Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ahJjGhO87-w7ru-F7gNkINFVw2A.roa
File: ahJjGhO87-w7ru-F7gNkINFVw2A.roa (raw, json)
Hash identifier: xy8RdWcutIIHafYlv9yVJS1A9LNyXODIeQ6LpdtY7nI=
Subject key identifier: 6A:12:63:1A:13:BC:EF:EC:3B:AE:EF:85:EE:03:64:20:D1:55:C3:60
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A091619A696C1B05181AE4F35DAF995B49
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ahJjGhO87-w7ru-F7gNkINFVw2A.roa
Signing time: Fri 11 Sep 2026 16:51:27 +0000
ROA not before: Fri 11 Sep 2026 16:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206675
IP address blocks: 194.77.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:61:9a:69:6c:1b:05:18:1a:e4:f3:5d:af:99:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 16:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a12631a13bcefec3baeef85ee036420d155c360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:17:23:b8:5a:84:62:48:81:f9:05:6d:f3:
99:02:b8:da:a5:fd:7c:36:34:3c:71:cc:ed:f2:e8:
02:39:31:5d:ad:ba:02:a7:25:59:d2:eb:7c:9b:62:
de:1a:95:00:86:ec:d4:2f:54:0d:5d:d7:ce:78:3a:
85:1d:fb:c0:58:b8:b3:e1:1e:3b:c8:3c:51:d9:6d:
d5:d3:32:d1:4e:c2:3e:0a:cd:4b:86:3a:3a:b9:84:
db:20:3c:81:a8:6e:45:d0:f9:c4:39:fa:d1:f6:7e:
73:ca:92:59:cd:5a:d1:c1:47:f0:93:ea:45:ad:ad:
f1:d5:3b:b2:32:f2:28:e0:2a:f0:f0:ac:14:aa:3e:
cf:37:60:80:05:86:29:71:a4:df:97:7a:07:72:06:
29:5f:e7:8d:c1:c1:3e:2d:b4:93:c5:5a:bb:f0:43:
38:91:3a:5c:4b:c6:2a:05:89:eb:e5:e0:ab:25:60:
32:57:3c:37:f2:09:13:e1:5f:81:2a:13:40:a0:55:
c8:e9:45:14:f0:81:94:15:36:49:59:a0:ec:da:5f:
78:c3:42:91:17:82:90:14:8e:78:24:dc:fd:fe:c3:
6a:d7:72:5c:62:3e:2e:c8:85:13:27:d1:8b:6b:28:
be:63:4b:19:7b:fb:eb:8e:b1:d3:fb:a2:10:90:1a:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:63:1A:13:BC:EF:EC:3B:AE:EF:85:EE:03:64:20:D1:55:C3:60
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ahJjGhO87-w7ru-F7gNkINFVw2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.76.0/23
Signature Algorithm: sha256WithRSAEncryption
02:b2:fa:eb:51:d0:78:3c:26:a9:6a:09:22:36:cd:be:01:a0:
16:57:d0:7a:cf:1e:6a:95:50:8c:e9:53:f0:06:b1:10:ae:61:
8f:c2:d5:b4:b6:f3:37:f6:2c:8f:c9:91:1d:aa:39:94:13:32:
da:0a:c8:06:03:66:bc:27:de:9b:f8:fb:75:80:a4:8c:6a:be:
9c:7e:ef:85:16:ae:90:3c:aa:d0:b3:98:b1:af:92:15:72:ed:
a8:ef:2d:e0:09:ee:17:7e:66:a4:b8:a7:dd:12:97:96:49:b0:
ae:63:f3:2c:d1:53:92:b4:2d:78:e4:d1:57:53:23:d3:aa:01:
18:0d:a7:34:ef:13:d0:ae:28:c6:f3:b1:3b:c2:08:40:1e:0f:
97:be:50:cf:7d:18:b6:be:28:4e:77:f4:9b:2e:0e:30:5c:e3:
14:5a:84:ef:b5:4b:30:52:cf:96:25:e7:ca:72:db:16:9f:33:
5d:ac:69:83:2d:9b:c8:ac:54:8e:34:58:14:58:c0:55:9b:ca:
9b:9e:02:82:89:14:7b:72:b1:81:14:40:7a:82:98:70:89:b9:
fa:c7:dd:00:db:25:70:df:a0:54:66:6b:6d:29:0a:74:20:4f:
98:d3:b5:50:55:39:05:65:30:3f:d4:53:7b:7f:53:f9:8c:52:
1e:55:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:51:03 2026 by rpki-client