Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mz_S6hTwJmRjKImYMtpj_BLJDqc.roa
File: Mz_S6hTwJmRjKImYMtpj_BLJDqc.roa (raw, json)
Hash identifier: RRNf0bZm2/Gk0WpI0EDWz0U279DW+OyQpL+MibvW8YE=
Subject key identifier: 33:3F:D2:EA:14:F0:26:64:63:28:89:98:32:DA:63:FC:12:C9:0E:A7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E442DDE104357A26C8D7D03B9F9B57803
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mz_S6hTwJmRjKImYMtpj_BLJDqc.roa
Signing time: Wed 20 May 2026 06:58:37 +0000
ROA not before: Wed 20 May 2026 06:58:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153810
IP address blocks: 194.231.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:2d:de:10:43:57:a2:6c:8d:7d:03:b9:f9:b5:78:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 20 06:58:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=333fd2ea14f026646328899832da63fc12c90ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:16:36:ad:9c:be:ea:c7:5a:d9:53:8e:62:
6b:ff:74:8f:bd:44:4e:7b:3b:d5:fd:29:57:98:4e:
ea:b8:8b:60:ac:c0:40:5a:e1:1a:70:5c:89:d6:00:
90:04:c0:a3:d4:fa:fb:bd:97:1d:8f:d3:80:db:43:
5b:95:7d:a1:0f:94:f7:96:42:4f:0c:c1:c9:0b:91:
97:9b:4d:43:37:ea:cd:88:70:e7:aa:9e:5f:b0:68:
1e:bc:27:90:b6:9e:31:3e:2a:3c:7b:61:94:b1:62:
0a:7c:46:4e:5c:54:86:1f:cd:1f:57:08:92:f9:e8:
f4:6d:bb:df:19:3a:e3:0a:e4:20:80:23:44:ce:0f:
f1:ec:ff:b3:78:82:7b:0e:78:ba:13:72:c1:68:7f:
f9:fb:c1:47:56:2a:f9:f5:db:c9:72:2a:72:ac:eb:
8c:47:8c:a3:d6:aa:a3:f3:9c:1d:90:10:44:db:16:
08:6a:f3:89:f3:38:45:41:a6:8c:af:97:51:26:74:
eb:b1:f3:6f:03:fa:1a:17:17:60:16:e1:a7:0c:65:
3d:40:a5:dd:61:8a:07:45:41:3e:28:1a:5d:a1:db:
08:58:a9:c8:4b:4c:2f:7c:e8:56:57:e2:8a:06:69:
63:bb:89:3e:9e:32:90:4f:43:81:87:f7:38:db:e9:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:D2:EA:14:F0:26:64:63:28:89:98:32:DA:63:FC:12:C9:0E:A7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mz_S6hTwJmRjKImYMtpj_BLJDqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.129.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ec:d3:02:cb:d6:96:eb:8f:45:38:a3:ae:56:1e:14:45:f6:
da:87:f6:62:06:63:9d:4d:11:03:26:ff:a4:01:5b:8b:de:5a:
37:16:74:ed:cd:2c:48:b0:fa:c3:fb:4c:7b:6e:02:e8:7a:29:
3b:74:28:1d:70:3a:e4:12:0c:da:9d:98:ac:81:90:e7:fe:d2:
22:8b:bb:b3:1e:a9:c7:bb:65:26:59:3f:79:d2:40:2e:9c:b5:
ff:fa:b3:e1:05:d6:fd:35:2f:eb:ba:03:fc:0e:a1:ab:7a:7b:
e2:50:05:67:90:1e:e9:9b:a3:e9:04:c9:73:6d:d9:1d:47:ab:
b4:33:e1:b6:93:fa:3a:29:4d:55:1a:50:c9:15:4a:01:bc:a4:
66:99:00:3c:52:38:d3:2a:17:d0:2c:e4:6f:b5:cf:bf:37:e9:
f9:e7:74:62:bf:ca:fe:a4:d6:51:c7:57:38:79:3e:8d:13:e2:
7b:31:4e:8c:fb:97:ce:34:58:53:81:89:90:da:f5:86:65:ad:
ca:d3:9e:94:aa:c8:0e:22:54:21:82:47:b7:28:46:c4:86:9c:
ca:c9:ab:7b:25:64:fc:37:8c:04:7c:72:a0:89:db:a6:98:ce:
96:39:b5:5c:5d:ed:be:2e:50:48:8e:32:06:f1:ff:93:8c:74:
8d:5e:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:45:35 2026 by rpki-client