Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/p2ydkiqcn80J8h9LlCf2wtD_caM.roa
File: p2ydkiqcn80J8h9LlCf2wtD_caM.roa (raw, json)
Hash identifier: 9X8eY4UjTFiP5UgL3xDcpDNLQ4aJ0LXh/G6IerAShJ0=
Subject key identifier: A7:6C:9D:92:2A:9C:9F:CD:09:F2:1F:4B:94:27:F6:C2:D0:FF:71:A3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10ACB3132591AC700E6FA42A92B9606CC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/p2ydkiqcn80J8h9LlCf2wtD_caM.roa
Signing time: Mon 05 Oct 2026 06:40:50 +0000
ROA not before: Mon 05 Oct 2026 06:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 194.231.194.0/24 maxlen: 24
195.162.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:cb:31:32:59:1a:c7:00:e6:fa:42:a9:2b:96:06:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 06:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a76c9d922a9c9fcd09f21f4b9427f6c2d0ff71a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:6d:45:74:30:53:e5:3a:fc:bc:71:8e:41:
b2:1e:21:5a:21:9b:1f:86:92:3d:84:13:24:14:a4:
56:18:25:2c:0a:b6:18:2b:1e:9c:18:dd:01:f0:f1:
0c:a1:24:e3:8e:63:2d:0a:cf:fd:2b:00:59:9a:60:
4e:bf:b0:d3:0b:75:ca:2a:61:c1:71:e8:5b:16:13:
92:45:e0:8d:bd:42:0c:e5:74:04:e0:b4:8a:03:64:
8f:6a:30:e0:47:9f:e7:00:ff:43:9f:0b:db:c4:ec:
86:bc:a3:35:9d:a7:57:f3:31:b7:e9:79:a7:36:02:
20:64:d3:5c:1a:47:67:40:78:15:46:bf:66:b0:83:
2a:49:ed:88:ab:e0:fe:d1:0e:f0:ec:66:ae:30:9b:
a5:b1:fb:b5:6b:7b:62:41:d3:16:77:ba:ba:f4:7b:
ae:78:5e:34:9e:72:c7:a7:59:5f:49:4e:60:08:0a:
58:f7:4d:c9:4a:1a:27:14:8c:05:2e:38:df:79:c1:
14:24:48:dc:89:a1:8c:39:74:97:25:5a:93:b0:84:
af:da:1c:c7:2e:25:9b:e6:f4:95:f4:9e:4a:b7:52:
60:b3:93:fd:47:80:be:2f:d6:9b:fa:98:88:36:af:
30:8a:3b:bd:06:cf:93:b6:c8:30:76:5b:f4:ec:8f:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:9D:92:2A:9C:9F:CD:09:F2:1F:4B:94:27:F6:C2:D0:FF:71:A3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/p2ydkiqcn80J8h9LlCf2wtD_caM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.194.0/24
195.162.247.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7a:42:04:dd:dc:32:23:d1:76:3c:c5:9c:dd:17:6c:2f:39:
bb:b9:2c:de:7d:52:d2:67:b9:3a:1c:42:e3:8e:67:c7:78:aa:
3e:66:69:f9:86:41:a2:7c:87:d6:b2:7e:05:1b:27:97:dd:c7:
ad:d0:70:8f:36:30:2b:d7:48:f3:b5:b0:7e:30:21:1b:82:eb:
7e:ab:31:fc:a9:a5:6f:43:5d:4b:d5:d7:99:4c:3c:54:a0:c3:
80:1d:bb:d6:f3:d5:15:20:43:1e:f6:40:1e:4d:0d:ef:01:70:
44:f2:c5:e5:bc:c5:d6:09:25:c6:86:a6:0d:83:43:20:cd:f2:
1b:34:90:be:fc:50:8a:c1:d2:f3:b5:d8:64:49:a9:6a:d3:5e:
03:46:9c:cc:7d:e1:ba:3c:65:74:35:0e:25:16:e6:e1:de:36:
b2:f6:42:f3:b0:f9:fc:8d:6b:21:f4:48:3a:46:02:1b:3c:3b:
d1:46:38:9b:6e:da:b0:c8:29:b1:8f:1a:22:12:1a:4d:e9:86:
bb:31:25:f8:28:cb:fb:b2:4c:01:74:74:f3:9f:89:e2:8a:7b:
57:85:aa:a2:35:39:34:17:52:3b:9f:e3:30:70:68:7a:d1:8d:
9b:f4:a6:59:7f:a8:e3:cd:0a:09:bb:f5:3e:65:82:4f:e9:93:
9e:da:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:34:37 2026 by rpki-client