Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tnDAkDkdRG1Q0q8Jld8iWwSXbmE.roa
File: tnDAkDkdRG1Q0q8Jld8iWwSXbmE.roa (raw, json)
Hash identifier: 3TzOo/EGDjM4QmRiKd1VfcGMBoZfkcjverp4OwoP3lI=
Subject key identifier: B6:70:C0:90:39:1D:44:6D:50:D2:AF:09:95:DF:22:5B:04:97:6E:61
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199866188C007EA59F63F253B94FA6CC5CD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tnDAkDkdRG1Q0q8Jld8iWwSXbmE.roa
Signing time: Fri 26 Sep 2025 14:16:02 +0000
ROA not before: Fri 26 Sep 2025 14:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 194.231.140.0/24 maxlen: 24
194.231.143.0/24 maxlen: 24
194.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:61:88:c0:07:ea:59:f6:3f:25:3b:94:fa:6c:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 26 14:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b670c090391d446d50d2af0995df225b04976e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:cc:7a:81:80:8c:61:0f:16:9d:a4:59:ed:
88:46:c9:ee:a9:a8:11:71:d5:78:5e:8b:79:07:c6:
b5:de:f3:cc:62:dd:f0:0f:3c:86:a8:ef:1e:c7:af:
89:b2:3f:a5:25:93:e7:dc:8d:bc:69:79:a6:1f:2f:
30:e3:66:e0:58:3e:b7:c7:83:51:cb:50:76:ea:4a:
01:45:69:fe:ad:cd:4a:7b:f0:f2:2c:70:91:79:0a:
6e:a0:4b:10:d6:34:ab:3f:e9:91:01:88:ce:bd:70:
8b:6c:36:81:8e:14:01:cb:22:79:2f:4c:34:52:49:
24:0e:85:32:78:fd:87:e6:21:2f:af:bf:bb:f1:f4:
47:d7:75:ad:c0:58:4a:2d:7f:a4:be:84:95:80:58:
88:08:c8:51:00:ba:ca:21:d6:92:c1:24:72:f6:c2:
4c:d0:89:4a:e9:c7:91:2e:e9:c2:36:d0:71:de:85:
ff:73:0a:93:fa:87:41:b6:e7:e4:39:dc:8e:7a:3a:
80:dd:f9:68:42:71:f2:fb:f2:fd:71:57:bc:95:66:
b4:2d:09:55:19:5c:75:23:12:06:3b:38:4a:b5:8c:
d0:9e:6b:7b:d2:49:24:be:e6:97:ce:7c:0c:8f:74:
40:f9:6e:78:4e:cf:8c:6b:b2:4a:13:8e:85:2f:63:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:C0:90:39:1D:44:6D:50:D2:AF:09:95:DF:22:5B:04:97:6E:61
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tnDAkDkdRG1Q0q8Jld8iWwSXbmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.140.0/24
194.231.143.0/24
194.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5f:50:12:35:33:a0:16:64:2a:7e:e7:45:7d:f3:82:99:95:
06:9c:1e:39:a5:8d:0b:cd:f0:d8:58:32:f1:7e:5a:16:4d:6d:
10:0c:98:6f:72:30:8d:b5:2f:21:f6:00:14:7a:e8:45:f5:6c:
89:d5:25:5c:fc:b4:0b:02:b9:02:53:39:76:e0:13:3f:b7:f3:
19:66:d9:42:38:60:0e:c0:eb:1a:7a:66:b9:9c:55:60:cd:c2:
31:c3:e5:d9:54:80:b5:ff:d8:b1:93:25:9a:cf:2d:cc:d9:70:
5f:99:e8:71:64:9c:08:b9:d1:a0:17:e1:8e:7b:06:ea:20:9f:
6d:79:d9:b8:41:5c:51:44:a0:20:84:9b:67:30:af:bb:45:d2:
12:ad:f4:f4:31:4f:c8:53:3c:b4:fc:b1:25:6b:9b:a1:6e:d2:
b3:a8:e2:49:e8:1f:aa:fd:36:78:a3:52:6d:c0:0e:fd:46:ee:
9b:1d:5f:5b:1a:2a:b9:fc:71:e4:c9:ba:e4:73:51:6a:d7:83:
a6:05:1d:f9:f8:f7:4f:26:c9:98:3e:ef:bf:18:2b:7f:ec:dc:
2b:b2:d0:6a:7d:f2:00:2c:d6:8b:11:ac:67:b2:a6:1c:2c:31:
48:e1:9a:75:b8:fa:e7:9a:96:02:ad:b2:f2:c9:1c:0e:35:0d:
c8:d0:40:49
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZmGYYjAB+pZ9j8lO5T6bMXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwOTI2MTQxNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjcwYzA5MDM5MWQ0NDZkNTBkMmFmMDk5NWRmMjI1YjA0OTc2ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusTMeoGAjGEPFp2kWe2IRsnuqagR
cdV4Xot5B8a13vPMYt3wDzyGqO8ex6+Jsj+lJZPn3I28aXmmHy8w42bgWD63x4NR
y1B26koBRWn+rc1Ke/DyLHCReQpuoEsQ1jSrP+mRAYjOvXCLbDaBjhQByyJ5L0w0
UkkkDoUyeP2H5iEvr7+78fRH13WtwFhKLX+kvoSVgFiICMhRALrKIdaSwSRy9sJM
0IlK6ceRLunCNtBx3oX/cwqT+odBtufkOdyOejqA3floQnHy+/L9cVe8lWa0LQlV
GVx1IxIGOzhKtYzQnmt70kkkvuaXznwMj3RA+W54Ts+Ma7JKE46FL2MmTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLZwwJA5HURtUNKvCZXfIlsEl25hMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvdG5EQWtEa2RSRzFRMHE4SmxkOGlXd1NYYm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwueMAwQA
wuePAwQAwufeMA0GCSqGSIb3DQEBCwUAA4IBAQC8X1ASNTOgFmQqfudFffOCmZUG
nB45pY0LzfDYWDLxfloWTW0QDJhvcjCNtS8h9gAUeuhF9WyJ1SVc/LQLArkCUzl2
4BM/t/MZZtlCOGAOwOsaema5nFVgzcIxw+XZVIC1/9ixkyWazy3M2XBfmehxZJwI
udGgF+GOewbqIJ9tedm4QVxRRKAghJtnMK+7RdISrfT0MU/IUzy0/LEla5uhbtKz
qOJJ6B+q/TZ4o1JtwA79Ru6bHV9bGiq5/HHkybrkc1Fq14OmBR35+PdPJsmYPu+/
GCt/7NwrstBqffIALNaLEaxnsqYcLDFI4Zp1uPrnmpYCrbLyyRwONQ3I0EBJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:31 2025 by rpki-client