Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/D_6HxHMZ7QcWYHhBs_jLiPTCGV0.roa
File: D_6HxHMZ7QcWYHhBs_jLiPTCGV0.roa (raw, json)
Hash identifier: aPk5axiG0PIIw0gLgWMwTVjmiwey0rTWO9gVb+Dxf9Y=
Subject key identifier: 0F:FE:87:C4:73:19:ED:07:16:60:78:41:B3:F8:CB:88:F4:C2:19:5D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A193A7971DA5EB3092AF667E06B9120512
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/D_6HxHMZ7QcWYHhBs_jLiPTCGV0.roa
Signing time: Sat 31 Oct 2026 20:29:56 +0000
ROA not before: Sat 31 Oct 2026 20:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403157
IP address blocks: 212.189.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:a7:97:1d:a5:eb:30:92:af:66:7e:06:b9:12:05:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 31 20:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ffe87c47319ed0716607841b3f8cb88f4c2195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:59:11:03:38:ba:22:74:12:d2:57:34:c3:
4a:3c:dd:7c:07:c8:6d:db:f4:27:04:87:ab:c7:fc:
be:52:37:84:4c:4f:6a:82:04:70:ad:8d:f0:32:66:
a9:6c:7f:08:ce:ed:21:3e:b9:fa:f6:b2:23:83:c7:
db:13:05:1c:1d:44:15:e9:30:f3:9b:56:80:6a:c9:
7e:64:d8:51:54:7e:e6:a0:5d:fc:bb:c3:2a:f4:f5:
48:09:35:ca:b8:09:2f:d1:d0:0b:c0:3d:8c:7e:21:
d8:25:13:29:90:c9:ce:fb:a0:34:24:72:40:aa:9a:
dc:b4:2a:98:8d:0a:56:2a:94:8e:df:4f:db:74:0f:
cc:83:b2:7b:28:d5:6e:44:19:cb:c5:37:87:97:a8:
c5:a6:97:bc:66:5e:52:03:91:2d:82:31:fa:86:d5:
07:fe:e9:a7:83:ac:c2:38:96:cd:d5:07:43:34:36:
69:92:4f:26:dd:59:4b:31:e6:19:38:14:2e:79:bb:
d8:b0:94:88:95:de:6f:b0:61:90:8e:26:9c:c8:fc:
e4:f2:45:b8:bd:5e:49:fc:f2:07:c2:8b:f0:0e:43:
2e:43:e5:1a:c4:5c:90:a5:ae:5a:b4:dc:a0:3e:67:
16:44:ec:4d:6e:c3:84:3a:d6:75:c7:db:9f:fa:db:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FE:87:C4:73:19:ED:07:16:60:78:41:B3:F8:CB:88:F4:C2:19:5D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/D_6HxHMZ7QcWYHhBs_jLiPTCGV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.90.0/24
Signature Algorithm: sha256WithRSAEncryption
53:18:b0:36:31:6e:ff:49:df:6a:0e:fd:b7:7f:10:f5:96:e2:
7c:29:2e:1e:0c:5d:8b:d9:6c:13:73:84:36:ba:70:3f:c8:5f:
ed:9a:21:db:e0:0a:b6:ff:41:6a:f0:ce:0f:62:80:c2:10:be:
12:00:9f:7d:7d:23:b2:f4:0b:67:7c:45:42:fc:e1:82:dc:31:
db:50:e1:d7:8a:e4:39:33:ca:e3:73:3d:d4:a2:9b:77:36:5b:
f2:63:f8:e2:18:7c:0a:65:3f:bf:bf:57:6b:33:55:fb:ee:0b:
7e:27:c2:55:f5:d2:bc:b2:a1:10:82:0e:26:a2:ce:1f:0b:1c:
9b:db:c8:66:62:61:be:70:7e:d5:bb:58:ec:19:18:8e:72:82:
87:10:c8:b7:b2:a6:34:6e:d2:9f:2b:3f:d3:53:e2:44:bc:c4:
b0:4e:9f:be:e3:a8:77:09:5b:4a:9a:49:c6:60:21:c6:27:ba:
42:ee:97:22:1a:a6:c7:b5:06:89:7d:67:8d:6a:cd:5f:96:5b:
2c:37:45:79:0e:02:a8:7b:a8:5f:ba:27:e3:92:51:fe:5c:59:
5a:27:db:ce:fa:88:25:72:03:83:81:40:4c:5e:df:e7:3e:31:
b5:29:5e:2d:09:f9:6e:13:e4:88:01:40:b4:46:71:44:c6:a2:
ef:c7:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:42:41 2026 by rpki-client