Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Flax6RJW_0uzqjVq61pxLEEDB8g.roa
File: Flax6RJW_0uzqjVq61pxLEEDB8g.roa (raw, json)
Hash identifier: E7th/8brgvp8IvnAF4+RFs0Xhay0kyek3HfJrlLXa18=
Subject key identifier: 16:56:B1:E9:12:56:FF:4B:B3:AA:35:6A:EB:5A:71:2C:41:03:07:C8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019ECF7BF985BB534045E25CE36075B5B5BA
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Flax6RJW_0uzqjVq61pxLEEDB8g.roa
Signing time: Tue 16 Jun 2026 08:11:08 +0000
ROA not before: Tue 16 Jun 2026 08:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 194.77.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:7b:f9:85:bb:53:40:45:e2:5c:e3:60:75:b5:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 16 08:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1656b1e91256ff4bb3aa356aeb5a712c410307c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:8b:37:72:ea:0e:df:3d:17:54:a4:07:46:
89:d4:5c:77:fc:1f:ef:92:49:c8:39:62:02:2f:31:
18:d2:87:82:68:29:fe:68:56:f2:fe:30:80:48:73:
53:7c:b6:3d:20:34:d1:8c:0f:3e:5c:11:30:17:92:
1f:7c:a3:cc:08:e2:92:bc:ec:1e:60:7a:89:d4:be:
43:6f:6a:be:54:98:86:d3:7b:33:b6:01:d0:92:0e:
6a:0d:93:5a:8a:7b:df:ed:70:32:1c:1f:b7:7a:d3:
e4:8a:d5:c1:84:66:59:30:98:96:f4:2a:ee:ac:bc:
34:d1:28:53:85:7f:c7:43:b0:70:4c:3e:cd:1c:57:
55:8f:ea:d2:88:ab:10:19:b0:b2:1c:9a:78:7a:b6:
e3:57:fd:80:7e:7c:40:73:ff:05:a2:77:b9:dd:e3:
11:8e:53:9a:01:af:ff:35:ec:9f:fc:2e:d2:93:00:
9a:34:a5:a5:0e:13:8d:e1:71:6f:85:21:3e:0c:ec:
27:58:eb:cd:b0:bb:7a:cc:77:35:37:21:8f:1e:05:
62:75:1b:25:8d:c2:f1:fe:23:f5:24:8d:af:c5:b1:
2f:06:31:c5:18:a0:87:43:81:f5:4b:5f:8b:65:a4:
87:0c:ae:a7:c3:e3:34:c5:ac:f5:7b:6e:d7:af:74:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:B1:E9:12:56:FF:4B:B3:AA:35:6A:EB:5A:71:2C:41:03:07:C8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Flax6RJW_0uzqjVq61pxLEEDB8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.192.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6c:64:29:19:ea:25:a4:de:76:be:8a:96:cb:bd:d6:2c:42:
52:8d:91:7e:13:6f:c4:5a:dd:dd:ff:d0:52:2f:6e:92:70:fc:
c4:01:51:aa:b1:61:d9:a3:ae:fe:31:4d:bd:a0:19:e6:c9:0b:
13:6c:58:ff:f0:88:49:57:4d:57:29:4f:53:aa:66:64:02:4f:
07:71:be:cc:40:9a:cc:8f:77:92:26:e9:47:de:b8:99:d8:e0:
7f:2a:b4:be:4a:64:74:a8:12:4a:c5:cc:65:09:e5:ca:ce:f2:
13:bd:05:56:b9:07:d6:73:42:62:ba:56:3a:91:d3:51:a8:c9:
84:8f:37:21:bd:5f:c8:a2:81:28:00:6a:2b:ca:3d:7b:39:f2:
54:7e:74:27:70:55:0e:ba:e0:a8:af:1f:18:08:38:1f:59:75:
45:a8:63:db:f5:01:be:db:94:6c:06:0c:57:1e:e1:1b:e8:0c:
21:18:6b:17:b9:a7:2f:66:aa:47:86:74:4a:45:fb:20:37:73:
ac:75:a2:dc:a0:e0:9b:26:fd:2f:f2:ca:94:05:a9:c0:7a:ad:
e9:31:78:ef:dd:dc:ae:d7:bd:e8:73:a9:73:3c:ce:53:55:e3:
7d:48:c5:33:f7:b0:0b:3c:32:ff:52:e3:c3:23:e0:00:ee:95:
d4:d1:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:58:43 2026 by rpki-client