Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3ZXY4mvIwf219hqDnxLTqpprwXk.roa
File: 3ZXY4mvIwf219hqDnxLTqpprwXk.roa (raw, json)
Hash identifier: SUBAxzNSOsowb1K32ZVuqd0dinf76qZQCPNuviNTkyU=
Subject key identifier: DD:95:D8:E2:6B:C8:C1:FD:B5:F6:1A:83:9F:12:D3:AA:9A:6B:C1:79
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16DD56E72EDE4818AC3178F4D550B8656
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3ZXY4mvIwf219hqDnxLTqpprwXk.roa
Signing time: Sat 24 Oct 2026 12:14:26 +0000
ROA not before: Sat 24 Oct 2026 12:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 194.77.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:d5:6e:72:ed:e4:81:8a:c3:17:8f:4d:55:0b:86:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 24 12:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd95d8e26bc8c1fdb5f61a839f12d3aa9a6bc179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:c5:9f:f6:57:a8:bc:10:3b:21:60:68:4e:
b5:4a:52:7b:f9:c4:a6:ee:92:2b:0a:b6:ba:87:7e:
22:c6:3a:47:87:9c:62:09:7c:b3:5f:d8:9c:83:0f:
85:3e:7b:cd:89:90:a4:29:97:6e:18:df:a1:2a:7c:
78:37:3f:2c:e3:db:cc:9b:6b:bd:70:66:ec:ac:bf:
41:62:90:a9:7c:4f:ce:71:ad:c3:5c:ff:85:c8:45:
ae:0c:aa:ac:7a:7e:82:10:ba:8d:94:fe:5c:06:6a:
91:5d:18:2d:93:b2:33:c3:43:73:2d:4e:a6:17:ac:
fa:de:93:b3:c4:36:4a:c1:27:57:32:9d:db:22:7c:
8e:29:5d:e9:3d:5a:50:0d:c5:04:5d:6b:3c:5f:16:
c8:da:c7:58:50:0e:d6:c9:87:ca:2f:80:03:12:6d:
1b:66:0c:b7:4d:6d:e3:06:04:65:3c:18:01:3b:18:
31:75:8c:49:88:ec:48:d6:ae:34:a2:18:9d:f3:81:
d8:f9:35:ee:27:c7:38:a2:b6:e2:e3:af:19:2a:b1:
c9:9c:c8:d4:5b:5c:42:22:25:75:da:75:60:e9:fb:
b2:87:60:c8:6a:eb:3c:24:a0:27:71:a1:21:e6:9c:
85:ae:64:81:a1:7f:64:3b:1f:bb:94:78:b4:64:a5:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:D8:E2:6B:C8:C1:FD:B5:F6:1A:83:9F:12:D3:AA:9A:6B:C1:79
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3ZXY4mvIwf219hqDnxLTqpprwXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.62.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5b:2e:32:ca:e5:ed:0f:ab:31:89:56:b4:5e:1b:ff:b8:37:
97:cf:a6:04:09:71:09:f6:85:5a:f4:ee:bc:e6:03:a5:07:67:
4a:7d:e0:85:12:f1:e8:61:bc:b9:12:10:74:47:78:47:54:8b:
ae:85:e3:cf:16:43:a2:e6:a9:07:ac:f4:6d:d7:43:7b:c6:5f:
c8:00:53:38:9b:63:bb:6a:a0:72:6e:1e:1c:d2:0c:18:ff:2f:
ed:24:47:4c:6b:4f:dc:99:ab:0c:d0:d5:90:fa:a0:8e:64:b4:
da:ae:bd:ea:b2:71:5a:93:f1:90:ff:c4:8c:c2:af:d4:b0:6e:
62:7e:51:e9:0e:29:94:5c:39:3b:ca:e4:71:21:60:c2:51:80:
f1:be:d7:b2:10:1c:8b:0e:51:f2:1c:5a:36:5b:09:17:97:03:
18:d8:8c:e7:41:74:1a:bd:ae:bd:e4:f5:10:2f:c1:ec:7e:3c:
b7:9a:58:c3:c6:2c:fd:cd:ea:4a:f7:38:c5:0c:50:46:90:bd:
8c:5f:84:41:95:b7:83:8b:25:37:91:8e:1d:7d:1b:0d:0d:79:
78:af:29:95:c0:4b:45:91:3a:7b:e2:ec:16:c9:cf:cd:9d:b4:
44:e8:48:2b:9a:ab:8b:24:90:1e:77:f2:96:19:a2:70:3f:20:
07:ca:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:12 2026 by rpki-client