Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uIrFMZqYZNoBL6rfvEypxhZmlIw.roa
File: uIrFMZqYZNoBL6rfvEypxhZmlIw.roa (raw, json)
Hash identifier: b+x0zBSrPD+vwyomO/LZRAiHLvIiHrCfPKVBQT8y5Gk=
Subject key identifier: B8:8A:C5:31:9A:98:64:DA:01:2F:AA:DF:BC:4C:A9:C6:16:66:94:8C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DA052E86C691E1D0CBA46FA90340E59E1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uIrFMZqYZNoBL6rfvEypxhZmlIw.roa
Signing time: Sat 18 Apr 2026 11:21:21 +0000
ROA not before: Sat 18 Apr 2026 11:21:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 194.231.135.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:52:e8:6c:69:1e:1d:0c:ba:46:fa:90:34:0e:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 18 11:21:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b88ac5319a9864da012faadfbc4ca9c61666948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:3e:62:43:c4:9d:22:2e:6f:20:08:34:58:
07:10:de:f8:b9:24:59:de:6c:72:55:65:ba:03:b3:
05:25:1a:d5:29:45:f7:88:f6:42:7f:c2:2b:df:d0:
cb:8d:27:90:d5:b3:5e:e8:b1:80:70:68:9c:19:89:
47:cd:4c:cf:0c:28:8e:d0:e6:66:03:ea:27:50:28:
c0:ce:0a:9f:52:7a:c3:b4:1f:f6:b1:ef:e7:a7:53:
ba:8d:67:7b:7f:dd:45:ca:22:40:10:e0:40:8d:39:
7f:b8:7e:27:c5:1a:02:58:cf:1b:6b:8c:ca:74:0d:
c0:88:33:ee:25:60:38:89:60:55:00:2d:e4:c8:09:
56:51:f1:e8:4a:c0:c6:10:29:70:7c:d9:6f:fd:70:
90:ff:ad:63:0d:f9:52:78:50:04:74:e1:ae:76:7e:
73:45:30:2d:62:b9:39:72:0c:a2:88:ad:87:24:7f:
69:57:57:43:62:48:f2:e9:dd:a9:fb:2c:9a:ce:42:
e5:47:73:41:50:b0:e7:e4:f4:38:31:b7:8b:8f:c5:
98:62:d4:74:13:3d:b0:e8:de:84:15:83:b9:ed:63:
6c:f7:c6:f3:3c:61:88:02:64:37:8b:da:cf:db:d0:
b6:fd:5d:e4:70:b2:29:c4:c4:2d:6c:31:92:fa:3a:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:C5:31:9A:98:64:DA:01:2F:AA:DF:BC:4C:A9:C6:16:66:94:8C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uIrFMZqYZNoBL6rfvEypxhZmlIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.135.0/24
194.231.138.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0a:85:ce:0e:c2:13:7e:c8:96:d8:1d:69:f8:69:26:cd:70:
e4:cc:54:73:47:7c:2f:be:8d:26:b3:dc:27:78:d7:b7:f0:af:
cf:00:5e:45:a5:b9:85:9f:bd:68:a1:dd:22:7c:2b:ba:9c:f2:
92:f2:11:ee:ad:74:ed:05:10:f1:a9:29:15:bf:c7:ca:f1:9f:
3a:c0:77:4c:69:4e:e9:3b:d8:f3:99:a5:91:f4:bd:99:62:47:
0c:de:64:a3:56:b6:a9:09:48:d7:50:8c:29:1b:06:47:44:e7:
09:0f:de:11:33:6d:92:cc:7e:b6:b5:a7:37:36:06:26:9f:8a:
7f:66:50:22:0b:ba:22:85:ab:a0:40:b5:8a:f7:66:8b:65:49:
24:63:77:7f:28:44:c1:ee:65:35:7d:f7:97:b2:f5:07:f7:8f:
ab:5d:b7:bf:df:1e:35:d9:df:00:1b:93:f3:7e:f3:94:dd:57:
25:71:89:59:1d:9b:68:f1:57:69:7a:bd:19:07:90:4f:0b:1d:
4d:75:81:66:0d:ed:a3:0e:68:50:fc:49:3c:68:09:42:a7:dc:
d0:0f:65:21:ca:7f:b8:2a:cf:8f:3f:56:2e:b8:4e:c2:71:b9:
d9:34:f5:38:bd:10:c7:34:46:3e:68:41:3d:1b:36:63:fa:3a:
02:3e:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:31 2026 by rpki-client