Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/M54qXDwYkluRN5oPOljB_ZCRSLc.roa
File: M54qXDwYkluRN5oPOljB_ZCRSLc.roa (raw, json)
Hash identifier: SYtnsaJ8ZNe26Gh8GCzVVPaEN5Aq47Z00Gct08Xkx5w=
Subject key identifier: 33:9E:2A:5C:3C:18:92:5B:91:37:9A:0F:3A:58:C1:FD:90:91:48:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16B3EEAB30DA4A855DA22BF66B19E5197
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/M54qXDwYkluRN5oPOljB_ZCRSLc.roa
Signing time: Sat 24 Oct 2026 00:10:47 +0000
ROA not before: Sat 24 Oct 2026 00:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 212.189.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:3e:ea:b3:0d:a4:a8:55:da:22:bf:66:b1:9e:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 24 00:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=339e2a5c3c18925b91379a0f3a58c1fd909148b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:73:4b:50:69:22:fd:9e:3d:16:d2:50:24:
2d:87:7e:a4:5a:3b:99:e5:30:f8:08:8c:f7:ad:c4:
bf:d4:b6:da:91:41:9b:fa:3a:66:f1:b7:f4:88:6d:
5e:b8:f5:57:fe:55:12:a7:b3:c1:56:bf:c1:ce:b4:
f9:0b:48:fa:32:f9:4f:25:35:c1:ac:b4:21:78:3f:
c0:7b:8e:30:23:b8:70:fa:2f:4d:b5:2c:45:89:f5:
e5:c0:f3:15:da:14:56:e5:77:66:d6:03:50:22:c4:
16:b6:74:da:cf:c3:57:f6:e7:4a:a6:20:3c:dd:5a:
a7:8e:75:ce:dc:1e:97:2a:a1:92:e5:8f:76:6a:ff:
58:6f:51:75:0f:3e:0f:f7:ed:38:32:61:07:f2:9a:
0f:9b:b4:dd:73:53:92:8d:7b:4c:d2:b4:1f:40:56:
0f:ea:25:4b:1d:81:10:58:bc:45:84:fb:f4:2e:24:
a7:09:c7:a4:78:d0:20:e7:bc:ec:99:a3:57:87:f3:
d5:8f:c9:1e:00:48:14:59:f0:63:95:a8:79:04:8f:
36:67:57:95:ec:45:8c:86:83:46:d6:b9:23:09:cd:
9a:ad:25:87:5e:14:98:bf:2a:41:16:b9:b8:53:5e:
05:12:67:ef:b4:12:f3:74:02:fc:d1:32:d1:d1:62:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:2A:5C:3C:18:92:5B:91:37:9A:0F:3A:58:C1:FD:90:91:48:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/M54qXDwYkluRN5oPOljB_ZCRSLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:e9:06:27:31:e1:21:5a:5c:fd:f6:82:d1:1c:93:54:80:
7f:3b:96:80:a8:e1:b3:d4:7d:65:38:34:e3:26:00:56:9c:4f:
f6:6f:27:6d:02:5b:e5:ab:d8:23:95:83:0c:dc:ad:57:43:21:
ec:36:69:5c:9f:0c:6d:21:e7:bc:00:4b:cf:94:55:5a:a5:86:
7d:67:12:9d:84:49:3b:d3:bb:3d:72:3f:65:71:af:14:d9:3e:
34:77:6f:fb:7f:f5:55:ee:9e:a3:bc:fb:cf:8e:68:3e:22:b3:
cd:bc:f4:56:17:1d:28:99:3f:29:77:b6:da:76:49:f9:e1:c2:
10:22:12:6e:7f:00:3b:dd:1b:72:79:2f:42:4a:32:4c:c8:49:
41:ff:e3:9e:82:60:41:ee:c9:8c:fe:54:8f:e4:21:e2:e1:b9:
92:39:db:24:f3:05:03:19:67:78:16:9a:67:ae:6f:92:9f:70:
21:53:33:07:38:e1:7b:0d:5c:52:0a:07:19:5f:b5:2e:cb:7c:
65:8f:4f:2b:0b:44:58:15:45:4f:c5:05:a9:ab:72:ac:b5:fa:
3f:aa:ff:cb:c1:7e:13:02:ec:cd:0a:e4:bb:57:3a:da:b8:ba:
0d:3a:fb:49:e3:9e:33:71:c6:45:c3:dd:2e:a1:18:69:be:90:
bc:1e:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:50:19 2026 by rpki-client