Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OXDmzgzvGYEp9lDXiZV0ST4GvUU.roa
File: OXDmzgzvGYEp9lDXiZV0ST4GvUU.roa (raw, json)
Hash identifier: eRL+Go9i25gk+tIz+BBN27iOErI0tFUGMMKt8NX5of8=
Subject key identifier: 39:70:E6:CE:0C:EF:19:81:29:F6:50:D7:89:95:74:49:3E:06:BD:45
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A08A92D7B14AF288A461EBB3DD3204FA16
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OXDmzgzvGYEp9lDXiZV0ST4GvUU.roa
Signing time: Thu 10 Sep 2026 09:07:54 +0000
ROA not before: Thu 10 Sep 2026 09:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38186
IP address blocks: 212.222.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:92:d7:b1:4a:f2:88:a4:61:eb:b3:dd:32:04:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 10 09:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3970e6ce0cef198129f650d7899574493e06bd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:cb:a9:56:2c:c9:5e:73:77:d8:ee:a6:78:
e4:08:de:1e:8b:a1:5e:9d:6d:07:c9:ec:75:9b:c7:
69:b3:10:0c:bc:c1:f7:9b:f3:3a:a1:f0:d5:d2:7c:
ab:27:c6:28:ae:72:13:88:f4:d2:fe:e1:f9:72:e6:
8e:c8:30:ee:7c:cd:49:82:18:7f:f2:55:6e:53:dc:
55:eb:d9:09:61:b2:e2:3f:8a:a5:9f:de:db:51:bb:
6a:a9:87:f7:0d:56:4a:da:2f:b6:09:de:c2:67:bc:
e2:0f:ae:ce:f4:d7:df:25:7c:bb:62:fa:d2:16:91:
0c:95:9a:b3:d9:c0:ed:ec:9f:03:ee:13:76:54:30:
3a:cb:55:d9:9f:e2:4a:37:bc:3c:d5:1a:4a:6a:e1:
25:b1:a6:9a:62:b8:05:bc:cd:81:fe:08:6f:6f:bd:
97:a9:e0:b5:0f:70:9c:2a:f1:f3:77:d8:87:5e:d1:
14:1b:ed:d3:68:b6:47:21:cd:fb:cd:0e:fd:f8:05:
90:e6:4b:8a:33:6c:9e:65:08:1a:76:55:a4:1a:54:
f4:17:ae:e2:c4:82:92:9e:d9:18:2d:86:83:08:63:
14:32:73:b5:d3:ab:f1:25:1c:31:a5:6f:c0:34:d5:
7e:08:e4:e1:d2:ff:84:fe:1c:3c:1a:45:43:43:8b:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:E6:CE:0C:EF:19:81:29:F6:50:D7:89:95:74:49:3E:06:BD:45
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OXDmzgzvGYEp9lDXiZV0ST4GvUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.222.171.0/24
Signature Algorithm: sha256WithRSAEncryption
82:83:cc:fb:e4:3a:8e:de:e5:ce:e2:5b:47:66:6f:57:8e:95:
c0:01:8d:d4:ab:e5:f2:0a:1b:a9:ea:2a:b5:3b:d7:04:7e:81:
58:24:09:bd:b1:37:81:a6:48:ba:e5:1a:c1:c6:21:fb:db:cf:
0f:f4:69:79:79:50:22:88:f7:9b:3d:88:81:9b:39:e3:bc:f8:
c6:ed:a1:21:d9:7a:db:1b:6b:e9:42:2a:59:05:c8:7b:14:55:
88:c4:88:30:f0:d1:3d:6c:76:06:ff:d3:f4:38:f2:ca:78:32:
93:23:24:53:14:bb:6c:82:7c:9d:7d:13:5a:e5:07:a6:d5:80:
80:3b:79:fd:78:15:e4:29:3d:83:cb:f5:06:e3:85:23:ef:24:
59:44:f2:ba:72:76:1b:3f:46:5f:10:ca:95:91:b2:53:6d:ef:
e4:35:b4:64:56:68:3d:72:3d:a2:35:20:dc:b2:2f:10:74:bf:
39:0d:a1:dc:22:3c:cd:bd:a0:1c:60:2e:ad:04:82:22:89:ee:
45:b7:b1:25:c0:f9:c8:30:39:c1:51:38:31:13:e5:2a:c5:7b:
88:ce:e3:0d:bc:e3:44:6b:95:30:ae:4c:6c:3d:59:c1:e8:a9:
53:f5:a9:f5:99:28:1b:d4:19:08:1b:19:a4:7b:a6:d7:0e:25:
01:70:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:50 2026 by rpki-client