Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IUWVJ0CSQPI_wmdO1D4DVREXgdU.roa
File: IUWVJ0CSQPI_wmdO1D4DVREXgdU.roa (raw, json)
Hash identifier: O6hsPYPulNO6nx4ZvWKMe4LsNua1omgIZzupHJb0g6c=
Subject key identifier: 21:45:95:27:40:92:40:F2:3F:C2:67:4E:D4:3E:03:55:11:17:81:D5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA1FEC0965326F27B66676A1605A77EC4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IUWVJ0CSQPI_wmdO1D4DVREXgdU.roa
Signing time: Mon 27 Jul 2026 05:14:14 +0000
ROA not before: Mon 27 Jul 2026 05:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 77.67.16.0/24 maxlen: 24
194.122.83.0/24 maxlen: 24
217.8.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:fe:c0:96:53:26:f2:7b:66:67:6a:16:05:a7:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 27 05:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21459527409240f23fc2674ed43e0355111781d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:66:b1:d2:30:26:06:f2:72:7b:88:e5:95:
23:5a:32:7b:a5:f0:47:cd:7e:ea:ad:25:17:6d:9e:
cf:17:e2:97:de:b7:78:5e:fd:a4:8c:3e:a5:36:68:
d1:99:7f:a2:7b:a5:15:2c:8b:72:ce:6e:7d:c6:23:
3c:ed:99:a4:f5:68:f6:34:3e:62:89:cc:90:3b:29:
0f:43:bb:64:61:2c:66:ad:97:b6:07:71:f2:b1:4d:
cb:60:87:37:6d:06:21:2d:df:b1:fc:b5:23:f6:5e:
a6:b1:bc:a3:8c:d1:e6:dd:ed:96:60:36:15:17:9e:
74:4b:c8:3d:63:59:8e:a5:fe:6c:cf:de:61:6b:b3:
9b:e0:2e:18:0c:ca:50:b1:15:bf:25:7a:e2:9c:d4:
28:d7:76:8f:4b:9d:ac:2f:35:99:c9:5a:05:9b:98:
82:5b:64:50:f2:76:82:1e:8a:35:e6:68:41:dd:6f:
09:a4:f0:57:65:6c:4f:e6:8a:ad:67:87:0a:2e:17:
01:97:d9:c1:11:3d:ba:07:e5:bd:0e:2c:0c:06:17:
a4:4c:05:92:f4:89:13:01:14:b9:75:69:4a:05:47:
6f:32:b5:30:68:62:a2:eb:22:99:37:ce:47:ef:06:
65:7e:94:7f:76:91:80:da:c7:be:ea:16:3e:e5:46:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:95:27:40:92:40:F2:3F:C2:67:4E:D4:3E:03:55:11:17:81:D5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IUWVJ0CSQPI_wmdO1D4DVREXgdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.16.0/24
194.122.83.0/24
217.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9e:d9:44:bd:66:71:5d:0f:18:cb:65:99:4f:15:a5:4e:c4:
2b:57:33:ed:ff:da:33:27:70:43:58:90:8a:2c:db:7d:f3:0e:
f6:fb:a0:a3:b3:7f:32:80:62:cb:38:30:dc:ce:6e:30:5a:91:
71:50:06:97:59:97:73:b0:ce:44:0d:8a:ee:7e:c9:0a:7d:57:
27:eb:75:fb:eb:d7:af:8b:6b:1d:19:9f:1e:5b:41:2c:d3:99:
86:84:be:3e:c5:ae:23:ca:5a:42:88:e7:16:63:7b:f8:0e:5b:
04:7c:ce:aa:36:fe:ac:6a:04:77:20:3a:97:c9:5c:8b:07:45:
70:5f:c7:9a:bf:45:83:fe:16:d6:83:47:7d:cf:19:be:22:ac:
68:d8:e7:2b:a9:d3:69:d7:d6:9e:73:b9:db:eb:f2:57:18:ef:
92:7c:76:06:26:43:e7:db:4c:a2:9f:22:a7:79:5b:e0:15:b0:
3e:6f:94:46:81:9a:9a:4b:3b:fa:2a:52:23:83:75:b6:62:03:
f5:4b:06:c9:73:c3:3d:31:95:b5:5c:a6:18:d3:3f:f7:41:0c:
ab:e1:2e:b5:fd:80:06:6b:e2:a6:9c:ea:41:17:1e:1b:e3:cf:
c4:54:c3:3b:67:a5:0c:3f:93:62:35:f5:2d:dd:50:7f:a0:80:
a9:e4:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:40 2026 by rpki-client