Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3AnSVbsfx-gaafWZg3yDIjBQZDE.roa
File: 3AnSVbsfx-gaafWZg3yDIjBQZDE.roa (raw, json)
Hash identifier: AGhwh3Xiu//7caFPXqguaJ6vYY/9Oj1mc48JywS/iZA=
Subject key identifier: DC:09:D2:55:BB:1F:C7:E8:1A:69:F5:99:83:7C:83:22:30:50:64:31
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DC4565C6F83F912C6EEC1D5E40B6785A0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3AnSVbsfx-gaafWZg3yDIjBQZDE.roa
Signing time: Sat 25 Apr 2026 11:11:27 +0000
ROA not before: Sat 25 Apr 2026 11:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 194.231.129.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.153.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:56:5c:6f:83:f9:12:c6:ee:c1:d5:e4:0b:67:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 25 11:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc09d255bb1fc7e81a69f599837c832230506431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:c7:c9:68:b5:cd:9e:b1:85:a4:11:1e:6a:
19:6d:ba:d0:cf:56:9a:de:76:dc:c2:69:d4:f1:19:
e2:26:17:08:d2:22:f2:44:1a:c2:21:ed:79:c8:a6:
08:13:c9:da:a5:35:7d:8c:c8:9e:b9:42:2a:47:04:
aa:58:f0:25:07:0b:ef:b8:03:84:43:91:b4:a7:c7:
06:63:9e:4b:de:45:b9:20:e8:fb:2b:4d:81:f8:d3:
9d:9d:81:ac:1b:91:e5:73:bd:b2:b0:a1:2c:96:7b:
ca:96:22:8e:e7:d4:9a:a1:0d:1e:80:c0:6a:04:84:
51:ca:52:0c:92:7d:28:89:ca:59:0d:08:83:aa:dc:
b3:75:27:9e:d7:b1:56:1a:75:15:55:ce:2b:25:ca:
16:85:0e:3c:b7:38:33:48:71:68:64:b3:71:4f:43:
d3:ac:01:5f:49:40:48:b8:38:dc:64:d5:70:ad:da:
c2:ec:7d:91:39:c2:b6:10:1c:82:bf:6f:8f:f5:e7:
52:df:c6:b9:9d:90:c9:ec:95:14:33:79:57:6f:eb:
42:11:3a:e4:13:10:c1:97:54:f5:f6:6c:08:65:41:
4e:7a:b5:5f:c3:9e:45:4b:7a:53:15:e6:38:bd:c7:
8a:af:c4:df:28:d1:bc:cb:fd:3a:f9:09:0b:e6:da:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:D2:55:BB:1F:C7:E8:1A:69:F5:99:83:7C:83:22:30:50:64:31
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3AnSVbsfx-gaafWZg3yDIjBQZDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.129.0/24
194.231.134.0/24
194.231.153.0/24
194.231.157.0-194.231.158.255
Signature Algorithm: sha256WithRSAEncryption
e6:cb:b5:4b:84:9f:09:50:be:41:d8:24:05:b4:8d:bf:04:f7:
40:98:21:35:0d:62:f3:a3:d6:35:fc:c8:71:de:81:ad:11:1d:
7e:38:f0:4a:81:01:a8:2e:e7:cd:a6:86:3a:29:2d:78:57:cc:
68:16:71:eb:7a:10:07:5b:9d:4c:ed:89:81:3c:98:fe:d4:e2:
b4:c1:44:40:5a:2e:ea:55:7d:5c:6c:d3:33:17:cf:1d:dd:71:
2a:7b:98:58:85:08:53:41:e5:d2:7f:1b:18:2c:0a:6a:3b:3a:
55:8e:eb:2f:c9:0f:9b:1f:7a:e3:b9:53:2c:87:d9:d4:71:98:
f4:3b:76:8b:78:04:8a:f6:8b:a8:dd:21:83:6b:ee:bc:d0:ad:
18:1e:63:82:4b:12:b0:e2:a5:27:19:3d:4c:e2:cc:98:69:2d:
92:45:a8:3b:30:3c:6a:a0:d8:da:a9:4e:de:64:e9:2b:22:21:
d2:87:5e:f4:d4:6d:22:f8:50:ee:31:86:84:26:b7:a9:e9:c2:
d2:41:16:e3:5d:41:90:15:27:5b:fe:97:b9:73:c3:e1:72:ab:
75:34:ea:3a:7b:e1:c5:3c:44:14:09:dc:6c:81:78:5e:5d:77:
17:ac:49:7d:bf:1d:e3:c3:4f:26:67:94:5d:33:ab:e9:cd:9f:
c9:c3:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:20:48 2026 by rpki-client