Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/16vkRPYscvtSxH9mZxpEXdEukn8.roa
File: 16vkRPYscvtSxH9mZxpEXdEukn8.roa (raw, json)
Hash identifier: K2DvIkjf7LD9z36qduoYp3AbheafOoeYFeDT5SdLRow=
Subject key identifier: D7:AB:E4:44:F6:2C:72:FB:52:C4:7F:66:67:1A:44:5D:D1:2E:92:7F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019CBD9111E5A28786B6979BF0F8360580D9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/16vkRPYscvtSxH9mZxpEXdEukn8.roa
Signing time: Thu 05 Mar 2026 10:35:26 +0000
ROA not before: Thu 05 Mar 2026 10:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:91:11:e5:a2:87:86:b6:97:9b:f0:f8:36:05:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 5 10:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7abe444f62c72fb52c47f66671a445dd12e927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:6d:b1:3b:8c:cd:02:2a:df:70:0d:3c:a8:
ba:aa:46:5b:4f:39:a3:43:b4:60:db:1d:0c:7f:70:
4d:a3:99:30:f7:08:39:a2:c6:9f:8a:7f:e9:a2:f9:
e4:96:30:5e:b4:90:55:eb:95:a0:84:f2:61:4e:66:
e8:85:33:2d:12:ac:51:73:33:6d:23:07:52:b4:61:
56:53:86:bc:78:ed:12:dd:b1:28:bb:09:a8:86:73:
e7:c3:62:7e:e1:5d:dd:f5:dd:ed:fb:65:d9:81:52:
9a:5a:4a:8f:91:bc:57:6d:19:00:f4:c1:21:78:49:
6d:3f:0c:ee:2c:98:5d:78:72:fa:ef:52:0a:74:9d:
c3:96:a0:eb:90:49:bb:24:9c:a4:80:68:9b:fd:ad:
4c:94:d4:85:28:ac:48:dd:40:fb:69:16:3b:52:07:
98:c2:df:09:6f:7b:11:77:19:ed:63:66:3f:cb:f2:
95:d2:f3:af:bb:62:99:58:82:e7:1a:47:34:d2:c8:
05:cd:c1:ee:8c:7c:80:d8:f0:4b:57:51:0c:fa:4a:
5c:a3:55:37:2d:fe:6a:10:6e:34:db:fd:d6:ca:24:
0e:7f:86:95:74:4f:40:ff:88:a1:6a:a8:d4:3a:81:
e8:a3:29:ba:5b:e9:d8:2b:7d:9b:8d:91:83:9f:52:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:E4:44:F6:2C:72:FB:52:C4:7F:66:67:1A:44:5D:D1:2E:92:7F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/16vkRPYscvtSxH9mZxpEXdEukn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.132.0-194.231.139.255
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:5c:1c:0a:a1:7a:fb:1d:c2:dc:fe:12:14:d7:54:01:66:d2:
33:d7:d5:5c:a4:37:e7:0f:8f:91:11:92:4f:41:c8:92:2e:f9:
13:ea:de:ac:38:62:55:81:22:a6:1d:4f:27:0b:46:f8:d8:fc:
b1:3e:e7:13:01:09:7f:69:46:bd:bd:2a:52:38:15:2c:16:19:
f6:17:75:ec:20:b6:94:c4:79:19:7f:5b:d4:7a:19:30:b0:91:
e8:7f:3d:81:56:55:2f:83:b6:c8:1a:26:2f:8e:1c:f7:fd:da:
15:94:65:b4:e7:af:d9:91:dc:12:c7:1d:51:4a:38:94:34:36:
0b:e6:66:7d:a4:76:35:b2:d2:98:41:bf:44:b9:32:10:2d:0a:
f0:4a:92:25:38:b9:8d:8f:39:a1:3b:8f:2c:23:3f:c5:fa:ef:
9f:eb:cf:ff:44:e1:03:d9:40:82:25:71:76:46:7e:bf:24:a4:
55:ee:3b:2a:76:3c:ef:34:90:74:f1:9b:ed:c3:0d:37:1a:5e:
f0:b1:69:46:18:cf:2d:11:8b:bd:75:69:ac:be:6f:05:a7:68:
40:13:c0:4b:2e:41:66:52:ff:01:ef:d2:1f:0a:b9:cc:82:90:
6c:56:85:ae:fc:5f:e7:8b:a1:fe:d1:5c:f9:4f:86:f1:3f:86:
21:66:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:35:14 2026 by rpki-client