Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_CMdZBOc31ZQCobJa4ThrMt42x8.roa
File: _CMdZBOc31ZQCobJa4ThrMt42x8.roa (raw, json)
Hash identifier: sfEHOSq280pmLYVKm2lKgAlYAdFg2FcRwnq+weIspM4=
Subject key identifier: FC:23:1D:64:13:9C:DF:56:50:0A:86:C9:6B:84:E1:AC:CB:78:DB:1F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EA7773FD4B8E85DF0FF1ED695BE3C4652
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_CMdZBOc31ZQCobJa4ThrMt42x8.roa
Signing time: Mon 08 Jun 2026 13:41:10 +0000
ROA not before: Mon 08 Jun 2026 13:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215703
IP address blocks: 212.189.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:77:3f:d4:b8:e8:5d:f0:ff:1e:d6:95:be:3c:46:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 8 13:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc231d64139cdf56500a86c96b84e1accb78db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:69:00:f4:b4:b6:78:7b:b8:35:95:48:a0:
2d:36:68:56:02:e9:74:c9:1e:d6:ac:6e:f1:34:d6:
af:d1:06:30:9f:cd:6f:29:50:b2:d8:fa:b8:0e:73:
42:b1:52:b4:d9:e2:72:5d:1c:02:4e:da:a4:42:9f:
bc:c6:24:12:66:97:4c:f3:a6:81:4e:bd:d1:4b:b2:
c1:d7:64:23:17:cf:3e:8d:9d:5b:35:bc:63:84:7b:
c2:68:37:f8:29:34:ba:cd:68:6a:be:41:65:72:94:
1d:a4:f3:b1:c9:1f:0c:41:2f:48:8a:19:09:86:a3:
70:5f:88:45:9a:4d:0d:d9:19:bf:b6:2f:3b:cd:00:
b6:18:92:46:b2:90:db:3d:52:f5:f7:8a:61:37:be:
33:35:95:f4:17:27:f4:d2:f9:e2:37:de:00:d5:2f:
a4:42:db:41:5a:45:9a:ce:c9:c9:95:9e:44:8b:ea:
1f:22:6a:0c:b0:5f:dd:8b:9d:de:8e:c6:5d:89:3c:
12:16:86:bf:f9:f0:b9:05:af:0a:96:1a:16:eb:10:
a7:91:7b:dc:3e:f6:d4:46:56:10:ff:74:18:70:ee:
79:3f:05:7b:9d:78:d5:21:05:99:2c:f3:b6:f4:1a:
e7:d6:58:20:9e:b1:7c:fb:96:6d:11:83:dd:f8:96:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:1D:64:13:9C:DF:56:50:0A:86:C9:6B:84:E1:AC:CB:78:DB:1F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_CMdZBOc31ZQCobJa4ThrMt42x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:72:7d:18:30:60:27:5a:4e:33:78:97:09:02:48:be:16:30:
89:f5:97:69:73:13:51:50:f1:b6:81:b1:7d:d8:ff:e2:27:b3:
b1:e7:9e:57:3a:3a:5f:b3:e6:ed:95:12:56:d6:3b:80:98:56:
0d:87:73:84:66:26:ba:ab:d4:43:20:5d:6a:fe:40:5f:2f:64:
71:cc:70:b8:b2:a1:46:8f:4b:9b:54:0a:a2:94:a7:d6:42:e6:
a9:1b:5d:97:73:88:3e:d8:51:79:9e:9d:eb:97:ba:e2:bc:8d:
7d:05:7b:46:aa:7e:18:24:88:97:04:b0:ea:c1:0e:59:74:21:
de:53:5e:1e:02:b1:ba:d7:de:d1:eb:bb:62:d4:59:02:56:99:
5e:0b:2c:14:96:14:c8:19:fd:51:86:62:36:ea:d8:75:cf:33:
36:07:54:35:41:65:25:13:f2:91:c6:8e:1e:aa:7a:8c:c8:02:
03:87:15:3a:2b:84:46:cc:46:02:95:e0:79:f6:24:ac:0f:58:
bb:c1:2b:55:c7:47:f2:ed:5e:e2:09:11:43:9c:a8:59:56:da:
db:fc:a7:5b:19:07:4f:c2:56:f3:ed:fa:05:88:f6:63:ab:90:
dd:9d:da:b5:1c:9f:2b:0e:84:99:e4:24:e7:86:e8:aa:05:af:
96:80:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:31 2026 by rpki-client