Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/mbZPVKS5cn0Pn0qhOGIVdd1x934.roa
File: mbZPVKS5cn0Pn0qhOGIVdd1x934.roa (raw, json)
Hash identifier: t12eZIkP3hMqt8kl31mUFegNQWMPzTv+YlQYHFDoo5I=
Subject key identifier: 99:B6:4F:54:A4:B9:72:7D:0F:9F:4A:A1:38:62:15:75:DD:71:F7:7E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019ED174DC8CC717D7A271D8744F06E9C11E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/mbZPVKS5cn0Pn0qhOGIVdd1x934.roa
Signing time: Tue 16 Jun 2026 17:22:37 +0000
ROA not before: Tue 16 Jun 2026 17:22:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205621
IP address blocks: 194.77.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:74:dc:8c:c7:17:d7:a2:71:d8:74:4f:06:e9:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 16 17:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99b64f54a4b9727d0f9f4aa138621575dd71f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:5c:87:e2:64:c5:7d:1e:e2:37:dd:db:29:
d6:41:df:81:25:bb:c8:f0:fd:ae:42:50:f2:33:0d:
ba:6e:8a:8c:4f:db:a5:b9:7a:4b:54:13:21:de:69:
66:6e:14:4f:89:f4:73:4b:46:e1:51:4f:ef:48:5a:
02:bf:47:ba:7d:29:0d:bb:b6:85:06:b7:a5:2e:d0:
bd:6b:5f:16:14:1a:29:85:9f:37:07:85:62:72:2c:
68:ea:15:c9:f2:0d:b4:1d:c1:e3:6b:fd:6e:12:12:
dc:b6:14:73:ba:8b:c8:bc:a8:70:21:44:3b:d5:78:
ae:d8:34:ff:9a:b8:fc:eb:c1:9e:8c:ae:64:87:1a:
7d:03:c1:8b:6c:b2:1c:cc:43:81:0e:3a:12:03:f2:
67:ce:b6:d7:e5:61:80:c1:2c:05:ef:5f:ee:fc:9a:
d4:57:24:d2:4c:ec:42:2f:76:1b:f3:1d:7f:01:3c:
5b:9f:b9:e3:44:7b:c6:11:fc:fe:a2:1e:e8:2b:89:
9b:01:92:a7:de:de:7a:4e:66:c9:0a:66:78:78:bd:
22:33:ff:e4:ea:b3:ca:75:e9:b6:9e:29:e7:aa:52:
c9:3b:62:df:56:43:51:15:5a:b4:35:1e:5e:3a:3f:
03:73:90:69:78:c5:e2:91:d7:8f:4a:17:f8:86:24:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:4F:54:A4:B9:72:7D:0F:9F:4A:A1:38:62:15:75:DD:71:F7:7E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/mbZPVKS5cn0Pn0qhOGIVdd1x934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b6:62:8a:92:60:d5:0f:ed:77:7c:b8:12:04:b2:d7:cd:fa:
25:b8:5b:f6:8e:4b:b7:90:56:a9:76:d5:32:93:68:b7:47:83:
6c:99:1a:89:0c:e1:72:43:08:5f:aa:f1:56:ba:f8:1a:d9:35:
6a:b3:0c:51:ef:6b:94:61:1a:cb:94:26:74:e1:70:25:2f:07:
04:bc:fb:2b:f7:9d:46:6f:26:6b:84:d2:a5:b7:a2:32:d2:4b:
0d:98:6b:c9:09:7e:4e:27:95:d5:14:37:97:fa:5c:a9:b1:f6:
16:80:cd:d0:04:08:ed:01:8c:86:d1:f4:19:90:5e:a0:9f:32:
0f:22:05:fb:16:0d:0a:80:8c:ee:c2:06:ef:e1:66:a1:3b:11:
be:e2:f4:bc:c2:c3:07:bd:34:c9:4f:77:a8:fb:84:f9:03:1c:
be:b3:27:f1:3d:f0:e1:51:2a:b1:e1:1b:fe:13:25:8b:1b:5d:
3d:56:e8:ba:77:9e:ef:ae:84:8e:20:c3:d8:1a:15:b6:0b:84:
d1:0f:93:19:0e:3d:88:44:84:aa:d2:48:22:a5:9f:29:c0:b4:
3a:aa:ec:13:41:2b:ab:1e:38:77:c3:01:20:11:e5:cd:e1:a3:
6e:00:82:23:85:da:8b:f6:a8:3c:cc:2f:54:3d:26:c3:5d:90:
62:98:55:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7RdNyMxxfXonHYdE8G6cEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNjE2MTcyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWI2NGY1NGE0Yjk3MjdkMGY5ZjRhYTEzODYyMTU3NWRkNzFmNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiFch+JkxX0e4jfd2ynWQd+BJbvI
8P2uQlDyMw26boqMT9uluXpLVBMh3mlmbhRPifRzS0bhUU/vSFoCv0e6fSkNu7aF
BrelLtC9a18WFBophZ83B4Vicixo6hXJ8g20HcHja/1uEhLcthRzuovIvKhwIUQ7
1Xiu2DT/mrj868GejK5khxp9A8GLbLIczEOBDjoSA/JnzrbX5WGAwSwF71/u/JrU
VyTSTOxCL3Yb8x1/ATxbn7njRHvGEfz+oh7oK4mbAZKn3t56TmbJCmZ4eL0iM//k
6rPKdem2ninnqlLJO2LfVkNRFVq0NR5eOj8Dc5BpeMXikdePShf4hiTk+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJm2T1SkuXJ9D59KoThiFXXdcfd+MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvbWJaUFZLUzVjbjBQbjBxaE9HSVZkZDF4OTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwk0mMA0G
CSqGSIb3DQEBCwUAA4IBAQCKtmKKkmDVD+13fLgSBLLXzfoluFv2jku3kFapdtUy
k2i3R4NsmRqJDOFyQwhfqvFWuvga2TVqswxR72uUYRrLlCZ04XAlLwcEvPsr951G
byZrhNKlt6Iy0ksNmGvJCX5OJ5XVFDeX+lypsfYWgM3QBAjtAYyG0fQZkF6gnzIP
IgX7Fg0KgIzuwgbv4WahOxG+4vS8wsMHvTTJT3eo+4T5Axy+syfxPfDhUSqx4Rv+
EyWLG109Vui6d57vroSOIMPYGhW2C4TRD5MZDj2IRISq0kgipZ8pwLQ6quwTQSur
Hjh3wwEgEeXN4aNuAIIjhdqL9qg8zC9UPSbDXZBimFWs
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:10 2026 by rpki-client