Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Kx3OsE1iCFe7ccbYc297bn5wkBs.roa
File: Kx3OsE1iCFe7ccbYc297bn5wkBs.roa (raw, json)
Hash identifier: yQT8p98cmTqjiTG3DwHDxpPCDoZWimPCpwytziWnCDI=
Subject key identifier: 2B:1D:CE:B0:4D:62:08:57:BB:71:C6:D8:73:6F:7B:6E:7E:70:90:1B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F65D4A7DB9EA6F75756835D520370386C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Kx3OsE1iCFe7ccbYc297bn5wkBs.roa
Signing time: Wed 15 Jul 2026 12:51:03 +0000
ROA not before: Wed 15 Jul 2026 12:51:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 194.122.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:d4:a7:db:9e:a6:f7:57:56:83:5d:52:03:70:38:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 15 12:51:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b1dceb04d620857bb71c6d8736f7b6e7e70901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:a6:1d:f0:92:2b:7c:c8:8e:03:40:25:53:
ce:55:d7:f6:4a:3f:00:b4:8e:5f:c4:ca:6e:07:c4:
0e:b4:cc:7a:70:d3:e1:25:6f:b0:a6:cd:8c:69:68:
9c:4f:e7:eb:8d:81:3f:a3:37:9d:30:0f:6b:b8:93:
b4:7c:1a:c3:85:99:48:c0:f3:6f:0b:eb:3f:22:70:
b2:f7:f3:5f:af:8e:f3:d6:2f:5b:22:d5:28:d0:fb:
f3:62:2d:ab:55:6a:4c:3d:98:f9:26:76:d4:b6:3d:
24:0b:df:a7:12:a8:d6:82:05:e0:97:1b:f5:9d:48:
d6:57:28:8a:6d:f1:e9:4e:a5:f5:a4:ff:43:86:06:
24:93:62:08:a4:7e:c2:4f:a9:bb:2b:97:39:d6:b9:
14:60:13:50:dc:66:93:67:ec:07:1d:ea:a1:5e:da:
7c:b9:9d:b8:22:82:e1:2a:1b:b6:7a:7a:63:67:d3:
37:38:07:f4:38:88:75:50:a0:6c:c9:38:d9:ee:3b:
a7:ae:ff:21:3f:33:d4:be:0b:a1:9c:c5:7f:02:5d:
4d:9e:54:02:02:6d:a1:5f:7a:1e:9f:7f:bd:72:c8:
c7:9d:0f:6d:ba:57:3a:40:db:e8:af:fe:e0:c7:6d:
0c:57:65:34:7b:d3:2f:00:20:28:48:e2:24:11:26:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:CE:B0:4D:62:08:57:BB:71:C6:D8:73:6F:7B:6E:7E:70:90:1B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Kx3OsE1iCFe7ccbYc297bn5wkBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.122.84.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:a3:c7:5a:1c:e6:03:2c:38:f2:d6:b7:3f:22:66:dc:5b:28:
6c:e7:70:fb:95:47:a9:ce:55:bd:95:d0:91:89:b0:52:2e:ee:
fd:68:cc:d6:03:49:42:e3:e0:e3:7f:81:b2:6e:6e:8e:48:20:
8f:20:3c:ea:3b:b1:68:b7:a1:ad:55:74:ad:2a:2c:92:c2:64:
31:fa:65:3b:fd:64:4f:dd:33:6b:99:e2:f8:86:90:57:9f:5f:
56:7d:c5:eb:8d:0d:44:19:db:20:a2:87:b4:27:4e:bc:72:96:
af:7b:8d:c7:d3:35:d5:7e:0c:f3:22:de:5e:16:4d:42:26:5e:
e2:b9:d5:84:71:7a:4d:f6:11:dc:82:96:43:fe:a9:d8:c1:a7:
82:91:2d:b0:ee:46:6f:d8:75:f7:87:71:4f:d1:3e:0f:bb:de:
4c:c2:e8:19:f9:7e:cd:23:bb:9c:21:c6:07:6e:29:d1:fa:6a:
f0:8e:9e:e6:a1:15:13:55:68:71:a3:28:b0:f8:ca:c7:48:f2:
61:13:0c:45:fe:94:b1:6c:0b:4f:8a:93:ab:87:a2:26:88:99:
c1:15:09:74:12:ff:b5:ce:bd:06:29:7e:9c:9f:9c:de:02:58:
d9:bf:24:35:1b:89:98:39:bd:f6:9b:fe:5b:34:bd:16:a4:1e:
7f:e2:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:15:29 2026 by rpki-client