Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/g7oKwPSVrg-TAbBDaEibfjAb1EY.roa
File: g7oKwPSVrg-TAbBDaEibfjAb1EY.roa (raw, json)
Hash identifier: NJW6Kujvn/SyQ9PEaBeymkTjARS1yhi9D2ldg1pAJts=
Subject key identifier: 83:BA:0A:C0:F4:95:AE:0F:93:01:B0:43:68:48:9B:7E:30:1B:D4:46
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F6E0D3489FAA4A18C2465140CDF69A555
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/g7oKwPSVrg-TAbBDaEibfjAb1EY.roa
Signing time: Fri 17 Jul 2026 03:09:46 +0000
ROA not before: Fri 17 Jul 2026 03:09:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 194.77.3.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:0d:34:89:fa:a4:a1:8c:24:65:14:0c:df:69:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 17 03:09:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ba0ac0f495ae0f9301b04368489b7e301bd446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:24:43:04:c1:fb:c7:58:36:c0:76:bd:64:
9b:66:f5:76:7c:93:f4:55:ba:ba:74:40:1a:6a:1d:
de:1f:cc:e2:02:b6:34:c2:99:8c:57:36:a7:0c:aa:
17:40:30:f8:a2:df:9b:af:76:a4:20:2e:1c:1c:94:
9f:e8:da:da:81:f1:e2:07:d9:4b:dc:bb:5d:72:88:
8b:ec:60:f3:a4:00:30:98:67:e1:45:28:90:9c:94:
a7:8a:c7:e6:b9:30:81:0a:d4:0d:25:09:7b:94:4b:
ea:a5:9d:41:42:de:01:25:27:3d:fa:15:ca:d7:40:
82:8c:99:7c:c6:ee:5a:31:8f:04:49:13:e3:ca:ac:
9e:05:99:48:46:dd:68:45:d6:92:54:1d:15:cb:eb:
20:8e:12:1d:3d:43:68:58:7a:ac:ae:a8:5a:15:78:
63:c6:a6:2b:62:63:50:e9:a0:f1:5f:52:e1:91:f9:
9a:d7:61:c5:dc:01:c4:a5:71:1e:43:4d:15:55:eb:
e4:af:8e:f1:ba:bc:ed:ec:c0:a3:07:35:4e:da:63:
4b:a3:f8:e4:5d:0f:d7:82:ff:f4:0e:1e:a4:9b:8d:
cb:bb:42:88:be:7e:98:b5:4f:5e:b5:d6:64:a8:01:
28:77:8b:ce:2b:3e:63:b5:0f:84:86:64:b5:06:7c:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:0A:C0:F4:95:AE:0F:93:01:B0:43:68:48:9B:7E:30:1B:D4:46
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/g7oKwPSVrg-TAbBDaEibfjAb1EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.3.0/24
194.77.228.0/24
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4a:d5:c9:6c:cf:4e:e0:f9:5b:a6:4b:66:fc:d0:5c:02:3e:
4a:a1:19:46:8a:cb:7f:0a:56:e7:70:58:5e:27:f0:aa:ae:b6:
3a:a8:23:26:13:ff:42:e5:e0:98:bb:f4:e8:cb:f8:90:d1:f8:
08:7b:30:11:38:e0:60:f0:25:8d:d8:c7:fe:f3:34:ca:24:88:
e4:88:9d:19:85:74:83:6a:56:e9:08:02:f9:4a:87:41:69:64:
e1:d9:0c:2c:28:6f:4f:73:e4:d4:3c:cd:c7:3e:9a:25:ce:e9:
7b:34:16:bc:6d:98:84:c3:b3:b8:ed:16:c5:1b:e5:84:10:a0:
25:96:4e:41:53:a7:38:b0:6f:0b:a2:ad:31:ea:ca:4f:e6:3b:
5f:d6:69:8e:57:16:a9:6c:c0:23:2e:29:4d:48:a0:34:1e:53:
c9:0f:f1:e0:21:c5:33:64:d2:28:8b:ad:29:cf:4b:12:b8:e0:
b0:74:2c:f6:28:87:00:f3:68:b0:e4:51:a6:95:d5:f5:fa:c0:
0d:56:71:50:ec:a2:e7:a4:4f:b7:06:ef:61:b8:86:ef:4b:86:
db:1a:ca:63:e2:03:cd:2a:6e:df:9f:74:79:a8:56:fe:69:8e:
ef:d4:d9:58:c3:eb:a6:9c:30:d6:a0:88:e2:2a:1a:ae:54:db:
6d:8d:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:33 2026 by rpki-client