Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3fKubfWKEoXgjmH23RrrYV7b5xQ.roa
File: 3fKubfWKEoXgjmH23RrrYV7b5xQ.roa (raw, json)
Hash identifier: Eelq+JOegNH4YKETuC+qJ+9JRtPvjhORK9M9o2OnZFQ=
Subject key identifier: DD:F2:AE:6D:F5:8A:12:85:E0:8E:61:F6:DD:1A:EB:61:5E:DB:E7:14
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EC72D40028A6909A8D371E30617ECDE1F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3fKubfWKEoXgjmH23RrrYV7b5xQ.roa
Signing time: Sun 14 Jun 2026 17:28:12 +0000
ROA not before: Sun 14 Jun 2026 17:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 77.67.126.0/23 maxlen: 24
135.196.155.0/24 maxlen: 24
135.196.166.0/24 maxlen: 24
135.196.236.0/24 maxlen: 24
135.196.244.0/24 maxlen: 24
135.196.248.0/24 maxlen: 24
135.196.252.0/24 maxlen: 24
135.196.254.0/24 maxlen: 24
194.231.144.0/22 maxlen: 24
195.86.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:2d:40:02:8a:69:09:a8:d3:71:e3:06:17:ec:de:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 14 17:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddf2ae6df58a1285e08e61f6dd1aeb615edbe714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:5e:1c:af:b1:31:81:c0:3e:dc:4d:94:53:
bf:8b:b9:cd:a5:1d:2a:8f:a8:47:19:f8:82:fd:06:
31:ea:b8:b2:f2:60:55:9d:a0:bb:1e:4d:84:e7:6b:
da:17:76:d8:b9:f0:05:98:ea:51:73:a6:47:d6:d3:
69:6f:a2:34:ff:5d:30:b1:72:81:70:f0:5d:de:ee:
42:b0:25:99:2b:de:0c:ce:8e:78:45:b2:1f:e4:cc:
f1:43:96:c6:e6:0e:0f:25:ae:dd:a2:96:cf:22:dc:
5a:44:45:cb:41:09:85:26:0c:9d:26:58:e3:d6:66:
d9:95:b5:96:b5:de:ee:cc:ac:4c:d0:c1:23:1f:ee:
e6:98:d0:62:5c:68:92:d9:24:67:c1:ed:f2:7f:2a:
a7:21:c1:07:c1:80:81:7b:8f:f7:55:a6:cd:8d:a8:
4f:00:4d:60:d9:62:b2:62:72:d5:e1:dc:86:bb:77:
46:9d:d6:34:23:b7:4c:5b:60:66:32:dd:0a:64:d8:
7d:0a:e0:82:54:fc:f9:ab:10:d5:94:c1:fc:a1:a8:
15:ff:63:b4:46:fd:a3:40:b2:f9:fb:11:f7:94:61:
0b:0c:22:45:8a:c7:34:6f:3f:5a:ef:d1:2c:1c:d3:
fa:69:da:21:33:0a:18:b4:e0:2e:f7:85:73:41:b4:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:AE:6D:F5:8A:12:85:E0:8E:61:F6:DD:1A:EB:61:5E:DB:E7:14
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3fKubfWKEoXgjmH23RrrYV7b5xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.126.0/23
135.196.155.0/24
135.196.166.0/24
135.196.236.0/24
135.196.244.0/24
135.196.248.0/24
135.196.252.0/24
135.196.254.0/24
194.231.144.0/22
195.86.238.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dd:db:d9:d1:2d:17:cc:c9:77:64:6a:f0:c3:4b:06:9d:ba:
52:76:5f:72:f9:36:4b:c9:23:f5:c5:9a:43:87:6e:14:49:3a:
4b:d6:26:75:9d:ef:38:6a:24:24:ce:91:f5:43:94:cd:f6:9f:
2b:c2:8a:6a:9a:09:10:be:db:fd:05:72:dc:07:51:2d:7e:d8:
45:b6:e7:42:37:ac:a5:6b:c8:27:d0:f2:9b:fb:0b:5b:07:b3:
ed:d1:d0:46:09:2e:e2:bc:c2:c0:e2:aa:7b:da:7c:59:06:5f:
c7:9a:0f:84:a9:db:c1:0a:1f:99:2d:18:d9:90:da:ec:48:dd:
49:da:de:ca:9d:d2:58:d2:7e:c2:93:fe:eb:01:db:9d:a8:7d:
87:0c:55:aa:0f:14:46:97:4c:87:c5:26:1c:19:41:7d:b0:b0:
7e:08:0d:dc:ff:4e:2a:7e:48:1b:c5:9b:ff:ce:16:d5:ad:59:
74:26:81:f7:9e:1d:5a:c4:b6:a8:39:31:c6:5a:78:d7:ce:5f:
e0:34:a5:ed:94:eb:15:01:0a:61:4e:2a:81:e9:f1:b5:6d:6f:
82:f4:ab:18:f8:94:17:a6:c4:7c:e5:b3:91:71:ee:89:3b:15:
96:16:03:f9:10:a8:1d:c3:b4:e9:f4:b6:f0:03:48:5b:75:da:
e8:7f:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:47 2026 by rpki-client