Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0fy4faeSU55Se_nn0k3BghjGtdo.roa
File: 0fy4faeSU55Se_nn0k3BghjGtdo.roa (raw, json)
Hash identifier: euo/nVSNDavOQL/s+agN8BBompJ9nqjHjCwL/+XlWHY=
Subject key identifier: D1:FC:B8:7D:A7:92:53:9E:52:7B:F9:E7:D2:4D:C1:82:18:C6:B5:DA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FCD1EAA9A7CDE29E3D4B0203105E7955E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0fy4faeSU55Se_nn0k3BghjGtdo.roa
Signing time: Tue 04 Aug 2026 14:12:46 +0000
ROA not before: Tue 04 Aug 2026 14:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42960
IP address blocks: 195.21.155.0/24 maxlen: 24
212.189.21.0/24 maxlen: 24
212.189.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:1e:aa:9a:7c:de:29:e3:d4:b0:20:31:05:e7:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 4 14:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1fcb87da792539e527bf9e7d24dc18218c6b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:91:d8:b5:9c:17:7e:19:a0:3f:f6:f1:a7:
bf:c9:5b:f3:f1:9e:79:40:89:bd:6d:aa:b7:8a:cf:
b6:43:46:08:d5:6e:23:87:7c:7a:2c:5a:08:b6:3c:
b1:c4:f8:d2:62:4f:40:16:56:33:73:a5:2d:85:b6:
9e:77:6e:5e:e3:41:62:b4:c2:cf:ca:10:e7:d8:2d:
c8:a1:8a:c7:f0:68:9a:19:70:96:83:d3:5c:f3:0a:
9c:a7:ad:16:71:27:5f:21:61:18:a8:43:6c:7f:c6:
32:6b:eb:20:86:02:4d:be:fa:ea:23:83:fb:c1:cf:
f9:e0:ca:89:a2:aa:67:d3:95:00:64:54:2a:49:86:
77:12:a8:9e:19:6e:01:b9:94:f3:ab:00:5d:b7:16:
e5:84:96:22:1e:e7:86:14:a3:dc:d3:8d:52:ec:dd:
ff:6b:83:e9:5b:8c:08:28:9a:30:c0:e6:41:2b:ad:
85:c6:db:a1:ba:bb:49:ce:70:6e:27:e0:1e:ae:93:
bb:3d:80:4f:05:23:e3:dd:7a:92:3c:29:d5:3d:f7:
45:77:e0:ce:f1:b1:25:8a:1c:5d:d6:04:e0:26:7d:
1c:b7:64:af:ec:66:fb:5e:92:ec:a8:02:d7:3a:2e:
43:ae:4f:62:bc:73:0e:88:e2:bf:83:fc:62:21:85:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:B8:7D:A7:92:53:9E:52:7B:F9:E7:D2:4D:C1:82:18:C6:B5:DA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0fy4faeSU55Se_nn0k3BghjGtdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.155.0/24
212.189.21.0/24
212.189.106.0/23
Signature Algorithm: sha256WithRSAEncryption
09:34:50:22:24:7f:0b:45:fa:33:c0:35:f6:ea:a5:21:0d:16:
87:5f:3f:51:a1:bd:fc:fd:f8:e1:51:85:a0:66:5e:96:1d:03:
76:d4:f5:99:69:49:df:1f:90:ee:85:65:6c:1b:03:ef:b3:cc:
7f:7a:58:59:42:93:df:75:50:09:18:3b:d1:8f:db:73:eb:09:
7b:1a:4e:eb:6b:66:1b:44:89:29:4c:4b:d2:65:04:01:b7:ef:
6b:03:22:db:65:33:7d:42:97:a4:01:4f:f5:8a:75:b9:b5:a6:
29:6c:d9:8f:0a:62:4e:66:31:b5:e0:bb:02:13:72:f8:58:1f:
f9:d5:ae:61:8f:e6:c2:2b:33:c1:09:97:0f:0a:fe:cf:29:b8:
63:cf:36:b4:f9:05:0b:90:9d:61:e8:2e:e0:0c:35:46:c8:68:
6d:66:f3:e0:f4:21:18:26:62:67:6b:3b:47:71:06:7b:a8:b8:
4b:14:30:a1:4b:e9:da:bb:37:cd:e8:5e:99:52:eb:12:c2:da:
6d:79:96:14:50:a2:cb:3a:56:b7:f3:44:5b:0d:9e:39:ca:4f:
ed:e9:d1:6d:c2:42:b3:3b:61:66:d6:26:8e:a1:3d:06:be:fe:
1a:30:68:7e:27:e1:36:66:a1:73:b9:c2:53:f3:92:f0:da:9b:
82:b1:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:19 2026 by rpki-client