Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S_84yMs0x-Nebb0leIMyS08zvOc.roa
File: S_84yMs0x-Nebb0leIMyS08zvOc.roa (raw, json)
Hash identifier: 3yckyEWqCQ/qCHw4DxpOoAUixX7gf5LiBYFEIiBbvgc=
Subject key identifier: 4B:FF:38:C8:CB:34:C7:E3:5E:6D:BD:25:78:83:32:4B:4F:33:BC:E7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A068AD45CC653109789D701C1D65D0968E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S_84yMs0x-Nebb0leIMyS08zvOc.roa
Signing time: Thu 03 Sep 2026 19:09:41 +0000
ROA not before: Thu 03 Sep 2026 19:09:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 194.77.70.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:ad:45:cc:65:31:09:78:9d:70:1c:1d:65:d0:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 3 19:09:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bff38c8cb34c7e35e6dbd257883324b4f33bce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:65:14:8c:1b:60:3a:57:b5:5e:25:c7:ed:
b2:81:58:9f:57:77:51:c3:ba:9e:86:10:1a:a6:38:
2c:6d:a8:35:b0:15:4e:08:95:f2:d1:24:c4:fd:ae:
75:9c:7b:0f:41:49:f8:12:d4:c0:74:29:16:20:e0:
4c:db:2d:2a:5a:27:0a:f1:9c:f2:8b:98:3b:d3:6d:
ef:3e:d5:ee:da:f7:1d:97:3b:b3:27:e0:ea:d3:56:
59:ec:0b:72:f3:f8:83:bf:00:96:a8:6c:86:d0:10:
0f:30:1b:3f:e5:18:ba:5b:21:0d:33:0d:b6:c5:a3:
09:9c:e9:c0:20:56:be:0d:28:5b:62:d3:11:d7:e6:
d1:28:7d:76:04:9f:8f:03:e8:0d:58:d1:c1:36:58:
c8:38:e8:62:a5:84:1f:f3:e6:49:68:54:ba:25:4c:
96:d4:e8:6f:ea:24:92:0f:68:7e:7e:51:a2:91:41:
19:31:ac:51:2e:5f:55:c4:8a:a4:1d:c3:f1:6e:9a:
00:c8:c1:ff:66:74:9e:1e:bd:59:5c:9f:a3:aa:f7:
5d:5b:fb:87:f8:54:9a:ab:57:f0:de:73:9e:37:84:
5e:80:ab:9a:d6:a9:6d:b2:f8:00:e5:ef:62:a2:da:
32:7a:79:12:10:9f:0f:be:f5:7c:d7:5f:bf:7f:90:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:38:C8:CB:34:C7:E3:5E:6D:BD:25:78:83:32:4B:4F:33:BC:E7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/S_84yMs0x-Nebb0leIMyS08zvOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.70.0/24
212.189.88.0/24
212.189.104.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7c:88:0c:eb:d1:3b:ba:f5:66:71:a8:d3:8b:79:ad:ca:c4:
57:89:94:6d:4d:c3:97:d7:a8:19:02:bc:86:d5:7c:e4:7a:c7:
62:8d:c3:cb:6c:59:1e:18:bc:f6:4d:bb:ec:c5:aa:cc:0c:98:
63:71:b7:76:51:2c:90:61:a3:6b:d9:75:ef:06:3e:8e:4b:d5:
42:d3:8e:c2:7f:14:3d:c4:de:a0:13:d3:0a:de:33:6b:82:c9:
67:4a:1f:b3:95:5b:8c:b7:8b:a0:5d:e8:7c:80:59:c1:f3:47:
5e:b4:19:a6:f6:58:64:3d:d6:14:56:e2:c4:69:33:43:52:ff:
3d:d4:57:9a:a8:52:c3:6e:6f:3b:f5:f7:42:f1:a4:ef:27:4f:
01:c5:13:1a:27:f2:cd:43:25:86:1e:85:a1:9e:71:d8:af:29:
ce:92:90:2b:1f:ae:5a:b8:f5:7e:1b:f6:a2:51:9e:38:3f:5b:
58:04:09:9d:66:cf:f3:0a:b5:b9:b1:64:39:97:a7:00:fe:33:
cf:a0:e5:a5:b3:0f:04:fd:61:d2:bb:71:14:31:02:94:b4:ac:
b8:49:2f:fb:d2:7d:e2:54:50:e8:07:e9:8f:41:12:9d:6b:34:
d7:77:89:11:30:af:d9:33:9e:8d:ea:69:e1:5a:3c:2a:a7:c5:
40:0f:88:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBorUXMZTEJeJ1wHB1l0JaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTAzMTkwOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmZmMzhjOGNiMzRjN2UzNWU2ZGJkMjU3ODgzMzI0YjRmMzNiY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgBlFIwbYDpXtV4lx+2ygVifV3dR
w7qehhAapjgsbag1sBVOCJXy0STE/a51nHsPQUn4EtTAdCkWIOBM2y0qWicK8Zzy
i5g7023vPtXu2vcdlzuzJ+Dq01ZZ7Aty8/iDvwCWqGyG0BAPMBs/5Ri6WyENMw22
xaMJnOnAIFa+DShbYtMR1+bRKH12BJ+PA+gNWNHBNljIOOhipYQf8+ZJaFS6JUyW
1Ohv6iSSD2h+flGikUEZMaxRLl9VxIqkHcPxbpoAyMH/ZnSeHr1ZXJ+jqvddW/uH
+FSaq1fw3nOeN4RegKua1qltsvgA5e9iotoyenkSEJ8PvvV811+/f5BiPwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEv/OMjLNMfjXm29JXiDMktPM7znMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvU184NHlNczB4LU5lYmIwbGVJTXlTMDh6dk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwk1GAwQA
1L1YAwQA1L1oMA0GCSqGSIb3DQEBCwUAA4IBAQB4fIgM69E7uvVmcajTi3mtysRX
iZRtTcOX16gZAryG1XzkesdijcPLbFkeGLz2TbvsxarMDJhjcbd2USyQYaNr2XXv
Bj6OS9VC047CfxQ9xN6gE9MK3jNrgslnSh+zlVuMt4ugXeh8gFnB80detBmm9lhk
PdYUVuLEaTNDUv891FeaqFLDbm879fdC8aTvJ08BxRMaJ/LNQyWGHoWhnnHYrynO
kpArH65auPV+G/aiUZ44P1tYBAmdZs/zCrW5sWQ5l6cA/jPPoOWlsw8E/WHSu3EU
MQKUtKy4SS/70n3iVFDoB+mPQRKdazTXd4kRMK/ZM56N6mnhWjwqp8VAD4g9
-----END CERTIFICATE-----
Generated at Wed Sep 9 17:26:56 2026 by rpki-client