Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kYIKuEqa_52mYgyXr7cvQQcsUss.roa
File: kYIKuEqa_52mYgyXr7cvQQcsUss.roa (raw, json)
Hash identifier: jGsp+ZiG1yvBUAWWCBkf+2hRPUWd20WobrXl+jzXoJ0=
Subject key identifier: 91:82:0A:B8:4A:9A:FF:9D:A6:62:0C:97:AF:B7:2F:41:07:2C:52:CB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F6E0D3513D62818A7DBEF77FB0999F9E9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kYIKuEqa_52mYgyXr7cvQQcsUss.roa
Signing time: Fri 17 Jul 2026 03:09:47 +0000
ROA not before: Fri 17 Jul 2026 03:09:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 194.77.3.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:0d:35:13:d6:28:18:a7:db:ef:77:fb:09:99:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 17 03:09:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91820ab84a9aff9da6620c97afb72f41072c52cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:70:c6:ab:24:1f:94:a9:a2:fd:ff:fa:38:
c1:81:57:1a:1e:17:b2:83:1d:b2:31:1f:f6:38:c6:
23:e2:87:1e:15:0b:6c:3a:f3:03:63:45:4c:7b:06:
c2:e5:85:30:42:d7:be:06:2e:99:7b:f5:d1:2e:37:
b0:ee:47:1b:34:f9:21:11:b5:36:84:ac:7b:b0:00:
37:46:8a:e5:3f:32:11:9f:a4:d0:2d:23:4e:fe:ed:
f7:00:05:65:71:de:ae:ae:a9:16:78:72:2a:eb:12:
27:24:1d:eb:db:e7:0d:f2:ce:1d:98:76:dc:33:6e:
4a:e7:5d:48:27:17:60:02:64:f2:94:a4:ed:7b:b2:
c5:ff:b3:9b:8d:7b:f0:61:2e:3e:e7:66:4d:6a:e5:
da:e0:07:27:91:48:65:c5:5e:e5:ca:7b:60:c0:a2:
52:79:a7:05:72:32:95:49:13:c4:bf:2f:f4:13:44:
31:90:44:2e:e7:d6:96:90:c0:73:31:c1:bd:7b:87:
5c:5a:4a:5c:9c:01:4f:46:81:83:68:1c:83:6f:4e:
a5:a9:18:b4:cf:af:bf:1f:c0:c8:e5:a8:49:a8:91:
05:46:d2:48:f2:da:4c:9e:ee:a3:4e:3e:6a:15:a7:
53:19:43:8b:dc:62:8f:7f:14:7c:93:6e:de:ba:58:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:0A:B8:4A:9A:FF:9D:A6:62:0C:97:AF:B7:2F:41:07:2C:52:CB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/kYIKuEqa_52mYgyXr7cvQQcsUss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.3.0/24
194.77.228.0/24
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4b:51:be:b4:d0:76:64:da:2e:e7:db:02:9a:85:bd:e4:06:
2e:41:5d:f5:de:1f:d9:43:2d:83:f5:d1:a5:a4:63:7f:0d:fa:
d8:96:16:55:61:6d:c2:6d:89:7c:50:c0:db:c8:9b:bb:5c:97:
6d:38:27:df:0f:08:a4:65:e8:73:9f:0f:e5:db:f4:c9:0c:4d:
43:22:d3:fc:43:d2:bd:31:d4:cb:30:6f:7c:1b:82:0e:2a:c6:
3e:0e:07:55:bf:be:a3:a6:bd:54:0a:7a:7f:79:bf:f8:e6:ad:
0e:30:4b:cb:b7:8b:d6:5e:f5:89:f4:78:cc:f9:99:82:de:69:
c4:3f:ee:e8:54:4f:c1:29:25:1f:45:0f:aa:77:ad:dc:68:e0:
fb:f7:2b:d8:cf:88:5d:57:0b:cd:84:aa:fd:9c:51:ef:3c:a9:
57:04:52:5f:6d:f8:c6:b1:38:56:5c:c5:58:12:61:84:1b:9f:
d2:35:38:be:bd:d8:e0:28:3d:f6:9b:1c:d1:07:d4:13:08:67:
d4:fb:90:64:89:5b:de:4a:df:70:82:6c:83:49:72:09:8c:87:
88:c7:de:e3:db:37:a7:5b:a1:45:e0:b4:35:6b:ca:7c:f6:1e:
f1:60:c2:b2:73:24:ca:a3:5c:a0:bb:03:c7:50:db:45:f5:b6:
56:42:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:06 2026 by rpki-client