Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5k45N2AFJuiyDpWQBtSFldpEO-w.roa
File: 5k45N2AFJuiyDpWQBtSFldpEO-w.roa (raw, json)
Hash identifier: KZQR1wbVMd1Sk7XgXrlAjEaRR6wfvBgFwe3fOOqRbOg=
Subject key identifier: E6:4E:39:37:60:05:26:E8:B2:0E:95:90:06:D4:85:95:DA:44:3B:EC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A08FCA325E547881F58E34A4DCE36B8E60
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5k45N2AFJuiyDpWQBtSFldpEO-w.roa
Signing time: Fri 11 Sep 2026 09:26:28 +0000
ROA not before: Fri 11 Sep 2026 09:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 194.231.139.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.208.0/24 maxlen: 24
194.231.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ca:32:5e:54:78:81:f5:8e:34:a4:dc:e3:6b:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 09:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e64e3937600526e8b20e959006d48595da443bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:97:89:d3:27:6a:f4:68:57:69:41:47:9c:
a9:55:cb:08:9f:57:7a:bb:f2:d4:8f:d8:8a:c6:4a:
20:75:77:98:a1:66:8a:42:24:8a:75:d6:30:81:47:
46:30:69:98:7d:87:d2:87:c0:dd:93:16:15:f2:2d:
1d:7b:38:21:89:8c:46:0b:cf:77:da:71:91:cb:32:
5f:83:7e:fe:6f:8e:10:00:41:96:f0:d5:0a:1a:56:
51:3a:7e:fb:cf:25:8d:bc:85:73:88:29:b6:8d:f3:
a7:c4:ce:fd:97:c8:19:70:11:9f:6e:d5:23:0a:3c:
56:65:08:df:0f:d8:56:5f:f2:cf:0c:29:df:06:15:
c6:7f:05:e1:59:2c:ea:1c:4e:e8:21:27:83:c8:73:
ec:12:d9:1f:62:db:13:dc:cc:86:08:c4:bb:d9:67:
14:ab:72:dd:0d:1f:98:d5:4d:c6:cd:9f:83:d8:7f:
a6:51:16:f9:0b:b2:1f:28:ee:e3:39:04:c2:9f:9d:
df:75:d7:5f:33:9f:ff:3d:7a:0c:96:7d:e8:f8:22:
52:9a:b0:e5:e6:18:0c:ae:a7:77:33:9f:0a:45:c4:
e7:a3:08:1f:9d:a1:b5:6b:fc:e6:49:68:a0:f0:ec:
01:81:11:12:92:c7:49:3a:ce:d6:1a:c9:10:96:7d:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:39:37:60:05:26:E8:B2:0E:95:90:06:D4:85:95:DA:44:3B:EC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5k45N2AFJuiyDpWQBtSFldpEO-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.139.0/24
194.231.151.0/24
194.231.158.0/24
194.231.208.0/24
194.231.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6c:82:fa:0a:9d:c6:81:06:af:f0:98:1e:30:05:66:e4:43:
60:74:65:0c:ae:53:cc:2f:b8:cd:b7:af:df:03:62:47:f5:86:
13:96:b0:26:9f:e7:ab:81:a6:98:32:69:81:bb:bf:80:34:27:
31:7c:38:3b:de:5f:72:b8:54:76:91:d9:d8:ab:4d:ae:7a:b4:
65:cb:1d:ee:84:bd:18:d5:f6:b9:c1:3a:e6:48:e2:04:9a:b9:
8f:c0:61:dd:a3:f2:a4:f1:1c:be:63:8f:36:9b:d8:85:4f:a6:
ae:60:eb:1c:d9:26:e5:75:44:5b:cd:31:e1:ee:08:c5:8b:6b:
fe:92:5a:7e:c0:e8:20:b3:76:5a:01:30:db:11:3b:68:4e:2a:
61:a7:c4:0c:7a:ac:16:1b:ef:86:5c:d3:8d:d1:83:15:f9:b7:
c3:e4:8b:1c:22:94:93:30:5e:56:77:f5:b8:4d:ea:22:87:5f:
77:bd:e0:e2:5e:ba:c0:2a:7b:e1:b5:70:e2:5d:9c:27:94:e0:
99:0b:83:a0:b3:3f:39:9a:99:9f:f3:76:69:59:1d:47:3e:b0:
9c:77:5f:78:0d:e2:46:29:a4:23:46:1f:33:86:bf:56:35:84:
7e:44:1b:e9:28:c3:8c:fd:da:a3:a1:a6:ea:85:94:97:76:fe:
02:6d:3f:7e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCPyjJeVHiB9Y40pNzja45gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTExMDkyNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjRlMzkzNzYwMDUyNmU4YjIwZTk1OTAwNmQ0ODU5NWRhNDQzYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5+XidMnavRoV2lBR5ypVcsIn1d6
u/LUj9iKxkogdXeYoWaKQiSKddYwgUdGMGmYfYfSh8DdkxYV8i0dezghiYxGC893
2nGRyzJfg37+b44QAEGW8NUKGlZROn77zyWNvIVziCm2jfOnxM79l8gZcBGfbtUj
CjxWZQjfD9hWX/LPDCnfBhXGfwXhWSzqHE7oISeDyHPsEtkfYtsT3MyGCMS72WcU
q3LdDR+Y1U3GzZ+D2H+mURb5C7IfKO7jOQTCn53fdddfM5//PXoMln3o+CJSmrDl
5hgMrqd3M58KRcTnowgfnaG1a/zmSWig8OwBgRESksdJOs7WGskQln3HDwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOZOOTdgBSbosg6VkAbUhZXaRDvsMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvNWs0NU4yQUZKdWl5RHBXUUJ0U0ZsZHBFTy13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwueLAwQA
wueXAwQAwueeAwQAwufQAwQAwufSMA0GCSqGSIb3DQEBCwUAA4IBAQAMbIL6Cp3G
gQav8JgeMAVm5ENgdGUMrlPML7jNt6/fA2JH9YYTlrAmn+ergaaYMmmBu7+ANCcx
fDg73l9yuFR2kdnYq02uerRlyx3uhL0Y1fa5wTrmSOIEmrmPwGHdo/Kk8Ry+Y482
m9iFT6auYOsc2SbldURbzTHh7gjFi2v+klp+wOggs3ZaATDbETtoTiphp8QMeqwW
G++GXNON0YMV+bfD5IscIpSTMF5Wd/W4Teoih193veDiXrrAKnvhtXDiXZwnlOCZ
C4Ogsz85mpmf83ZpWR1HPrCcd194DeJGKaQjRh8zhr9WNYR+RBvpKMOM/dqjoabq
hZSXdv4CbT9+
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:03:32 2026 by rpki-client