Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_9e7r61yL6FtU3Aq0-Zm7iguHr8.roa
File: _9e7r61yL6FtU3Aq0-Zm7iguHr8.roa (raw, json)
Hash identifier: tK5IsbmeFf9i7oAnl1YwYRwm/6TNI6WQXgnAGBCdcPU=
Subject key identifier: FF:D7:BB:AF:AD:72:2F:A1:6D:53:70:2A:D3:E6:66:EE:28:2E:1E:BF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D2E974A0786F3A221C869D23D006D1A25
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_9e7r61yL6FtU3Aq0-Zm7iguHr8.roa
Signing time: Fri 27 Mar 2026 09:19:19 +0000
ROA not before: Fri 27 Mar 2026 09:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 194.231.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:97:4a:07:86:f3:a2:21:c8:69:d2:3d:00:6d:1a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 27 09:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffd7bbafad722fa16d53702ad3e666ee282e1ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:16:13:49:0d:88:fb:d9:0a:77:04:9d:ed:
8d:9b:86:ef:e5:e0:b2:32:a2:10:f9:13:13:6e:db:
d4:76:09:7e:b6:8f:b8:4b:5e:ea:2a:a1:ea:63:ea:
18:4c:3e:1b:80:51:9d:81:b4:66:3a:78:69:2b:5a:
aa:dc:e2:d0:54:bb:67:ed:81:12:e9:67:67:b1:6b:
46:c0:6e:b1:37:ad:dc:b0:a7:6d:b6:56:1a:87:60:
b1:d8:3d:c4:b5:2b:9c:dc:bd:ca:e2:cd:7f:e1:e7:
6d:fe:4d:85:5b:b2:e7:0e:e9:a7:54:23:0e:66:36:
ae:ad:55:31:54:b4:b2:b3:83:34:06:44:d8:a3:10:
d5:6c:1d:55:44:17:bc:ad:3f:6c:0d:2f:2a:86:f4:
4a:16:69:1d:b0:06:69:cd:74:9a:fc:66:50:12:d4:
53:b3:39:3a:54:9b:65:68:cb:53:ed:d0:39:9e:98:
a7:10:5d:df:9a:a4:73:ee:42:40:db:30:60:47:cd:
db:e5:b7:c4:9a:d5:13:67:d5:22:34:37:12:91:8c:
af:1e:b1:a2:b2:f5:6d:60:3a:9a:3c:c3:fa:14:be:
59:26:e0:7b:d3:92:6c:32:bb:29:11:cf:55:4a:6a:
f5:fa:2e:9a:c4:71:77:20:63:f8:f5:27:ad:6b:e6:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D7:BB:AF:AD:72:2F:A1:6D:53:70:2A:D3:E6:66:EE:28:2E:1E:BF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_9e7r61yL6FtU3Aq0-Zm7iguHr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.201.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f5:ec:c6:4b:12:a5:ff:ca:2e:0d:66:98:b9:eb:dc:76:27:
3d:f6:b1:35:7b:ed:79:9a:59:40:b1:f3:f9:70:dd:81:bb:d6:
13:3c:42:93:91:c9:6a:1d:bf:95:b6:f4:8b:a3:c1:d7:48:e0:
21:a9:08:af:a7:f8:9a:ca:80:38:d1:8f:4b:22:cc:07:4b:74:
3e:60:63:7d:db:d9:b3:c3:37:b9:c4:18:7b:1c:36:47:a3:16:
10:c1:ba:51:86:12:4a:10:ed:27:88:fb:8e:86:f1:ed:3b:fd:
13:e7:87:36:67:4d:fe:d1:c3:67:21:f8:62:ad:9a:36:cc:85:
fc:0b:78:78:3b:fb:34:20:14:ff:4a:f0:4b:b9:0b:84:b6:17:
c7:0e:f2:8a:4e:e3:4e:fc:eb:81:3b:73:a4:d6:88:37:12:de:
ba:d8:67:4d:a0:c9:90:48:82:9e:c9:36:87:83:99:f6:07:b8:
61:bf:a6:79:ac:5b:9f:c6:b3:69:3c:70:3c:89:cb:92:10:e5:
7c:1b:2b:fb:e4:52:60:9d:c9:9a:e9:0a:bb:38:2c:ca:98:28:
c2:95:51:f4:26:46:54:42:c0:5b:b9:f1:82:e4:15:24:fd:92:
d9:b8:e7:3d:e5:88:3b:03:42:59:28:ef:5a:bf:82:7e:0c:08:
84:e3:12:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0ul0oHhvOiIchp0j0AbRolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwMzI3MDkxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmQ3YmJhZmFkNzIyZmExNmQ1MzcwMmFkM2U2NjZlZTI4MmUxZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAAWE0kNiPvZCncEne2Nm4bv5eCy
MqIQ+RMTbtvUdgl+to+4S17qKqHqY+oYTD4bgFGdgbRmOnhpK1qq3OLQVLtn7YES
6WdnsWtGwG6xN63csKdttlYah2Cx2D3EtSuc3L3K4s1/4edt/k2FW7LnDumnVCMO
ZjaurVUxVLSys4M0BkTYoxDVbB1VRBe8rT9sDS8qhvRKFmkdsAZpzXSa/GZQEtRT
szk6VJtlaMtT7dA5npinEF3fmqRz7kJA2zBgR83b5bfEmtUTZ9UiNDcSkYyvHrGi
svVtYDqaPMP6FL5ZJuB705JsMrspEc9VSmr1+i6axHF3IGP49Seta+Z3QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/Xu6+tci+hbVNwKtPmZu4oLh6/MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvXzllN3I2MXlMNkZ0VTNBcTAtWm03aWd1SHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwufJMA0G
CSqGSIb3DQEBCwUAA4IBAQCD9ezGSxKl/8ouDWaYuevcdic99rE1e+15mllAsfP5
cN2Bu9YTPEKTkclqHb+VtvSLo8HXSOAhqQivp/iayoA40Y9LIswHS3Q+YGN929mz
wze5xBh7HDZHoxYQwbpRhhJKEO0niPuOhvHtO/0T54c2Z03+0cNnIfhirZo2zIX8
C3h4O/s0IBT/SvBLuQuEthfHDvKKTuNO/OuBO3Ok1og3Et662GdNoMmQSIKeyTaH
g5n2B7hhv6Z5rFufxrNpPHA8icuSEOV8Gyv75FJgncma6Qq7OCzKmCjClVH0JkZU
QsBbufGC5BUk/ZLZuOc95Yg7A0JZKO9av4J+DAiE4xIZ
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:29 2026 by rpki-client