Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JxL347bPV5ILphrRQ2dztnohIFo.roa
File: JxL347bPV5ILphrRQ2dztnohIFo.roa (raw, json)
Hash identifier: TZQubtFBMSWuG1oR+2KRNx8eRXrTfbohrDU/jwenRvk=
Subject key identifier: 27:12:F7:E3:B6:CF:57:92:0B:A6:1A:D1:43:67:73:B6:7A:21:20:5A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A077475ECCA278FECBE8BFA10B58EE942B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JxL347bPV5ILphrRQ2dztnohIFo.roa
Signing time: Sun 06 Sep 2026 15:12:41 +0000
ROA not before: Sun 06 Sep 2026 15:12:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 194.77.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:47:5e:cc:a2:78:fe:cb:e8:bf:a1:0b:58:ee:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 6 15:12:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2712f7e3b6cf57920ba61ad1436773b67a21205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:5a:1c:db:9b:0e:c2:83:a7:a9:59:cd:4c:
82:e8:50:42:e0:73:8a:78:99:2f:77:d7:18:71:b8:
3f:87:92:62:e6:43:ca:6e:d2:3f:e7:43:00:6d:86:
cd:f6:ba:71:dc:96:5e:ed:d6:ec:ea:05:64:4e:e4:
d7:3d:51:36:91:7e:c6:fa:02:c0:eb:d7:41:98:6f:
61:c2:d1:88:ee:25:42:6c:e4:ab:f0:9a:61:93:fa:
13:2e:79:6b:0e:f4:fb:78:9d:f6:d8:65:69:6c:31:
62:4f:54:d1:14:dc:8a:f6:dd:eb:71:e4:4f:97:76:
66:7c:39:7c:0a:a0:41:e0:47:af:6b:46:45:ab:62:
91:82:8d:d3:b3:7a:60:29:fb:90:4a:32:c2:f2:52:
d7:25:10:31:1d:76:b9:4d:54:c0:d6:a1:c7:b9:e9:
60:4e:8d:38:29:d0:aa:ef:0c:bb:4c:e9:2f:25:27:
56:95:c0:e5:02:dd:c0:95:8c:5c:b4:3a:f4:f2:6d:
27:ee:ec:f5:58:42:ff:29:c2:0a:e7:6b:3f:ad:0d:
05:a9:ff:77:ab:73:93:2a:c5:23:70:84:f8:e3:8f:
e9:85:cd:10:98:0f:e0:4b:ed:03:53:3a:eb:4a:5d:
62:71:70:f3:de:5f:36:2b:9f:c3:b4:49:85:92:22:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:F7:E3:B6:CF:57:92:0B:A6:1A:D1:43:67:73:B6:7A:21:20:5A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JxL347bPV5ILphrRQ2dztnohIFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1d:2c:fb:63:40:45:cc:43:a3:32:a8:45:f3:c1:45:fb:dc:
1e:89:67:24:d6:5b:1d:2e:95:58:7d:70:73:cf:5e:65:45:c5:
c2:7b:a6:75:7b:a1:2d:99:c4:0b:8d:b5:99:ac:62:4b:5b:2e:
60:7e:cb:35:55:ab:3a:c2:ed:de:08:31:cb:6f:89:73:1e:4b:
a2:91:80:2a:01:60:e7:3f:34:40:22:a2:1c:40:35:9e:47:71:
61:96:6f:42:e6:b8:83:18:1c:63:78:ce:7e:b1:56:61:f9:c7:
d1:76:58:48:bd:ae:4d:ec:15:f2:09:a2:8e:49:a6:b3:a6:c2:
64:df:96:88:5f:96:1c:a9:e7:89:eb:20:6f:b4:e5:a6:69:04:
2c:b7:b9:5e:7f:65:8c:68:51:18:a3:38:42:12:66:36:1b:f0:
8b:ea:46:ed:0d:41:d6:d1:b7:7a:ae:b5:d5:e8:d7:c4:de:0a:
c6:7d:a8:67:80:b8:83:aa:b9:d8:14:11:61:93:5c:e0:dc:fd:
f6:ee:5d:e8:2f:2c:92:1f:e7:ce:4f:69:bf:cb:0e:2a:4c:74:
c9:57:d7:f7:82:1b:8e:a6:a5:f4:1f:95:3a:b5:37:54:34:91:
79:24:ff:16:1b:d9:2e:4e:a5:58:2e:b7:4f:a9:26:8b:55:4e:
e0:01:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:18 2026 by rpki-client