Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BaTGojRpw0G06KBp9NurA1eDqrk.roa
File: BaTGojRpw0G06KBp9NurA1eDqrk.roa (raw, json)
Hash identifier: LOiLkP9JlERmEKZ951Nw4CehvEIR9pZ+ocoAUP9jTyQ=
Subject key identifier: 05:A4:C6:A2:34:69:C3:41:B4:E8:A0:69:F4:DB:AB:03:57:83:AA:B9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EB69AB390BF434A9BDD463C80945492AB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BaTGojRpw0G06KBp9NurA1eDqrk.roa
Signing time: Thu 11 Jun 2026 12:14:12 +0000
ROA not before: Thu 11 Jun 2026 12:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 194.231.152.0/24 maxlen: 24
194.231.159.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:9a:b3:90:bf:43:4a:9b:dd:46:3c:80:94:54:92:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 11 12:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05a4c6a23469c341b4e8a069f4dbab035783aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:7a:0c:6d:bd:1e:94:9d:83:e9:00:3f:1e:
67:3b:80:01:67:43:ea:33:45:90:e2:aa:a8:0a:a6:
61:02:4a:8c:6d:bb:c5:64:86:17:e8:a5:b3:d4:89:
ea:6f:74:ec:ea:1f:2c:29:60:1e:63:e4:ee:bb:31:
84:a1:64:64:5b:fc:89:ca:62:da:86:d2:05:60:1a:
f7:74:76:1b:c6:87:04:2d:fc:e1:41:03:73:18:3f:
6e:1c:17:89:8a:4f:8d:39:0d:df:40:15:65:96:86:
87:b5:e1:c5:ab:7f:99:a7:4a:dc:2e:f3:51:0d:69:
dc:76:09:44:c2:f1:2a:41:03:ae:c3:d4:12:06:39:
10:56:e4:4f:da:26:01:d1:14:65:05:c2:5b:0a:77:
7a:1d:07:91:41:d7:da:36:95:9a:55:bd:18:9d:20:
83:78:2f:fb:85:d4:ca:0e:0c:16:d3:c7:e2:b6:cc:
06:d4:44:71:e5:2b:77:e9:d2:2f:c6:40:14:cb:2e:
b6:d9:d2:b5:ae:d1:34:97:76:50:80:f6:cf:34:e0:
ca:a5:75:b9:91:5d:bb:66:7d:3a:4a:b1:2e:0c:96:
26:ac:3b:16:0f:59:88:7c:0f:9c:0a:2b:34:37:d6:
b7:b4:21:85:7d:36:08:bc:5e:81:7d:ec:33:7e:62:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:C6:A2:34:69:C3:41:B4:E8:A0:69:F4:DB:AB:03:57:83:AA:B9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BaTGojRpw0G06KBp9NurA1eDqrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.152.0/24
194.231.159.0/24
194.231.214.0/24
194.231.218.0/24
212.189.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:df:95:32:0b:b9:30:5b:7c:b3:d6:d4:79:d3:d3:5c:ba:e4:
7f:0e:d1:88:f8:dc:b4:27:60:1d:da:46:44:0e:ef:06:6d:6b:
86:84:52:1e:eb:06:8d:ca:4f:47:55:30:88:5a:a0:20:f9:ce:
8f:24:cf:47:56:2f:42:12:ef:b5:34:e5:bc:c0:32:13:5a:69:
3e:38:99:da:e6:1e:a8:e6:0e:9c:6f:59:e9:ae:f5:e8:eb:77:
cd:6c:87:06:32:e0:aa:e6:ca:fb:ad:e5:a3:37:fe:2c:4f:43:
cf:a6:ac:69:08:b7:92:20:ff:62:31:12:3d:c1:e2:c4:5a:01:
18:86:95:b5:f8:94:0d:c2:b6:9b:7c:a2:8c:0c:fc:12:07:e5:
3c:03:a4:83:19:4c:38:05:ec:de:16:6f:a4:f7:12:64:9b:2c:
0f:05:71:9a:c1:99:38:3a:05:a6:74:43:c7:6a:57:13:94:b9:
66:39:3d:c5:a9:0b:8b:3b:9d:61:d4:96:53:7b:1a:13:37:94:
52:83:d0:eb:cf:16:a8:54:65:0d:0d:0c:71:76:7b:cf:64:6f:
16:a8:69:ea:c3:3a:9e:8a:5e:58:ac:ab:5e:18:9e:69:ec:57:
77:fa:ab:65:a3:51:7f:a5:e2:e4:5c:3d:c8:0b:ca:4e:08:6f:
33:c9:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:57 2026 by rpki-client