Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/88kIn8UtdAgdx25V7BKio6abID0.roa
File: 88kIn8UtdAgdx25V7BKio6abID0.roa (raw, json)
Hash identifier: Anz3AE2tO5A6xmkSWZP54eey+S0dYibB4uFBwFm3FIA=
Subject key identifier: F3:C9:08:9F:C5:2D:74:08:1D:C7:6E:55:EC:12:A2:A3:A6:9B:20:3D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0424DCF49E439BC39FE99E4AF75490F6B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/88kIn8UtdAgdx25V7BKio6abID0.roa
Signing time: Thu 27 Aug 2026 08:19:50 +0000
ROA not before: Thu 27 Aug 2026 08:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 194.77.78.0/24 maxlen: 24
194.77.91.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
212.189.116.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:4d:cf:49:e4:39:bc:39:fe:99:e4:af:75:49:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 27 08:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3c9089fc52d74081dc76e55ec12a2a3a69b203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:06:39:53:21:8a:e2:52:d7:88:6d:95:ea:
ce:3e:fb:d1:af:6a:0e:d8:42:a2:ea:7f:a6:6f:47:
e3:ab:cc:47:34:55:12:e1:70:cf:f5:d2:df:90:a4:
89:50:51:c9:b8:b6:c5:6d:4d:72:07:0f:91:fa:0d:
d5:34:a7:08:e2:ca:28:a8:e7:70:e4:9e:13:62:dc:
df:d6:17:6f:14:e8:e2:e2:6b:8a:45:4c:14:d7:ac:
cc:a1:e1:30:9f:1d:ce:78:e9:47:a8:1b:f1:e0:80:
9b:1c:dd:09:b0:b6:c5:4b:bb:27:ad:50:6e:15:7f:
bc:d4:91:4c:be:67:56:19:22:e8:26:d5:f4:19:6a:
79:24:6d:7f:67:e0:cf:7c:36:ff:bd:0b:2b:8b:75:
2d:b9:4e:2c:07:6a:9a:b5:93:00:2b:bd:b3:b4:2e:
98:8c:a0:bc:34:83:d7:f0:48:c1:10:54:df:5e:36:
b7:25:a6:bd:b1:86:49:31:95:ee:3f:69:c0:26:79:
38:49:f6:41:a1:95:e4:e1:dc:26:d3:84:0e:31:57:
6e:f5:4c:13:b1:0e:6d:07:f1:f3:48:14:c4:f3:4e:
bb:b9:03:bc:13:83:24:ed:f4:0c:3f:aa:b2:be:a6:
34:1f:f9:62:34:f5:18:44:3d:38:f9:f5:63:e7:45:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:08:9F:C5:2D:74:08:1D:C7:6E:55:EC:12:A2:A3:A6:9B:20:3D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/88kIn8UtdAgdx25V7BKio6abID0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.78.0/24
194.77.91.0/24
194.231.150.0/24
212.189.116.0/24
212.222.171.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:89:4e:95:df:36:88:04:f9:4f:5f:52:15:60:58:4b:76:a0:
96:e9:44:0f:e1:ec:b2:61:20:53:fe:36:6a:d1:26:b2:c5:1d:
fe:3b:3a:6e:cc:49:96:55:05:04:2b:8e:62:0f:6e:a9:6c:69:
39:76:22:32:0e:7d:d4:4a:f4:b7:0b:59:dd:1e:fa:6d:56:e9:
be:58:d3:3e:1b:6e:c1:34:ec:98:72:5f:f3:3c:80:bb:65:bf:
01:3b:00:09:65:ac:71:28:79:8c:a8:1b:c7:42:6a:2e:84:de:
50:b2:3c:fd:7b:54:7f:aa:1a:0b:21:da:5c:2a:aa:71:89:94:
8f:f9:14:03:d2:64:7d:ce:ab:db:58:c0:be:8d:98:5e:01:8c:
34:f7:18:7a:91:39:2c:d7:f3:d7:bf:b2:78:c9:1d:c5:85:ee:
10:e5:4b:ef:25:db:d2:cd:2e:29:ad:89:14:cf:64:fc:50:b9:
d9:26:82:21:aa:e4:cb:31:62:28:fd:cb:94:73:d4:38:21:b7:
fa:de:5a:ef:69:b3:33:c4:72:00:85:6c:38:77:47:25:9f:99:
c1:a6:a0:d6:35:3d:60:cf:ad:34:9b:3d:55:33:99:1f:4c:ff:
d0:25:fd:85:d5:bd:4e:0c:53:65:a5:da:9e:2b:2c:c4:94:d6:
a7:66:bf:43
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaBCTc9J5Dm8Of6Z5K91SQ9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwODI3MDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2M5MDg5ZmM1MmQ3NDA4MWRjNzZlNTVlYzEyYTJhM2E2OWIyMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IGOVMhiuJS14htlerOPvvRr2oO
2EKi6n+mb0fjq8xHNFUS4XDP9dLfkKSJUFHJuLbFbU1yBw+R+g3VNKcI4sooqOdw
5J4TYtzf1hdvFOji4muKRUwU16zMoeEwnx3OeOlHqBvx4ICbHN0JsLbFS7snrVBu
FX+81JFMvmdWGSLoJtX0GWp5JG1/Z+DPfDb/vQsri3UtuU4sB2qatZMAK72ztC6Y
jKC8NIPX8EjBEFTfXja3Jaa9sYZJMZXuP2nAJnk4SfZBoZXk4dwm04QOMVdu9UwT
sQ5tB/HzSBTE8067uQO8E4Mk7fQMP6qyvqY0H/liNPUYRD04+fVj50X+JQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPPJCJ/FLXQIHcduVewSoqOmmyA9MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvODhrSW44VXRkQWdkeDI1VjdCS2lvNmFiSUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwk1OAwQA
wk1bAwQAwueWAwQA1L10AwQA1N6rMA0GCSqGSIb3DQEBCwUAA4IBAQCsiU6V3zaI
BPlPX1IVYFhLdqCW6UQP4eyyYSBT/jZq0SayxR3+OzpuzEmWVQUEK45iD26pbGk5
diIyDn3USvS3C1ndHvptVum+WNM+G27BNOyYcl/zPIC7Zb8BOwAJZaxxKHmMqBvH
QmouhN5Qsjz9e1R/qhoLIdpcKqpxiZSP+RQD0mR9zqvbWMC+jZheAYw09xh6kTks
1/PXv7J4yR3Fhe4Q5UvvJdvSzS4prYkUz2T8ULnZJoIhquTLMWIo/cuUc9Q4Ibf6
3lrvabMzxHIAhWw4d0cln5nBpqDWNT1gz600mz1VM5kfTP/QJf2F1b1ODFNlpdqe
KyzElNanZr9D
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:52 2026 by rpki-client