Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B6Ffd6X_XLkzWCiYBuzI27C-ENs.roa
File: B6Ffd6X_XLkzWCiYBuzI27C-ENs.roa (raw, json)
Hash identifier: aE+lQE4SKQSGOMYdDDAIcmQ6EA4V3iC3tn2R594q0cM=
Subject key identifier: 07:A1:5F:77:A5:FF:5C:B9:33:58:28:98:06:EC:C8:DB:B0:BE:10:DB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047DA23DC942D46ABE75886BBE6AE1214
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B6Ffd6X_XLkzWCiYBuzI27C-ENs.roa
Signing time: Fri 28 Aug 2026 10:11:13 +0000
ROA not before: Fri 28 Aug 2026 10:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 194.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:da:23:dc:94:2d:46:ab:e7:58:86:bb:e6:ae:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 10:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07a15f77a5ff5cb93358289806ecc8dbb0be10db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:ce:52:e5:a4:dc:12:55:55:e6:12:40:92:
c0:30:9f:68:24:e0:3e:9d:cb:95:b3:90:1b:01:52:
e3:f8:09:d5:68:ae:35:7d:3c:d8:e1:17:2d:97:4b:
57:55:99:51:f6:5b:42:6c:66:45:10:c6:7f:18:36:
10:93:70:cf:e4:ae:68:22:21:ec:75:f7:a0:d2:35:
e3:23:0b:41:d2:72:e5:49:9f:a1:12:58:5f:29:43:
34:74:81:3f:f9:f2:e0:28:1c:dc:ad:ca:33:f1:43:
e6:c5:d7:cd:ec:f5:d5:13:ae:e0:4c:14:be:90:9b:
85:e9:7d:82:7e:8d:b5:10:08:ba:23:b5:3d:e7:e3:
2c:ed:5c:c7:0e:5e:b5:df:b7:59:0c:7f:04:0d:dd:
29:fc:f0:72:b3:3a:39:f4:90:24:10:81:f3:23:35:
2e:ec:85:43:ee:0c:6a:ed:cc:12:e6:63:a6:f7:9b:
bf:92:98:bf:f9:4e:e1:ef:de:64:51:45:c4:56:7b:
4f:85:81:d9:de:e2:36:78:26:7c:16:17:0a:aa:fa:
5e:d7:c0:a6:d0:a4:87:97:b0:fd:ca:01:e2:a2:c4:
f4:57:45:ba:97:47:c7:0d:cf:d4:96:cc:2d:64:86:
b8:22:de:6e:8b:47:7d:95:af:ac:e4:86:6a:e2:07:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:5F:77:A5:FF:5C:B9:33:58:28:98:06:EC:C8:DB:B0:BE:10:DB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B6Ffd6X_XLkzWCiYBuzI27C-ENs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:44:58:ab:94:5f:b5:4e:ff:b2:74:f0:a4:14:16:8f:a7:93:
e6:f6:61:20:1f:54:64:99:25:9d:26:e0:20:0c:e4:55:95:88:
58:83:f0:9e:69:e8:92:6d:7b:c1:be:97:73:8d:20:a3:9e:d7:
a1:07:eb:90:da:17:8f:24:37:59:77:92:fd:d5:66:0f:06:14:
35:fc:fc:18:47:ef:ca:bc:3a:5d:d5:e7:32:52:88:03:a9:c9:
cf:9b:86:2d:fa:75:d3:47:b8:0a:55:f9:44:f2:80:05:20:36:
24:ec:8a:11:20:d4:b6:70:d2:c4:3f:d1:1a:9d:21:45:82:ca:
c4:b6:33:72:e8:c8:8a:d8:cb:4e:43:ae:08:1b:aa:7d:54:c3:
8f:66:35:7a:ca:74:be:34:fe:23:6b:29:0b:95:7d:c5:7f:97:
46:db:32:24:d2:6b:55:f6:bd:a6:fb:be:4b:84:b2:4d:73:bb:
29:0a:0a:38:43:31:15:b5:c8:7f:4a:16:86:d5:d0:1a:f5:24:
83:f5:5f:ba:87:03:36:e1:d0:82:c8:18:4f:33:fc:f6:08:9f:
ca:9f:9d:1c:30:13:2a:a1:9e:b2:74:03:e5:e1:d1:b9:34:b1:
f9:d0:b1:81:29:63:51:17:16:7f:ba:ed:cc:bd:73:f6:2a:a9:
c4:32:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:04:55 2026 by rpki-client