Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9cLhp_xJhDpvP4R90Z0bQo-KEJ4.roa
File: 9cLhp_xJhDpvP4R90Z0bQo-KEJ4.roa (raw, json)
Hash identifier: utbWLMQPognXDgBVkGIWx8ZmlrCSbsflgHlf5rNYryw=
Subject key identifier: F5:C2:E1:A7:FC:49:84:3A:6F:3F:84:7D:D1:9D:1B:42:8F:8A:10:9E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DA59A3988F622E7855E1D63A7C4D42532
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9cLhp_xJhDpvP4R90Z0bQo-KEJ4.roa
Signing time: Sun 19 Apr 2026 11:57:21 +0000
ROA not before: Sun 19 Apr 2026 11:57:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 194.231.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9a:39:88:f6:22:e7:85:5e:1d:63:a7:c4:d4:25:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 19 11:57:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c2e1a7fc49843a6f3f847dd19d1b428f8a109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:ae:d6:f2:95:52:f8:89:46:82:6a:5a:cf:
5d:c0:9a:9c:55:89:28:6d:61:67:27:7b:d1:85:52:
ac:fb:a1:39:93:9e:af:6e:41:46:9b:bc:c1:32:f6:
f3:73:07:fe:28:49:4c:8b:31:51:fe:0a:ff:b9:ab:
6b:10:a2:93:2b:94:31:51:36:f4:2e:a3:6f:2f:ad:
06:78:26:6f:61:12:6a:cf:01:d7:2f:32:dc:19:55:
ec:43:93:2d:47:3b:ba:5e:5a:43:21:7e:2f:d6:58:
4e:35:57:d5:f8:31:5f:33:55:14:9a:5f:b5:0c:98:
d7:55:11:52:4e:08:de:d7:d8:f6:d9:1a:cf:89:e6:
09:2d:6d:24:80:6c:93:ed:33:07:83:95:d7:cd:65:
50:94:04:b4:da:b0:e2:42:9a:e1:84:28:26:0f:95:
d7:6e:8c:7f:2b:55:f8:20:04:b6:01:38:f5:90:57:
d2:76:60:bc:50:35:a1:f8:2d:45:df:52:4a:02:1c:
cf:2c:82:55:e1:b6:b0:8f:37:2d:d1:d6:ee:b7:41:
49:fb:63:db:db:30:cd:9d:bf:ef:6d:32:cc:6b:ba:
e8:41:f1:96:8b:f4:49:51:91:84:a7:31:0d:ff:de:
33:85:c9:be:cb:6a:8f:47:e9:79:93:bc:88:d4:12:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:E1:A7:FC:49:84:3A:6F:3F:84:7D:D1:9D:1B:42:8F:8A:10:9E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9cLhp_xJhDpvP4R90Z0bQo-KEJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.138.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5a:50:00:55:b2:4a:39:c5:e5:36:09:9b:52:fb:36:e1:c2:
c7:d0:e5:70:16:61:de:ed:28:a4:a1:9a:54:9f:4e:3b:9d:49:
71:99:22:e0:bd:09:f7:e1:cb:b3:1e:b3:59:d3:5b:86:11:41:
9e:80:cf:48:28:00:cb:a8:8a:ea:5c:ec:75:7c:1d:dd:7a:12:
11:5a:ab:00:01:be:01:99:89:fb:b6:fd:0e:ad:99:86:72:fb:
30:cb:3f:85:44:72:04:bf:47:11:83:b4:e6:90:6e:d2:6e:04:
74:0b:25:4e:81:50:17:10:87:c2:14:2c:be:69:26:00:21:87:
26:44:4c:2a:33:8a:e2:b6:08:77:ef:d3:78:ab:bb:6b:a7:8e:
1a:2c:9b:30:7b:b3:5c:d1:4d:a2:04:09:da:04:01:2a:fe:cb:
96:a4:88:eb:42:cd:10:13:0e:31:d0:7e:70:1d:ea:d9:35:9e:
e4:01:f5:f7:af:49:78:28:08:93:4f:31:da:17:fd:31:26:a9:
f4:92:d6:8f:2c:8a:73:3b:5c:3e:44:f5:f7:fa:67:75:3d:dc:
57:3b:e2:99:f9:81:d5:d1:eb:c9:13:72:e3:cd:53:63:a2:bc:
d3:fa:81:e1:ad:65:e5:f9:09:24:2d:56:c1:38:41:be:44:5e:
a3:c0:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 21:18:17 2026 by rpki-client