Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xv7fe7kJ_F51gOUwq-eLQFGogaw.roa
File: xv7fe7kJ_F51gOUwq-eLQFGogaw.roa (raw, json)
Hash identifier: uFSRUTPVekK5qH0T/+20roz0zcDVEMc3xAG0vEc8b0s=
Subject key identifier: C6:FE:DF:7B:B9:09:FC:5E:75:80:E5:30:AB:E7:8B:40:51:A8:81:AC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BD8690DC859F298FA95E61EDEA0FBB3B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xv7fe7kJ_F51gOUwq-eLQFGogaw.roa
Signing time: Sun 20 Sep 2026 06:35:07 +0000
ROA not before: Sun 20 Sep 2026 06:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 194.77.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:86:90:dc:85:9f:29:8f:a9:5e:61:ed:ea:0f:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 06:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6fedf7bb909fc5e7580e530abe78b4051a881ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:39:ae:35:f6:8b:6b:ef:03:10:4f:4a:b5:
0d:f7:0f:c7:45:28:be:c8:ce:0b:dd:8b:d3:e5:b4:
e0:55:23:a2:bd:a9:01:d8:70:9e:78:a1:2a:c9:89:
ac:13:a3:74:44:cb:28:f9:f8:5e:17:48:6a:a6:70:
ad:6d:8c:20:fa:dc:fd:1e:6a:c0:b8:53:cd:44:a3:
6b:8b:03:35:c8:8b:94:84:a4:09:8e:30:fa:4c:8e:
92:d2:0c:36:3e:ac:46:e9:0b:fe:4f:d6:e7:e2:45:
fe:38:5a:47:05:6f:8e:77:e2:24:0e:45:9b:33:a9:
2a:6a:67:9f:28:ba:86:dd:3a:29:37:b8:cc:9c:fd:
21:59:35:05:32:63:08:36:31:a4:0c:0c:57:0e:6d:
ce:3d:23:af:9c:74:f9:2a:e2:45:01:88:d2:fc:08:
c5:62:82:ee:d6:e9:9b:d5:79:83:20:d7:8d:9a:30:
97:97:d7:a7:dd:50:ac:dc:63:73:56:0f:33:26:bd:
51:a1:67:3a:e8:8c:f3:82:8b:38:59:0d:04:7f:2c:
1f:74:99:e8:05:ee:ca:85:f9:db:0b:5b:c6:11:b1:
3a:1a:23:28:e0:cc:e5:10:78:72:78:0a:0d:4b:e5:
b9:88:7d:dc:de:dc:c3:65:15:12:9c:a1:55:50:be:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:DF:7B:B9:09:FC:5E:75:80:E5:30:AB:E7:8B:40:51:A8:81:AC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xv7fe7kJ_F51gOUwq-eLQFGogaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.187.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d1:50:33:6e:f4:95:c7:26:c1:d7:fd:59:a2:7a:86:e0:4d:
f7:73:c7:b1:2b:a7:0b:e5:68:e6:71:32:dc:d8:7d:58:18:a9:
c1:8f:29:62:78:63:b4:4b:00:c1:ac:ba:59:32:f9:0c:5f:a1:
83:db:b0:c5:bf:9c:f7:a1:67:0c:bb:99:1a:cc:27:46:3e:3e:
da:f6:f6:74:fb:f0:65:29:ab:6e:b2:ca:d3:f7:bd:a8:88:d6:
d9:dd:69:93:6b:51:c6:b0:da:4c:69:ba:4a:18:ba:22:99:a2:
70:60:82:22:5c:a2:ab:45:81:ca:34:b3:e5:cf:7c:12:5c:a8:
d9:3f:4e:1e:84:24:8a:d6:64:1b:f1:d1:bc:64:d5:1f:57:78:
36:0a:10:6c:70:59:d7:0e:e2:3a:09:8b:ad:8c:49:13:fe:eb:
fc:72:c6:b4:8d:c8:05:4c:55:fe:b0:fc:0a:4b:7b:63:6c:5c:
7e:e5:31:69:6b:72:cf:2f:9d:76:97:a1:a5:0e:32:55:c8:64:
8a:1d:eb:f1:2d:53:31:bd:76:b6:a2:b9:8c:ce:99:36:1d:e1:
25:ca:0d:38:19:2a:c3:5b:74:67:ef:5c:3b:2a:d6:c1:36:4a:
8e:05:4f:20:09:b6:9a:50:b8:ce:64:51:37:39:8c:e5:93:dc:
4d:85:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:25 2026 by rpki-client