Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/042Jyi-yEWd6aUKUz42vA9Ch80Q.roa
File: 042Jyi-yEWd6aUKUz42vA9Ch80Q.roa (raw, json)
Hash identifier: tmyvB2PosfjwZkFTItOSiBnC56BC2+za+jPAPvDOIEw=
Subject key identifier: D3:8D:89:CA:2F:B2:11:67:7A:69:42:94:CF:8D:AF:03:D0:A1:F3:44
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A17EFE7A2B40E0E5570166EC42D99805AF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/042Jyi-yEWd6aUKUz42vA9Ch80Q.roa
Signing time: Tue 27 Oct 2026 20:12:48 +0000
ROA not before: Tue 27 Oct 2026 20:12:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219084
IP address blocks: 212.189.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:fe:7a:2b:40:e0:e5:57:01:66:ec:42:d9:98:05:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 27 20:12:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d38d89ca2fb211677a694294cf8daf03d0a1f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:f1:82:ee:9d:39:c2:a7:4e:51:6d:4d:79:
39:13:4c:5f:27:05:68:d4:13:01:0e:f9:c2:e6:98:
03:f7:8b:6a:ce:6e:ec:f8:ca:db:40:48:fd:3b:87:
41:85:54:6d:bc:ee:de:75:bd:b5:bc:33:a1:d7:36:
34:85:b0:81:c6:7e:64:b3:52:2b:21:e3:30:09:93:
37:51:7c:63:be:f6:88:85:dc:1b:65:36:88:5d:8d:
d2:72:5a:74:c1:33:90:d4:3f:05:ba:65:52:21:95:
8b:48:dc:45:8f:29:95:01:eb:85:77:07:f6:52:07:
f2:10:58:bb:88:4e:45:8a:05:a8:3f:0b:eb:6f:32:
f6:ef:61:7a:2f:6c:1d:70:63:74:4a:10:f4:76:21:
f1:cd:10:47:83:ba:df:cd:9b:73:4b:db:ea:62:74:
2d:bd:94:6f:95:b6:02:b1:ed:67:58:f4:0f:18:28:
2f:cb:75:a4:87:5e:4f:21:a3:98:2c:cd:d9:45:23:
f3:00:a1:27:26:4d:7f:75:0b:dd:bf:6d:e0:a6:40:
3f:6c:0e:45:6f:9a:5a:d9:f9:d4:78:36:c4:43:56:
0f:97:d5:25:30:c2:43:52:ff:f7:c9:52:0e:59:4e:
ae:69:e6:c2:2d:88:e1:32:01:87:44:99:17:e8:b0:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:89:CA:2F:B2:11:67:7A:69:42:94:CF:8D:AF:03:D0:A1:F3:44
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/042Jyi-yEWd6aUKUz42vA9Ch80Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6f:d8:cd:38:50:4a:3e:2d:5d:7d:01:20:06:05:b5:72:07:
f5:26:b7:d1:f6:1d:9b:79:3a:9a:a6:93:2a:c8:bc:51:cc:e4:
2a:d0:e2:ae:60:1d:dc:4a:3d:4f:bb:b1:02:ad:74:fe:9c:2e:
c8:be:6c:7d:52:58:69:ea:89:45:52:23:50:cb:fd:38:44:0f:
5b:c6:64:ae:dd:f5:b9:b5:0a:64:03:9f:1c:d3:93:dc:65:d8:
b8:11:5f:c3:7a:4f:b1:6c:f9:5f:c2:2b:98:05:13:0f:51:b8:
45:e7:97:0c:c8:f9:eb:3e:6c:04:c0:96:55:17:95:ec:ce:1a:
be:ac:3c:b9:b7:45:a1:e3:41:20:5f:eb:e3:89:6a:99:98:c9:
c3:e7:f3:fb:8d:9a:be:3d:74:ef:92:6f:ab:ce:95:d0:4b:a4:
e6:4d:01:9a:73:71:87:bf:72:b9:79:ff:67:f8:16:8c:6f:c4:
ac:5d:48:9c:d6:cf:37:27:36:61:9f:fe:db:75:a7:14:65:01:
f7:4d:8e:9a:04:97:f6:12:8a:5e:9f:1f:84:ba:a5:21:a0:aa:
c7:3c:8d:bb:c8:d0:ce:a5:01:bd:19:a4:b6:85:7f:44:3f:3c:
2f:f5:83:43:0a:66:e5:fd:77:75:e6:05:ab:4d:1d:ee:04:c4:
ab:fc:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:47:05 2026 by rpki-client