Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DOxE0aosLOIc0ias51ZVNzKjI0s.roa
File: DOxE0aosLOIc0ias51ZVNzKjI0s.roa (raw, json)
Hash identifier: AFOES1oCJNwORVnoLpn8UDqCATowQNTyB2r8/ZzUgDY=
Subject key identifier: 0C:EC:44:D1:AA:2C:2C:E2:1C:D2:26:AC:E7:56:55:37:32:A3:23:4B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019ED568B102541C995C67861CDCCA84FF0D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DOxE0aosLOIc0ias51ZVNzKjI0s.roa
Signing time: Wed 17 Jun 2026 11:47:48 +0000
ROA not before: Wed 17 Jun 2026 11:47:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 194.77.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:68:b1:02:54:1c:99:5c:67:86:1c:dc:ca:84:ff:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 17 11:47:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cec44d1aa2c2ce21cd226ace756553732a3234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:c4:db:7b:ff:d4:7e:1f:56:7b:39:5f:d3:
65:ed:c9:ec:2f:ef:31:d0:9f:49:80:37:66:03:e8:
fa:ca:47:d2:dd:9c:39:80:f6:c3:0d:40:ce:69:6a:
a9:f4:ff:f9:9e:24:cd:28:fd:1a:e3:b5:02:be:69:
90:5e:f6:80:a7:17:20:8c:f8:a1:de:45:0e:34:38:
24:63:18:c9:35:25:c4:95:02:72:47:0d:78:91:c4:
b2:34:df:5c:55:b8:ee:6d:9d:7a:e5:72:b6:b5:72:
8b:0c:b7:24:55:54:3b:ad:b1:a5:a4:56:01:ae:45:
6d:1b:62:10:65:a2:37:bd:06:34:ac:f7:e0:f3:ac:
07:de:98:bc:7a:cb:f4:ef:2d:72:c5:63:c5:27:1e:
49:f2:e2:54:73:71:c7:14:d0:29:c6:1b:1a:36:25:
94:64:ab:b9:7a:40:90:c4:34:11:c0:a8:9f:b3:35:
57:25:c4:2c:57:8b:70:f9:97:cc:b0:23:16:31:5a:
e0:2a:a3:7e:9f:90:e2:94:ae:0f:bf:95:62:1c:02:
b3:ee:ef:25:55:f4:48:98:75:40:36:59:b5:a6:c9:
38:f0:ff:48:6e:aa:27:5b:49:d6:64:a4:2c:24:eb:
bb:87:52:10:88:70:b8:df:ee:2e:e7:2b:bd:72:40:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:44:D1:AA:2C:2C:E2:1C:D2:26:AC:E7:56:55:37:32:A3:23:4B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DOxE0aosLOIc0ias51ZVNzKjI0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.70.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f8:88:8a:aa:b1:90:d8:65:d5:49:50:8f:fd:78:05:da:34:
30:e8:eb:b9:de:a9:cb:09:57:0e:cd:b4:03:8a:30:67:3f:6d:
93:e7:81:97:65:f9:25:be:b9:88:dc:43:49:a1:c9:e7:29:ce:
c8:2d:97:f7:6c:d5:2a:6a:be:5c:cd:be:44:75:52:bb:23:81:
2e:5d:a6:53:ba:80:55:cf:2a:3a:eb:44:9b:0f:54:92:62:e6:
bf:92:21:ad:c3:2a:45:81:7d:ca:76:35:49:0d:aa:fa:46:49:
84:d2:ca:0a:82:f0:b4:3d:f3:84:14:8e:3f:16:48:a9:b9:33:
ad:1c:fc:62:b0:39:eb:a2:3b:28:f5:2b:58:d9:9c:db:a2:ec:
c7:3f:49:9f:6d:48:f6:3a:2d:1f:27:fc:1f:4e:b5:e4:5d:72:
fd:29:06:22:94:51:1c:f3:34:12:5d:1e:d1:f8:1a:96:d1:29:
ae:cf:a1:99:c2:c8:44:ac:ad:b4:f1:f6:8e:20:8f:a9:35:f6:
67:8b:38:9e:09:7e:05:0e:e6:e2:eb:05:e4:14:fb:95:38:1c:
7e:4e:ca:6d:18:0b:f2:cc:e1:45:d2:37:04:27:a4:ad:12:8f:
91:69:8d:d1:24:7c:72:bd:4e:63:65:f2:9b:b1:81:3a:0e:86:
1f:f3:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:36:28 2026 by rpki-client