Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/w-YSsVPcreZK76OAMAC7t3l4gqk.roa
File: w-YSsVPcreZK76OAMAC7t3l4gqk.roa (raw, json)
Hash identifier: muu9Cjz0PVG+kHeGGfsdpnVdbA1fcTFnOm9UHt8v5Fc=
Subject key identifier: C3:E6:12:B1:53:DC:AD:E6:4A:EF:A3:80:30:00:BB:B7:79:78:82:A9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0D5306B027441A1C523CDAA6FBF69195C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/w-YSsVPcreZK76OAMAC7t3l4gqk.roa
Signing time: Thu 24 Sep 2026 20:51:55 +0000
ROA not before: Thu 24 Sep 2026 20:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142482
IP address blocks: 194.231.143.0/24 maxlen: 24
194.231.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:30:6b:02:74:41:a1:c5:23:cd:aa:6f:bf:69:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 24 20:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3e612b153dcade64aefa3803000bbb7797882a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:90:66:ee:51:19:97:b4:f6:82:b2:86:44:
59:83:7e:58:14:c2:8f:cc:38:d5:92:74:27:ba:f3:
a5:ca:2d:9d:49:33:e5:04:c6:4c:f0:e0:f8:68:c2:
2f:7e:44:42:c6:e2:9d:5a:bb:0e:1c:9f:4e:bf:25:
20:1e:38:a2:63:5a:96:bd:9c:fe:db:06:19:65:cf:
92:02:e0:fd:c9:52:b1:b5:ba:32:38:13:15:69:02:
9e:23:eb:34:26:46:92:a0:00:d6:fa:27:8d:e3:3a:
0d:bd:c0:f3:10:7e:82:f6:d2:8b:e3:bb:c1:ff:3f:
eb:4f:3f:6d:1c:37:5a:f8:51:1a:57:45:42:60:ee:
db:69:bb:90:ae:c4:f4:2a:d5:43:03:94:16:90:38:
01:95:91:be:36:d0:c4:25:54:ba:a7:2c:ab:78:88:
d5:d8:70:3f:d9:f8:32:a2:a4:ab:40:1c:87:0c:f7:
5d:1d:4b:1e:20:81:a2:08:7c:1f:e7:20:f2:b4:62:
4f:6c:ee:bd:50:3e:3c:90:23:fe:68:70:30:48:8e:
cc:0f:a5:68:eb:21:94:c3:70:f5:e0:ce:5e:f2:39:
ca:97:d1:f1:4b:0b:e1:15:69:26:c3:1b:20:af:8c:
45:ee:21:b1:72:69:a0:db:94:34:79:a6:97:59:f6:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:12:B1:53:DC:AD:E6:4A:EF:A3:80:30:00:BB:B7:79:78:82:A9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/w-YSsVPcreZK76OAMAC7t3l4gqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.143.0/24
194.231.219.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:83:04:8a:6b:f9:d7:7c:57:3d:9e:6a:6f:46:1c:fc:73:58:
a9:6e:6c:ce:0a:08:90:b7:09:9e:9c:60:4e:de:bb:a1:e5:13:
30:c4:14:77:ad:43:c5:e4:71:45:76:16:f7:79:f4:34:9a:1a:
a3:67:11:e3:94:f5:af:1e:6d:e1:0d:4f:7d:08:02:ef:81:ac:
cc:f8:0a:b3:de:3a:46:b0:f1:29:bc:f3:37:5b:82:0f:cb:c0:
f4:31:b0:03:b2:59:60:cd:e6:08:43:c2:ba:aa:4e:f9:3a:18:
8c:45:73:48:4c:e6:ac:08:32:c8:12:26:bb:5c:97:8c:8b:ef:
94:95:77:4c:0a:7c:56:46:35:3c:c3:50:50:11:ca:ca:d4:b3:
05:48:29:98:bb:8b:94:8f:a4:8d:c9:5a:e7:7e:b7:8d:43:e0:
80:6c:ad:89:dc:b3:b0:fe:33:d0:cb:84:62:36:b4:41:ea:af:
00:f1:97:8d:af:5f:7b:6a:c7:e5:2a:a0:b3:e4:61:9f:18:01:
99:df:9e:07:94:20:72:98:c5:d0:f8:3b:17:3f:af:cf:b6:cd:
63:5a:f5:93:3d:49:df:3f:e2:da:4e:59:28:59:3a:94:dd:f7:
2b:d4:67:41:09:6a:68:28:ba:80:c8:70:68:6c:c6:57:1f:12:
e9:cb:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:58:14 2026 by rpki-client