Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RPMLHPQAJtnywoR5dWvF5HQROGo.roa
File: RPMLHPQAJtnywoR5dWvF5HQROGo.roa (raw, json)
Hash identifier: rlJ2rq3q+upvhRK2062AJS/l4extDbXgjF5nYaWka5w=
Subject key identifier: 44:F3:0B:1C:F4:00:26:D9:F2:C2:84:79:75:6B:C5:E4:74:11:38:6A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16B374357FB4E61413AE8E6832166C9F1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RPMLHPQAJtnywoR5dWvF5HQROGo.roa
Signing time: Sat 24 Oct 2026 00:02:26 +0000
ROA not before: Sat 24 Oct 2026 00:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 212.168.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:37:43:57:fb:4e:61:41:3a:e8:e6:83:21:66:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 24 00:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44f30b1cf40026d9f2c28479756bc5e47411386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:a0:4e:2e:8e:f9:54:6a:a4:04:bf:46:21:
5f:d8:0d:96:94:ba:04:ff:aa:07:2b:9d:77:10:5b:
cd:07:c3:87:9e:c9:bb:4b:d7:65:77:97:ae:65:06:
61:7e:da:4b:b7:ab:c3:ce:76:85:0f:88:29:fd:9d:
35:1b:69:bd:10:2b:ad:bf:7c:f4:5e:52:fc:c3:73:
b2:5d:07:17:70:8d:42:63:c7:ac:5f:ae:84:af:8c:
99:13:2d:ca:a3:51:60:18:6e:7e:cc:29:28:4c:01:
9f:4e:57:48:4b:e8:a5:e7:f2:0d:30:89:54:00:33:
d2:f2:3a:33:64:e4:05:60:24:28:96:74:07:ca:e8:
ff:dd:63:ee:63:fb:30:31:d5:f8:63:b5:a7:41:9d:
05:bb:c2:7d:e7:7b:9f:9c:b7:d6:12:36:9e:26:09:
d2:f3:17:4d:5c:00:cd:80:4f:3a:09:81:02:a6:53:
0a:a1:e9:df:39:4f:31:2a:b2:9d:c0:31:60:ae:f8:
9d:64:6a:9a:9a:e4:41:18:93:fc:ca:cc:e4:86:e6:
cf:13:4b:aa:89:3b:1e:aa:70:d6:38:d8:29:dc:92:
e7:55:4f:a2:47:ac:8f:3d:f6:4e:73:e4:a4:03:fc:
2d:64:a6:27:fb:26:55:7d:6f:64:a7:16:15:bc:e9:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:0B:1C:F4:00:26:D9:F2:C2:84:79:75:6B:C5:E4:74:11:38:6A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/RPMLHPQAJtnywoR5dWvF5HQROGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.168.176.0/21
Signature Algorithm: sha256WithRSAEncryption
70:1e:21:ee:c7:c5:f9:5b:3f:9b:f6:2d:e1:ea:68:8f:51:32:
9b:83:cf:09:66:16:8a:78:cd:6c:e9:9b:6a:fe:24:52:0d:cc:
0e:4f:64:ca:bd:c3:df:ec:02:a2:03:4f:c6:52:64:b0:3d:de:
bc:16:b3:d5:46:a4:69:15:00:00:60:36:7a:b7:c4:7f:3d:9c:
33:a6:f4:ea:29:37:2d:0c:eb:9a:a9:cd:e6:fe:09:28:f6:d1:
77:aa:b8:45:9b:ba:a3:6d:56:63:59:24:c5:52:a4:31:b3:eb:
4e:c8:d9:a9:69:91:b8:60:73:68:25:cb:6c:1f:a5:b4:3f:8b:
fd:43:62:a0:19:27:24:1e:46:16:ae:09:4e:e9:df:c5:5a:94:
ae:7f:0d:a7:1d:da:c4:d5:61:f9:ba:03:15:02:22:7f:9f:67:
e8:6f:37:11:dc:f5:a9:ea:3a:3a:30:41:c5:6a:98:cb:cf:f7:
0c:3b:f9:ad:69:94:ef:20:74:bc:20:c5:1b:4d:87:f2:40:02:
b8:fa:c0:4c:50:69:8a:3b:2e:75:f8:66:8c:96:bf:82:70:8d:
80:35:22:96:84:67:0e:c4:8c:8d:e7:5c:05:91:e0:b4:be:35:
bf:e1:23:17:32:c6:e2:e9:47:dc:bf:aa:6c:3f:b0:96:ac:e0:
32:c6:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:39 2026 by rpki-client