Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/C2r7PtFmbpFs7NUP6EfIQBk1vHM.roa
File: C2r7PtFmbpFs7NUP6EfIQBk1vHM.roa (raw, json)
Hash identifier: GHCtxU16tYGr2nkvpsT7iQ8I+Ufg5YF1xLgWkr+MWlE=
Subject key identifier: 0B:6A:FB:3E:D1:66:6E:91:6C:EC:D5:0F:E8:47:C8:40:19:35:BC:73
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DAA1116F06701700FCE52C04245424CEB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/C2r7PtFmbpFs7NUP6EfIQBk1vHM.roa
Signing time: Mon 20 Apr 2026 08:45:39 +0000
ROA not before: Mon 20 Apr 2026 08:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 194.231.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:11:16:f0:67:01:70:0f:ce:52:c0:42:45:42:4c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 20 08:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b6afb3ed1666e916cecd50fe847c8401935bc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:b4:e0:d8:90:9e:ab:ab:5f:b4:57:b5:83:
a7:a4:9e:e2:5d:44:78:21:62:5d:a2:87:89:05:37:
2b:21:6c:4c:5a:54:48:f2:98:b2:3f:84:d1:f2:bf:
58:cd:7d:58:c1:5d:01:ee:56:d3:7c:04:a4:48:4e:
40:d1:75:39:f6:f0:33:07:c7:d0:6c:c8:a8:90:06:
cd:3f:e3:d1:ba:91:6d:73:ae:77:37:72:d5:78:c3:
9a:1e:72:5e:a3:e0:63:71:63:4a:b9:08:e1:71:34:
04:19:19:cb:89:16:23:2c:64:71:a1:e6:7a:f4:fa:
46:b8:b3:c3:71:d8:97:b6:d1:73:6b:53:fc:13:95:
1c:de:38:0e:f4:62:65:68:eb:87:78:29:e3:fe:5d:
0a:d9:84:bb:1a:19:2c:3b:49:85:a8:47:5d:95:45:
dd:e1:ab:36:b1:ca:23:c6:7d:3e:6c:02:1f:4e:5c:
20:5e:fc:46:18:1f:83:2e:cf:2e:6c:08:8b:a3:10:
b5:45:29:b6:7c:bd:bc:00:a1:0a:cb:07:93:c5:ff:
cd:af:4c:b3:8f:ed:c4:58:de:e1:dc:fb:6c:ea:77:
af:f8:39:f6:d6:23:0d:18:0e:be:01:ff:3d:f9:31:
f5:f0:1d:3e:c6:b0:11:58:49:28:9c:0f:82:4d:09:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:FB:3E:D1:66:6E:91:6C:EC:D5:0F:E8:47:C8:40:19:35:BC:73
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/C2r7PtFmbpFs7NUP6EfIQBk1vHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.131.0/24
Signature Algorithm: sha256WithRSAEncryption
41:be:9b:91:4e:40:d4:7f:85:96:59:73:0b:9d:6f:35:b6:67:
00:5e:1d:58:a6:dc:dc:bf:68:ce:71:96:93:b5:4f:58:d0:54:
63:a3:2b:96:43:f7:c0:ce:df:9f:c1:a4:c0:0b:ee:8f:2d:7f:
0f:94:f8:1f:82:c1:6a:bf:40:c5:42:f0:f6:65:0c:28:a7:12:
e8:e2:a6:dd:9d:a3:74:b8:bc:05:22:c7:4f:17:35:e3:ee:9c:
85:1b:8b:ae:cf:c6:a9:fe:80:48:2f:89:66:85:7e:57:6c:e2:
9b:d0:9c:0b:7b:c5:25:36:cd:f3:0f:f1:f4:8f:de:90:65:8d:
80:b1:9f:ac:26:77:fb:e4:ba:6e:ac:8e:20:8d:7a:56:d4:a2:
da:b2:46:54:ee:89:d5:65:4d:41:de:5f:40:db:73:d0:fc:4f:
b6:72:a9:a5:e3:2b:c6:a0:bc:0c:c9:12:f6:45:79:13:da:a4:
fc:f0:3a:97:db:56:ea:1b:93:3b:de:f5:0d:4a:36:91:79:97:
2d:6e:18:f2:83:c6:ae:04:b3:f2:5d:92:e7:d9:35:9f:23:4c:
f8:19:a2:06:a0:ba:bd:3c:2f:21:00:d9:f3:7b:70:dd:3a:11:
fc:06:c5:09:74:b8:1d:27:73:eb:a2:44:1d:be:1f:b5:2c:8f:
3e:f1:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:20:49 2026 by rpki-client