Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/o1VURFnzebPElX9awRUxwk1FIZk.roa
File: o1VURFnzebPElX9awRUxwk1FIZk.roa (raw, json)
Hash identifier: aqxWbAjPctIWPw1+wEEgS3czxCAV5CxgwJ/Pwj3lOkc=
Subject key identifier: A3:55:54:44:59:F3:79:B3:C4:95:7F:5A:C1:15:31:C2:4D:45:21:99
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1530468B1B16A6379D9AB040164BD0ECA
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/o1VURFnzebPElX9awRUxwk1FIZk.roa
Signing time: Mon 19 Oct 2026 07:16:00 +0000
ROA not before: Mon 19 Oct 2026 07:16:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 194.77.2.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
195.21.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:04:68:b1:b1:6a:63:79:d9:ab:04:01:64:bd:0e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 19 07:16:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a355544459f379b3c4957f5ac11531c24d452199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:c0:2a:5a:53:cc:19:f1:ee:f2:45:8d:98:
b1:82:11:53:cd:c2:3d:c1:76:8f:47:72:9a:a6:b3:
79:58:c2:e7:9d:17:09:cc:1e:8c:4f:e7:c7:80:5b:
bc:b2:7f:9e:22:31:cb:cb:b5:3b:97:29:1b:5a:9d:
ea:0c:99:2a:90:0b:52:de:e3:51:f5:ea:11:20:59:
26:b3:6a:03:0c:8f:6c:2a:a8:33:f7:d8:96:69:c6:
0c:b5:11:62:b5:e0:26:c7:3d:ec:a4:5e:d1:c7:08:
6c:07:53:ad:55:57:8d:39:fa:1a:cd:c8:ef:b9:47:
f6:58:5a:91:d6:16:27:e9:57:23:9f:b9:16:31:7d:
21:2c:57:05:ee:03:61:df:6e:fb:d9:3a:b2:33:31:
32:a5:c4:c0:94:38:fc:2d:ae:8c:a9:28:d3:12:41:
51:bc:e8:d3:27:07:44:78:77:9c:d3:5e:1a:a8:5f:
18:db:3d:24:ba:89:d6:5f:27:49:98:a6:76:89:19:
ab:76:d8:c2:b1:e6:30:b5:14:73:24:a5:fe:f9:ca:
3f:ab:49:c9:e8:78:fa:84:eb:2e:7f:a2:8b:6d:5c:
bb:65:99:e0:75:6b:62:7b:f3:ad:ce:c5:cb:f3:c3:
a4:68:30:c6:dc:56:c9:0f:30:de:5e:f4:84:49:18:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:54:44:59:F3:79:B3:C4:95:7F:5A:C1:15:31:C2:4D:45:21:99
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/o1VURFnzebPElX9awRUxwk1FIZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.2.0/24
194.77.228.0/24
195.21.134.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:b3:59:ee:60:dd:07:ee:8a:dc:ed:72:3b:15:84:7a:fb:50:
2b:6d:45:0e:d5:ec:9a:92:5b:34:fd:d1:ec:b2:ad:5b:28:ec:
05:02:64:c6:9c:72:46:e6:a8:aa:61:c0:50:da:f3:3b:da:53:
99:86:fa:5d:d2:0c:19:a3:09:75:15:81:2d:22:cc:1a:f8:91:
65:4c:60:bd:f1:91:6c:a8:17:8b:94:39:63:7e:60:c1:be:78:
87:94:74:bb:c0:4f:92:f7:a7:63:6b:db:50:77:b3:a0:7a:9a:
60:e7:fb:4d:3b:34:e6:12:53:44:cf:47:ad:20:59:e6:11:85:
98:fe:35:28:8f:bf:8e:11:70:a0:84:40:2f:af:03:e2:4f:df:
86:4d:25:97:92:8c:73:64:7b:f2:59:87:0e:07:a1:d9:9f:2d:
25:b3:61:d8:14:ae:b6:84:88:ab:a6:c5:e8:4e:17:f4:92:21:
d4:a9:a3:97:23:d0:bc:49:e5:69:d8:ee:b5:60:9f:e4:36:97:
e4:cb:f1:3b:f9:95:be:00:95:72:84:e7:17:13:33:a3:74:e6:
c2:8a:28:4e:6e:5d:bd:80:d7:a5:09:fa:75:d3:65:a2:53:3c:
85:7e:76:49:03:95:8a:0b:32:ff:ef:dc:03:79:97:01:c9:c9:
ac:cd:2a:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFTBGixsWpjedmrBAFkvQ7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDE5MDcxNjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzU1NTQ0NDU5ZjM3OWIzYzQ5NTdmNWFjMTE1MzFjMjRkNDUyMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfXAKlpTzBnx7vJFjZixghFTzcI9
wXaPR3KaprN5WMLnnRcJzB6MT+fHgFu8sn+eIjHLy7U7lykbWp3qDJkqkAtS3uNR
9eoRIFkms2oDDI9sKqgz99iWacYMtRFiteAmxz3spF7RxwhsB1OtVVeNOfoazcjv
uUf2WFqR1hYn6Vcjn7kWMX0hLFcF7gNh32772TqyMzEypcTAlDj8La6MqSjTEkFR
vOjTJwdEeHec014aqF8Y2z0kuonWXydJmKZ2iRmrdtjCseYwtRRzJKX++co/q0nJ
6Hj6hOsuf6KLbVy7ZZngdWtie/OtzsXL88OkaDDG3FbJDzDeXvSESRhykwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKNVVERZ83mzxJV/WsEVMcJNRSGZMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvbzFWVVJGbnplYlBFbFg5YXdSVXh3azFGSVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwk0CAwQA
wk3kAwQAwxWGMA0GCSqGSIb3DQEBCwUAA4IBAQDds1nuYN0H7orc7XI7FYR6+1Ar
bUUO1eyakls0/dHssq1bKOwFAmTGnHJG5qiqYcBQ2vM72lOZhvpd0gwZowl1FYEt
Iswa+JFlTGC98ZFsqBeLlDljfmDBvniHlHS7wE+S96dja9tQd7Ogeppg5/tNOzTm
ElNEz0etIFnmEYWY/jUoj7+OEXCghEAvrwPiT9+GTSWXkoxzZHvyWYcOB6HZny0l
s2HYFK62hIirpsXoThf0kiHUqaOXI9C8SeVp2O61YJ/kNpfky/E7+ZW+AJVyhOcX
EzOjdObCiihObl29gNelCfp102WiUzyFfnZJA5WKCzL/79wDeZcBycmszSpB
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:24:20 2026 by rpki-client