Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/N8L7ttE3MZAxfYBeAp1-Aqem9Dc.roa
File: N8L7ttE3MZAxfYBeAp1-Aqem9Dc.roa (raw, json)
Hash identifier: e305ie0IoefDatQvGvKaPyoYSWZnHkFtLLym3+Qumyc=
Subject key identifier: 37:C2:FB:B6:D1:37:31:90:31:7D:80:5E:02:9D:7E:02:A7:A6:F4:37
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EDAAC59A8112A72AC06AB29A7289AFDC2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/N8L7ttE3MZAxfYBeAp1-Aqem9Dc.roa
Signing time: Thu 18 Jun 2026 12:19:48 +0000
ROA not before: Thu 18 Jun 2026 12:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 194.77.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:ac:59:a8:11:2a:72:ac:06:ab:29:a7:28:9a:fd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 18 12:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37c2fbb6d1373190317d805e029d7e02a7a6f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:a5:ec:f7:3a:85:e4:54:4c:7d:5f:2d:52:
84:34:5d:cf:cf:72:d5:19:1b:4b:90:9d:1c:8b:87:
50:28:c4:5c:d3:cd:16:08:35:79:3a:1a:1b:b5:92:
49:c8:6d:85:6a:55:e8:5d:f7:39:51:4c:fe:86:75:
1d:0e:35:16:bd:75:09:68:f4:52:50:c4:59:d9:b6:
71:de:9a:a3:ec:94:d2:80:86:a6:b6:38:b8:25:a2:
3d:23:86:c7:bf:70:60:f8:64:53:e7:a3:98:ef:09:
65:f7:1d:4b:ed:df:f3:c8:5e:a7:e5:e2:5f:5b:1a:
15:55:e3:b4:2f:63:9d:bd:4c:a5:e6:58:ec:7d:24:
6c:7d:0e:0b:be:ee:52:14:1d:34:9f:db:f2:c3:78:
5e:31:bd:36:7d:75:40:a7:f5:00:ee:fd:56:65:73:
c1:98:6f:e9:6d:d7:c4:b5:6f:d5:5c:43:83:e9:2f:
b4:2c:f9:48:92:79:6f:b9:49:ac:68:9c:5e:94:16:
28:8b:bd:f6:e6:d1:ef:95:31:89:24:04:47:d3:02:
4c:06:e6:d6:9a:89:56:4f:5c:9b:dc:5c:63:0e:29:
37:48:78:fe:83:0f:12:91:8e:9d:b7:3f:d0:69:73:
03:73:44:8b:01:4f:14:98:91:ac:3b:4e:f3:4f:65:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:FB:B6:D1:37:31:90:31:7D:80:5E:02:9D:7E:02:A7:A6:F4:37
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/N8L7ttE3MZAxfYBeAp1-Aqem9Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.187.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a4:5b:2f:13:6f:87:ca:fd:4e:cb:6d:64:5c:70:90:f7:e3:
22:54:4b:96:97:74:22:86:1f:43:e1:04:23:58:0f:b9:56:9f:
d6:c5:d4:39:da:76:e9:c2:d1:26:86:29:ab:e9:02:07:c5:e2:
33:97:d1:6b:9f:56:9a:9d:45:29:35:f2:d5:e9:97:1b:47:6a:
f2:cd:6c:0c:72:26:98:7e:c2:2a:c4:67:37:99:56:52:95:19:
37:80:2c:f2:9a:0e:24:dc:cb:81:42:af:72:88:67:b6:2f:6f:
06:57:16:de:85:7a:7d:e9:a9:25:f3:ce:7b:e0:e5:fa:03:85:
4c:85:1a:ff:70:25:7c:87:40:50:b5:3f:e9:2f:d6:3e:09:41:
cf:50:2f:ab:18:68:1f:c2:88:ff:f5:f9:44:53:3e:36:f7:4f:
85:3a:c9:da:ae:0b:8e:f1:fa:22:50:3e:cc:df:a1:42:d4:4a:
01:a8:41:34:35:25:4d:5f:09:ee:f4:5c:a0:37:5e:f1:e0:e6:
ed:8c:2b:3c:0f:cb:72:fd:eb:59:1f:d8:81:a3:fe:b3:27:4f:
d2:b1:0c:1a:0f:fa:84:b2:75:05:09:a7:00:c5:af:cd:e7:fd:
d8:b7:88:10:47:78:35:e4:7c:03:f5:19:9f:19:0d:8d:31:42:
ff:03:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:57:49 2026 by rpki-client