Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/I6pmXMfHUbIN4jsvRbmAfDGN72I.roa
File: I6pmXMfHUbIN4jsvRbmAfDGN72I.roa (raw, json)
Hash identifier: NUj26KkG6YHySymnm9IDj5lImVKbyDHXwUo9Lz3ciB8=
Subject key identifier: 23:AA:66:5C:C7:C7:51:B2:0D:E2:3B:2F:45:B9:80:7C:31:8D:EF:62
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A086040F3109D17D0E706433E9915FFFF7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/I6pmXMfHUbIN4jsvRbmAfDGN72I.roa
Signing time: Wed 09 Sep 2026 11:53:28 +0000
ROA not before: Wed 09 Sep 2026 11:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44803
IP address blocks: 77.67.59.0/24 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:04:0f:31:09:d1:7d:0e:70:64:33:e9:91:5f:ff:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 9 11:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23aa665cc7c751b20de23b2f45b9807c318def62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:73:e4:b5:46:f3:bd:65:da:96:d5:90:8f:
fd:38:a0:7f:d8:34:ae:59:f5:7d:ec:79:ba:9f:f3:
99:6a:a1:99:04:74:21:4d:28:d9:b7:4b:02:92:9b:
3e:d6:b7:a3:11:06:6f:58:e7:43:21:4b:b6:c0:82:
3f:f1:7e:d8:e0:a3:6d:0b:75:79:64:75:2f:f3:03:
3f:5e:ae:c5:4d:c9:4e:dd:2c:80:eb:7e:fb:17:25:
e0:29:cb:de:6f:b1:c8:5d:5b:f1:46:42:fd:6a:e7:
cf:a8:07:15:62:98:99:8e:ee:5f:46:4f:50:f6:5a:
bf:53:84:6b:02:db:d4:78:f5:50:33:77:3c:51:d4:
cc:2a:0b:c8:e2:c3:ad:c2:01:f7:99:dd:79:71:a1:
e4:d9:79:be:54:87:47:39:ed:52:aa:59:ea:57:66:
6a:8f:b1:cd:7f:7d:bd:c4:08:35:6d:87:50:56:3e:
11:fa:02:0a:23:78:df:b6:eb:1a:da:c2:04:64:a5:
52:5d:78:9e:e8:b2:f1:34:98:e7:27:2e:b3:7a:b2:
d6:6a:d2:f8:b9:d0:cc:84:a8:a3:8d:d3:29:a9:af:
3e:fe:99:05:9c:70:90:36:ec:c2:5c:f4:8d:79:f9:
a6:38:e1:40:57:8b:c7:b6:4c:c6:9a:00:36:4d:41:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:66:5C:C7:C7:51:B2:0D:E2:3B:2F:45:B9:80:7C:31:8D:EF:62
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/I6pmXMfHUbIN4jsvRbmAfDGN72I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.59.0/24
194.231.128.0/22
194.231.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e5:1e:9c:e6:cc:d4:37:e7:76:81:69:36:88:fe:c3:16:1a:
9c:f5:f4:03:a0:f9:0c:0e:4d:f3:38:f4:8d:c9:8d:f3:41:88:
f8:20:3f:74:51:66:f5:16:76:2b:97:a3:a1:1b:a7:52:60:14:
9b:45:28:03:5f:4d:1a:81:19:68:7b:9e:63:b5:cb:e9:76:8e:
00:ca:78:f3:29:0f:4c:9d:f9:df:aa:b9:e0:cb:1f:f2:49:67:
a7:62:23:6f:7f:f5:5f:9b:f4:95:bb:43:60:c9:6d:14:c3:4c:
17:a7:b0:9b:78:93:b7:cc:27:df:ef:ce:a0:ba:71:6e:17:0c:
b4:28:47:bc:b9:9c:47:26:c4:ae:1c:02:bf:60:df:9c:bc:ed:
da:89:f8:ac:59:0d:d5:60:9d:5d:43:46:3b:10:7f:81:e4:5f:
dc:24:c8:8e:28:2b:a4:cb:c1:31:c1:65:4c:9d:3d:57:2c:b0:
37:df:e2:34:47:70:12:ef:d3:af:ee:c2:00:ba:ad:2d:fa:ef:
22:46:6a:31:78:18:fa:c3:4a:30:9d:4b:3d:9e:5a:85:77:71:
2c:83:34:7c:a7:20:ea:9a:f3:5a:e4:68:6a:f1:9f:1c:b9:db:
d3:e9:ba:42:d1:11:c3:5a:e4:91:52:cc:47:1b:c4:b2:e4:a1:
96:43:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:26:52 2026 by rpki-client