Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PhH544k89w8C48cuYsG2dzP9UPA.roa
File: PhH544k89w8C48cuYsG2dzP9UPA.roa (raw, json)
Hash identifier: R3aNmZb0iaV9k4F5SqgoGjNwkRmC1knaDN2vZeSgKA8=
Subject key identifier: 3E:11:F9:E3:89:3C:F7:0F:02:E3:C7:2E:62:C1:B6:77:33:FD:50:F0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F1A30F79F3D18CA0CBFB7E930A75CC4B4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PhH544k89w8C48cuYsG2dzP9UPA.roa
Signing time: Tue 30 Jun 2026 20:20:44 +0000
ROA not before: Tue 30 Jun 2026 20:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 194.77.93.0/24 maxlen: 24
194.77.196.0/24 maxlen: 24
194.77.199.0/24 maxlen: 24
194.77.221.0/24 maxlen: 24
194.77.223.0/24 maxlen: 24
194.122.86.0/24 maxlen: 24
194.231.192.0/23 maxlen: 24
195.21.130.0/24 maxlen: 24
195.162.255.0/24 maxlen: 24
217.8.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:30:f7:9f:3d:18:ca:0c:bf:b7:e9:30:a7:5c:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 30 20:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e11f9e3893cf70f02e3c72e62c1b67733fd50f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:7b:bc:54:08:61:b9:29:bc:91:aa:92:0e:
4b:13:03:9c:33:da:fa:c4:f3:3a:eb:26:2e:49:be:
42:40:d1:09:aa:32:3d:a2:8f:e4:b7:0f:3f:03:7e:
81:37:66:26:21:f8:00:3b:dd:4c:5c:e4:54:1a:60:
ef:eb:2a:e9:f6:e4:39:63:03:fe:e8:65:6a:28:61:
d4:12:3a:ae:1e:a0:23:1e:d5:c5:e4:12:31:cd:e8:
3c:e3:36:bb:bb:3d:28:7a:6c:6e:85:3e:52:8f:31:
5d:04:81:9f:a3:21:f7:28:e6:65:49:15:69:b6:15:
85:d3:b5:09:f6:4e:73:3a:86:68:f1:40:bb:3b:a0:
48:c9:a0:3d:d3:32:99:70:ab:42:aa:af:9f:bd:c0:
78:be:32:37:0b:ed:f1:dc:73:58:dd:cc:14:13:e8:
fe:68:d2:5e:5e:f9:9b:95:c2:3a:16:22:3e:d3:82:
20:1a:98:4a:c8:73:b3:a6:81:9e:44:e6:91:a5:b0:
0a:60:90:72:54:9a:32:bc:36:07:f1:a4:36:d2:2d:
d3:42:3c:af:0e:c3:95:5f:ab:0e:c7:0e:a0:b8:71:
89:59:54:f7:b0:ca:6c:c4:5f:98:86:21:61:9f:45:
72:75:97:55:ff:4b:52:dc:96:50:01:89:22:ab:45:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:F9:E3:89:3C:F7:0F:02:E3:C7:2E:62:C1:B6:77:33:FD:50:F0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PhH544k89w8C48cuYsG2dzP9UPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.93.0/24
194.77.196.0/24
194.77.199.0/24
194.77.221.0/24
194.77.223.0/24
194.122.86.0/24
194.231.192.0/23
195.21.130.0/24
195.162.255.0/24
217.8.204.0/22
Signature Algorithm: sha256WithRSAEncryption
63:61:49:3d:05:88:53:e6:34:f1:a3:8a:79:33:ab:9a:a5:64:
de:50:49:52:38:37:88:74:56:59:42:98:73:e8:e8:ad:4b:c0:
13:9c:4e:95:2c:ac:d1:18:2c:40:9f:aa:76:0c:54:b4:1c:d6:
37:cd:b4:33:7a:54:32:fa:b3:72:f8:b9:87:43:ef:05:f6:42:
63:2a:c4:a9:56:d1:0c:36:c7:57:52:22:43:63:3e:2f:c8:88:
ff:55:77:78:f2:d3:50:fc:5a:65:c3:51:fd:e2:26:db:b9:95:
2d:90:2d:6f:58:bf:c0:b7:99:14:27:f5:2b:10:d1:77:7f:4d:
67:9e:40:d6:d1:70:09:e9:f6:d2:33:c8:9b:af:9e:a2:b3:4d:
49:2d:d7:b2:9c:bd:71:fc:a9:15:6f:c3:44:8b:b4:75:4b:30:
21:de:8c:b3:13:86:c7:5b:c3:f1:55:42:1f:fd:94:30:eb:39:
1d:8f:c1:47:b7:c1:0d:6e:b1:c1:a1:2a:dc:eb:14:6a:32:91:
27:75:10:cf:0a:68:42:39:32:63:47:03:21:6f:e8:b8:01:b6:
cb:51:f2:1b:b7:93:c9:4a:1d:a5:e6:79:0b:e4:67:b7:a9:cb:
8b:cc:a7:14:e6:9a:80:13:45:c4:37:86:02:dc:0e:14:6a:37:
2b:00:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:53 2026 by rpki-client