Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6F79s9ofiOlSdvxydsg03Njd5tk.roa
File: 6F79s9ofiOlSdvxydsg03Njd5tk.roa (raw, json)
Hash identifier: vKlgSv366G+PFIrITT8ma/Ol6huM3BcYBe+68Y49BNg=
Subject key identifier: E8:5E:FD:B3:DA:1F:88:E9:52:76:FC:72:76:C8:34:DC:D8:DD:E6:D9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F996EFC50BCE65E7BCE34B4478A6408E9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6F79s9ofiOlSdvxydsg03Njd5tk.roa
Signing time: Sat 25 Jul 2026 13:20:15 +0000
ROA not before: Sat 25 Jul 2026 13:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 194.77.200.0/24 maxlen: 24
212.189.23.0/24 maxlen: 24
212.189.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:6e:fc:50:bc:e6:5e:7b:ce:34:b4:47:8a:64:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 25 13:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e85efdb3da1f88e95276fc7276c834dcd8dde6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:55:1d:4c:4b:34:a4:0c:05:7d:b1:5d:b2:c3:
5d:2f:2e:e5:a0:e3:40:d9:3c:bc:18:1b:b7:f5:6d:
79:4e:6a:69:38:65:cc:f9:4b:1e:21:dd:6c:3a:4c:
56:43:87:85:0c:6f:7b:b4:08:8b:a8:b6:4d:5e:f9:
9c:a4:d5:aa:cf:1a:0b:44:aa:6d:e6:0c:ca:3f:2f:
f3:ac:4e:6a:78:20:11:80:54:b7:0d:c0:8c:81:12:
d6:98:f7:b3:70:c7:df:69:17:af:e0:95:db:33:3b:
5c:8e:2d:00:94:e1:37:67:98:43:07:83:3f:e4:ec:
ab:a0:46:39:4b:76:4c:86:a3:78:0c:f9:c0:d2:28:
ae:84:6d:e1:45:96:cf:a4:e4:7a:64:6a:15:3d:87:
12:e7:1d:0f:d7:0d:38:97:ca:dd:4b:88:00:73:ae:
fa:b7:cc:0f:4a:6f:8d:f6:90:30:58:01:95:d0:00:
ed:8c:42:6a:04:58:6e:bc:ee:49:69:dd:04:f0:c9:
82:ca:dd:f4:c3:ac:74:da:ec:05:d9:7d:b6:34:89:
fb:b7:55:82:ce:7c:77:13:4c:7e:88:cc:9c:54:5a:
55:f2:0c:82:72:68:94:62:0a:70:26:b4:85:72:e6:
c1:e5:ba:70:f2:26:e9:41:34:50:a9:71:e8:4a:db:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:FD:B3:DA:1F:88:E9:52:76:FC:72:76:C8:34:DC:D8:DD:E6:D9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6F79s9ofiOlSdvxydsg03Njd5tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.200.0/24
212.189.23.0/24
212.189.124.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5f:61:dd:f1:f7:8d:0c:f5:72:41:e5:52:1b:f5:12:69:01:
95:9c:6d:fa:25:73:ca:70:39:e9:d4:db:0d:6c:04:09:42:3c:
ce:4d:c4:58:36:ce:90:83:cb:bc:08:85:51:15:52:71:ce:fc:
70:6d:57:5e:e7:b9:e1:dc:0b:19:f3:fb:91:46:db:41:af:e8:
ad:f8:cd:b6:b3:b7:5c:a8:cc:39:f0:ee:78:cb:03:91:17:c4:
f2:99:b6:55:b4:41:40:f2:88:95:14:78:d9:fd:a3:cb:bf:6f:
a4:b4:b4:c6:88:7c:2f:9e:a6:bd:d8:88:b4:4f:21:6a:96:06:
99:17:5b:c8:72:20:f3:5b:33:e1:2d:72:f5:b7:ac:dd:68:8e:
fc:45:7f:76:30:1c:b4:43:e1:9d:1f:0c:d2:17:ed:69:71:78:
27:29:8e:9b:31:20:c6:85:8f:8f:73:9c:d1:4a:3a:42:70:4e:
4c:37:8c:99:d2:3a:73:a4:d7:32:38:df:e5:69:75:31:66:35:
c8:e1:1c:19:f0:c7:4b:9f:ea:df:a5:da:96:b2:01:f1:9e:0d:
06:85:66:90:64:9c:c3:ae:af:0e:b3:79:95:0b:5c:ad:6a:34:
27:72:e2:b4:ee:be:df:ad:cb:0a:cf:ee:fb:c7:b7:c0:3a:86:
12:35:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:32 2026 by rpki-client