Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lDHKVym47FfUlp4AUZlBgj9IpqA.roa
File: lDHKVym47FfUlp4AUZlBgj9IpqA.roa (raw, json)
Hash identifier: SLupbqG98gk7d5P+FM9bVKFLZ6Gua0WRsr8TOeRQl44=
Subject key identifier: 94:31:CA:57:29:B8:EC:57:D4:96:9E:00:51:99:41:82:3F:48:A6:A0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0B42265D8B6013AD77703E2980134553E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lDHKVym47FfUlp4AUZlBgj9IpqA.roa
Signing time: Fri 18 Sep 2026 10:49:08 +0000
ROA not before: Fri 18 Sep 2026 10:49:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211138
IP address blocks: 77.67.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:22:65:d8:b6:01:3a:d7:77:03:e2:98:01:34:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 18 10:49:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9431ca5729b8ec57d4969e00519941823f48a6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:e6:7b:d3:bf:01:f1:3b:6a:bf:b2:05:e5:
49:1c:1c:62:c1:ba:bf:0b:2f:70:d9:73:6a:9e:4a:
a7:68:bf:37:6d:ba:b6:97:40:42:89:52:55:9d:59:
3a:48:35:ad:e2:f6:17:44:1e:e5:5d:e4:7e:54:2b:
f2:bc:29:d2:1c:3b:f4:e2:8c:d2:c5:3a:2e:d4:31:
31:13:a0:c0:73:cd:09:44:df:0e:48:16:83:01:27:
de:ff:b4:e6:da:16:25:42:7c:06:4c:8a:ca:09:85:
b8:a8:af:ba:9e:1c:cb:31:cf:46:ca:3a:0a:28:bd:
23:ed:18:d8:84:8d:d8:4f:8d:97:fd:c7:98:1d:84:
2a:5f:87:68:71:55:f2:1e:79:de:12:4a:40:ad:9b:
3f:97:47:d8:2d:4a:0c:92:d5:c3:c7:98:ae:37:66:
2f:fa:7e:ae:69:46:b1:09:c1:bb:c5:4a:b7:46:fd:
8f:e6:c0:58:0c:a5:74:27:e9:bc:f9:ca:c6:5d:3f:
eb:bb:c3:e7:12:88:7f:0c:98:ad:d4:4c:80:d7:85:
97:ab:bb:74:db:a6:21:1e:49:95:26:b2:d2:dc:a5:
e8:d5:ca:5e:3f:ae:ad:fc:95:4c:2e:0b:84:99:5a:
03:4f:3d:74:ab:f3:d5:5c:f0:19:aa:33:22:af:25:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:31:CA:57:29:B8:EC:57:D4:96:9E:00:51:99:41:82:3F:48:A6:A0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lDHKVym47FfUlp4AUZlBgj9IpqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:69:04:50:70:89:55:6b:36:f0:47:66:fc:d5:d0:f3:36:e0:
1c:3b:78:34:79:60:05:d6:0a:90:32:bc:8c:75:7d:75:6a:99:
c3:62:6a:2a:8a:88:5f:07:c5:d0:dd:01:35:4a:93:c1:d7:8e:
d5:09:28:b7:62:94:21:06:eb:4a:13:f8:31:63:e2:fe:a9:3e:
55:be:83:6c:d8:45:8f:a5:44:aa:81:0a:b8:b9:3b:98:28:b4:
e1:ed:9a:a8:e4:3a:65:15:03:8f:a6:f7:b1:51:d0:05:7c:d1:
c0:1e:b4:0d:a1:49:ba:66:d7:74:72:1a:43:3d:a0:85:24:f3:
32:d2:10:ad:80:62:2f:ec:aa:6b:95:f6:0c:ba:ca:61:2e:98:
f3:87:41:39:32:38:cf:39:5c:c7:df:e9:fd:e1:d5:f4:c2:e2:
9d:60:5d:80:7c:cd:58:2e:41:9e:ef:0e:d8:82:61:ab:64:54:
53:99:17:2c:3b:1e:b0:11:09:98:a4:7c:80:66:e5:c1:78:fd:
33:ee:f0:6f:d5:55:56:77:34:df:ed:3e:76:a5:3f:0e:a5:e2:
b0:8d:97:4b:ec:69:bb:93:37:d5:37:45:dd:8e:59:45:9a:c8:
75:7a:c3:e8:55:2c:48:88:3c:ba:25:9a:e2:51:78:5d:31:fa:
b0:ea:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:14 2026 by rpki-client