Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ms94fTnkCVyPMgcHVVv5MDpKzao.roa
File: Ms94fTnkCVyPMgcHVVv5MDpKzao.roa (raw, json)
Hash identifier: B6+yHWn+cPj7UVVDbIdIuo4xt3sxERfK14/2OhF1fck=
Subject key identifier: 32:CF:78:7D:39:E4:09:5C:8F:32:07:07:55:5B:F9:30:3A:4A:CD:AA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA60A378B0DD9CD4DEE05356210BCE07A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ms94fTnkCVyPMgcHVVv5MDpKzao.roa
Signing time: Tue 28 Jul 2026 00:05:15 +0000
ROA not before: Tue 28 Jul 2026 00:05:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149978
IP address blocks: 195.21.135.0/24 maxlen: 24
195.162.249.0/24 maxlen: 24
195.162.250.0/24 maxlen: 24
195.162.251.0/24 maxlen: 24
195.162.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:0a:37:8b:0d:d9:cd:4d:ee:05:35:62:10:bc:e0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 28 00:05:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32cf787d39e4095c8f320707555bf9303a4acdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:3a:bb:d7:30:04:5c:40:9e:3b:f9:03:9a:
4a:e2:b7:c9:aa:ea:dc:b7:e5:2d:7b:a5:2d:69:cb:
d5:fb:17:68:94:96:a5:42:ba:9e:c9:c4:68:6e:e1:
96:b3:bd:3f:bd:f1:88:45:3f:bf:b8:ef:33:32:4a:
27:56:d7:ad:20:92:6d:6e:72:08:78:43:b0:85:40:
65:e9:bd:c1:bc:f1:08:39:d0:63:c0:3b:65:58:14:
94:c8:6d:c5:5d:55:ab:65:d0:f1:a1:35:b8:ff:e3:
60:a4:56:f0:03:93:77:6d:60:6f:f8:3f:3b:41:6c:
8c:a4:1d:7f:aa:c3:36:7b:4a:15:e9:d0:34:f6:61:
ac:a1:50:65:24:3a:6b:e9:5a:ac:29:88:0f:ae:9f:
2f:95:f2:95:1a:fc:eb:4d:5a:17:ec:d3:3f:32:7f:
01:8c:46:b0:e0:14:0e:fe:36:24:b2:db:48:63:77:
27:5a:c5:4c:a6:29:97:df:e6:f3:bb:1e:82:b7:49:
40:ca:e4:34:3b:a1:d8:67:a4:6c:ed:3e:6d:93:7e:
4b:b7:12:0f:58:e1:e0:49:b9:88:1a:af:08:a0:63:
5e:d9:ed:52:ee:cd:27:53:fc:74:1c:45:2f:1b:7b:
af:71:65:83:0e:d1:18:6f:81:8d:4b:77:db:51:ca:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:78:7D:39:E4:09:5C:8F:32:07:07:55:5B:F9:30:3A:4A:CD:AA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Ms94fTnkCVyPMgcHVVv5MDpKzao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.135.0/24
195.162.249.0-195.162.252.255
Signature Algorithm: sha256WithRSAEncryption
16:74:03:0b:ba:71:c4:c8:86:e7:95:73:d6:45:ff:a5:74:a5:
fc:80:63:92:09:40:43:ff:56:a1:d4:2b:d5:6d:58:e6:bb:70:
79:a0:49:fb:99:98:b1:87:4b:ec:4b:b7:04:a0:f1:7b:43:ca:
bb:3c:23:0a:45:a7:33:a4:ce:6a:e6:b1:98:a4:b4:c7:33:72:
41:5a:33:32:56:19:cf:65:e3:38:ef:67:23:e9:51:46:58:61:
ff:43:24:09:61:4b:9a:7c:33:a9:1f:47:8f:2c:1c:e6:4a:2f:
2d:c2:9c:02:2f:4f:c5:9e:10:1f:14:11:8f:ff:40:8d:77:4c:
9e:21:ab:44:6c:e9:0f:da:2a:5d:ad:21:80:c0:56:2c:a0:e8:
c2:87:7d:be:9f:64:b7:14:f8:fa:bb:8d:80:6c:49:d4:75:9a:
4e:0f:12:d4:a8:bd:ec:df:4c:35:b9:37:7e:04:68:6d:29:e1:
eb:e6:57:a3:fc:91:6a:62:ad:e0:31:70:28:f6:9a:13:1b:d3:
aa:d3:b9:e3:63:d2:ac:48:ea:dc:8e:cd:a4:1d:f4:34:60:38:
1f:18:a5:de:3a:88:72:ff:ae:3e:2e:db:db:53:58:24:0e:51:
90:7e:91:76:2b:bb:b3:79:09:08:6a:81:d9:ca:b0:ce:b7:42:
e4:81:1b:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:29 2026 by rpki-client