Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5vVui54a39uymGVjVQKMio51OJg.roa
File: 5vVui54a39uymGVjVQKMio51OJg.roa (raw, json)
Hash identifier: wktBgwxSmqOGUjNHueg3r/kZIj0cy+e420mpNEbxE0M=
Subject key identifier: E6:F5:6E:8B:9E:1A:DF:DB:B2:98:65:63:55:02:8C:8A:8E:75:38:98
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A04A758E2F2EBF8EA03B70297DCC8F07A9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5vVui54a39uymGVjVQKMio51OJg.roa
Signing time: Fri 28 Aug 2026 22:20:13 +0000
ROA not before: Fri 28 Aug 2026 22:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215666
IP address blocks: 194.120.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:75:8e:2f:2e:bf:8e:a0:3b:70:29:7d:cc:8f:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 22:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6f56e8b9e1adfdbb298656355028c8a8e753898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:cd:c7:db:03:d2:bf:05:71:07:87:e0:83:
5c:e7:c1:eb:bb:fb:0e:6a:a6:c4:e8:73:87:1a:78:
ab:21:25:58:4b:8a:47:47:cd:7c:b8:7f:7f:fc:fb:
eb:2d:77:a4:0e:6b:ac:e2:79:3d:65:2e:2e:7a:8d:
27:a6:d0:cf:a4:cb:aa:4f:48:20:24:98:f4:e0:33:
7a:70:05:f2:a4:c7:d9:4d:ad:d2:cf:0b:c4:a6:3d:
27:3f:a5:f0:41:ff:56:3f:d3:9c:2a:d6:a9:2e:2d:
9c:00:03:af:da:55:09:4e:79:50:41:8b:67:8b:d8:
aa:b5:44:30:93:fc:4c:c4:60:25:66:3a:95:9a:5c:
3e:79:4b:af:e0:9d:e9:e4:68:0e:f0:e0:95:d3:f3:
a0:dc:60:cc:35:8e:cd:6c:ad:e6:1e:aa:4d:ac:af:
12:15:ce:94:d0:7e:20:81:3e:76:3b:4e:b6:e5:d8:
58:27:19:71:23:ae:2a:e5:02:c3:d0:19:d9:50:8d:
8e:22:61:51:aa:c6:0f:48:0d:cc:04:5a:8f:60:f1:
45:d7:fb:cd:ec:38:07:ce:8f:d1:61:5f:19:a6:d8:
ca:bb:54:e5:bf:61:53:83:f1:3c:17:71:5b:06:c1:
87:2c:3a:ed:ac:72:30:56:5f:74:11:51:57:2c:8f:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:6E:8B:9E:1A:DF:DB:B2:98:65:63:55:02:8C:8A:8E:75:38:98
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5vVui54a39uymGVjVQKMio51OJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.121.0/24
Signature Algorithm: sha256WithRSAEncryption
04:59:fc:b7:c0:b3:f2:08:59:9f:69:80:b0:f8:f1:d6:21:7a:
24:fb:2b:18:e0:83:9e:35:14:be:b1:17:b3:7a:80:30:76:60:
20:fd:4e:1f:91:07:9b:96:52:eb:b0:94:20:b9:a5:a4:66:87:
6c:39:7f:d1:23:0b:2d:1c:d0:ce:cc:f2:d9:f9:00:78:3c:d6:
03:ea:93:42:5e:ee:d4:5b:75:67:16:fe:d2:44:dd:38:5c:54:
dd:8b:86:e5:d7:c0:bc:cb:3c:8d:c0:bd:1e:ff:34:f4:37:e1:
8f:14:78:0f:33:36:a9:e7:66:30:dd:4f:b8:1c:f4:86:6d:47:
19:59:48:cb:d2:62:7d:8b:50:8f:d8:e1:6c:42:df:7b:8d:07:
04:16:ae:19:1b:d8:ec:6f:da:c2:da:da:2f:d1:df:f0:cf:f9:
fc:0d:3b:30:ef:69:e1:a2:59:a9:9b:5c:2f:72:2d:ba:5d:37:
ec:0b:99:6d:92:b9:5e:5f:6f:e9:f7:15:91:73:31:0b:a0:8b:
75:f9:82:a4:86:59:a3:0a:e8:fd:85:b6:5d:7f:b7:16:2d:e4:
15:42:75:61:a2:f8:4b:16:7e:4b:4a:04:58:a8:8d:fe:6f:f6:
56:00:01:dd:c5:8e:f6:b7:15:55:ed:7f:be:e8:eb:2d:6f:14:
0d:f0:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:52 2026 by rpki-client