Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5UyZwtyZ4QF3V73fe8pSHjnGlJM.roa
File: 5UyZwtyZ4QF3V73fe8pSHjnGlJM.roa (raw, json)
Hash identifier: bUGxOHrxgi7rRvdOLlP0+HnSkHt93jq449DLqOPEDPg=
Subject key identifier: E5:4C:99:C2:DC:99:E1:01:77:57:BD:DF:7B:CA:52:1E:39:C6:94:93
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16384749CD94E8EE6823B936B3C62BF2E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5UyZwtyZ4QF3V73fe8pSHjnGlJM.roa
Signing time: Thu 22 Oct 2026 12:09:47 +0000
ROA not before: Thu 22 Oct 2026 12:09:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218701
IP address blocks: 194.77.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:84:74:9c:d9:4e:8e:e6:82:3b:93:6b:3c:62:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 22 12:09:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e54c99c2dc99e1017757bddf7bca521e39c69493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e5:57:eb:c8:96:69:af:b8:28:62:5f:78:41:
84:c1:a6:d9:64:0a:bb:0a:e0:d9:9f:a2:29:30:8a:
ed:82:f7:21:e1:79:96:ac:3a:67:4f:d6:94:47:c4:
2b:fc:4d:3e:cd:5d:51:88:a0:71:f4:67:57:9e:4a:
8d:ed:cc:1e:99:98:07:5e:af:fe:40:58:7e:5d:5b:
37:d6:ea:3c:84:3f:5d:b2:45:44:ae:4c:bd:96:5d:
ed:f1:08:b1:4d:e0:5f:f4:4a:4d:9f:44:ed:c8:c3:
50:cc:dd:1f:f7:21:5f:94:d0:51:e9:0a:a1:cc:18:
6f:3e:00:c5:b8:1f:0e:6b:93:19:e1:b2:68:ff:e7:
8d:20:a6:3f:11:fb:31:f2:97:e1:82:92:e8:c0:8c:
9c:b9:57:45:34:9d:2d:00:e3:66:a7:9e:0d:2e:e9:
3e:7d:de:7e:20:22:4e:34:1b:86:fa:02:8e:c4:a7:
0e:d6:23:41:1b:65:8c:35:f0:93:5b:56:af:c4:5a:
d9:fd:f9:4f:66:f7:6d:98:47:22:91:bd:21:d6:8e:
92:b0:2a:6f:fb:61:a3:02:e7:36:9f:0b:c9:08:14:
12:0b:d3:4b:5c:23:d9:99:c1:76:fb:27:aa:c7:78:
1e:65:ab:01:09:e5:24:60:28:bb:23:56:26:51:d6:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:99:C2:DC:99:E1:01:77:57:BD:DF:7B:CA:52:1E:39:C6:94:93
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5UyZwtyZ4QF3V73fe8pSHjnGlJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.76.0/23
Signature Algorithm: sha256WithRSAEncryption
94:2c:21:6e:45:18:70:60:4e:78:ba:eb:ce:60:ce:40:bc:27:
9b:20:da:c8:23:1d:3b:91:e4:43:8e:cd:a7:f6:83:0e:47:c3:
ef:71:7c:92:83:38:f6:ad:98:c4:55:34:81:ff:4b:bf:aa:2e:
f9:48:fc:30:af:28:01:75:b0:43:9b:9e:9b:b2:4d:1a:31:7d:
a9:58:9a:6a:5f:4e:c2:d5:be:ed:83:f9:e0:69:ba:73:7b:1d:
14:63:ac:05:60:b0:c3:3e:d2:aa:fa:06:0b:2c:fe:7d:97:db:
65:fb:f9:0e:f6:af:0d:36:15:77:e6:98:9e:8b:db:eb:65:32:
a6:2c:78:6d:f6:62:01:3f:ee:c0:85:14:6e:c6:52:29:e5:d2:
31:3b:2e:cb:f0:a9:fa:31:69:7e:91:58:d6:f2:cc:2f:03:4a:
a9:b5:0f:15:d3:63:f4:00:b9:62:06:98:d5:70:ae:16:b6:32:
d7:3d:c2:dc:ba:74:07:ec:5b:b8:44:33:44:76:50:b5:a7:d2:
b2:32:f8:04:d4:23:40:51:37:48:68:1c:17:8b:5c:ba:73:c4:
af:95:0e:e8:90:86:fa:2b:36:98:cd:47:48:b8:7f:38:83:34:
ea:c6:16:4d:a2:27:3f:29:e3:31:9c:f2:c0:c8:cd:87:b1:84:
fc:33:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:43 2026 by rpki-client