:a5:79:93:66:f5:52:b4:50:1f:26:6f:
cc:c5:34:96:c1:f2:90:e2:a5:2a:c3:73:2a:8a:0f:
24:42:7c:38:ad:30:6a:39:f5:fd:4c:81:ae:af:79:
ea:75:a8:5d:41:00:46:f1:52:ac:21:f8:73:a4:21:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:6F:A0:B8:F2:81:FC:6A:10:C1:CB:4E:9B:7E:89:54:7B:14:2F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/b5xvoLjygfxqEMHLTpt-iVR7FC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.60.0/23
195.21.147.0/24
212.168.200.0/21
Signature Algorithm: sha256WithRSAEncryption
26:c1:bb:b2:a6:db:60:a2:9f:03:16:8a:b8:85:c8:51:05:ef:
09:fd:d4:91:66:c7:70:3a:9e:dd:a0:31:0d:02:8e:e8:7f:4e:
d6:53:fd:f5:ca:7b:9c:13:be:7b:e4:2a:12:09:c7:13:54:e8:
a1:ce:22:d3:fe:74:13:20:f0:7b:9f:c4:a7:68:b9:54:4d:a9:
42:08:70:2c:31:7a:db:95:9d:0a:b5:12:1d:8e:3b:ff:e6:b2:
29:32:f6:76:75:9d:b1:e1:2e:9d:60:94:9a:6c:61:aa:d7:ce:
d5:b2:7f:c4:b1:65:6c:28:58:1b:da:55:82:3f:d0:e5:b8:d5:
0d:31:4c:0f:fa:57:18:6f:34:8c:ae:d5:c0:ab:39:3f:f9:0b:
70:37:48:f7:a3:63:41:6f:1e:a4:f5:e5:9d:bf:13:b3:57:5a:
98:19:49:85:9d:a4:1c:4a:f5:4d:f8:cb:55:3e:4c:f0:6a:05:
fa:74:5b:46:ba:a1:4a:d2:3e:bc:6b:6c:80:d6:5c:16:4f:88:
c5:12:a0:ae:69:6b:c3:7e:75:b4:5f:56:8e:41:0b:62:51:18:
91:24:e5:6f:33:3f:09:77:db:1c:d0:e6:48:41:0f:71:68:b3:
7f:18:20:b7:6e:d2:0c:cb:8c:b1:22:97:44:d9:d6:53:b2:90:
60:e1:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:47:34 2026 by rpki-client