Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/c0uY49CFc8y1b988r0h9AEWim9c.roa
File: c0uY49CFc8y1b988r0h9AEWim9c.roa (raw, json)
Hash identifier: Tq2DAnYXP2Ji8hpmjh1q9Bw7yKlN34zrJv7hvSztpMA=
Subject key identifier: 73:4B:98:E3:D0:85:73:CC:B5:6F:DF:3C:AF:48:7D:00:45:A2:9B:D7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047DBF773A7945269E14F88D484F76637
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/c0uY49CFc8y1b988r0h9AEWim9c.roa
Signing time: Fri 28 Aug 2026 10:13:13 +0000
ROA not before: Fri 28 Aug 2026 10:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 194.231.199.0/24 maxlen: 24
194.231.209.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:db:f7:73:a7:94:52:69:e1:4f:88:d4:84:f7:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 10:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=734b98e3d08573ccb56fdf3caf487d0045a29bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:b3:ab:b2:32:f2:f9:05:5c:cc:d7:11:88:
f2:90:02:ec:a0:6e:1d:6b:7c:23:6a:dc:73:74:e2:
e3:05:f0:98:2a:c3:fc:f4:7c:74:f8:85:28:18:8b:
a6:da:40:0c:f3:dc:8e:d5:d8:9c:f9:e9:75:9d:f1:
10:97:bc:bc:a2:d2:7c:0b:c9:3f:5e:24:a6:66:9f:
a8:ce:1b:da:0e:c1:d8:10:3c:12:16:a0:d4:a1:53:
61:35:89:00:65:8a:3c:df:9f:93:d5:33:8b:10:8f:
8c:2a:db:f3:26:b3:5e:5e:01:4a:1b:44:06:59:55:
0b:29:55:76:59:20:e3:de:1a:99:a1:33:02:5c:af:
45:bb:83:d0:0e:e3:a7:05:35:97:0a:16:fe:ec:94:
a1:3c:91:8b:62:52:67:42:39:d3:5e:81:55:6e:7e:
34:ca:72:e9:e8:35:05:b1:1c:2a:04:f8:f4:b3:fd:
2e:0d:04:92:bf:13:df:29:67:79:b4:4d:9f:e4:cf:
d4:b9:85:2a:a4:49:5d:bb:26:d7:51:c6:19:71:44:
18:7b:b7:7b:fc:cc:29:ec:8f:29:d6:a2:d3:fd:b1:
77:9c:be:bb:0d:f9:13:e0:31:f6:e9:7d:4f:7a:87:
fa:95:f5:f8:10:e3:1c:d2:31:58:ce:44:67:b2:0f:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:98:E3:D0:85:73:CC:B5:6F:DF:3C:AF:48:7D:00:45:A2:9B:D7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/c0uY49CFc8y1b988r0h9AEWim9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.199.0/24
194.231.209.0/24
194.231.213.0/24
194.231.223.0/24
212.189.95.0/24
212.189.110.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c1:fb:96:53:95:32:0b:08:8e:79:80:83:63:72:e2:5b:8d:
97:6d:c5:6b:7e:14:8a:1e:58:a7:41:38:0f:dd:cd:c3:1a:de:
ba:4c:50:66:73:65:95:bc:27:e3:a6:fb:8f:e6:84:a7:c6:a2:
61:d5:ac:99:85:0d:4a:68:29:ef:4a:35:ef:ce:81:d4:eb:c2:
99:43:e0:b3:51:04:3f:4b:28:c0:9d:62:6e:b2:0d:5f:4c:bd:
01:38:d3:85:62:89:90:74:53:15:b0:24:db:65:2d:e3:61:96:
80:78:08:b1:f4:01:93:ec:35:00:09:04:ef:06:ac:46:24:93:
60:34:d5:27:e3:f1:39:b1:5a:be:aa:84:73:a2:24:57:7a:7b:
77:81:a0:77:3d:8f:39:52:18:60:f8:51:b0:f8:c7:16:78:b3:
bb:d5:24:48:c3:26:4b:36:f1:a5:6a:f9:21:53:96:3c:a4:92:
eb:29:c5:91:0f:eb:b0:66:7b:d6:8d:5f:63:d9:ff:13:27:98:
b4:65:bd:3a:05:27:ab:e3:86:2d:3e:e2:de:3f:4e:db:c8:11:
d7:c0:b5:1f:a8:ee:2b:1b:07:eb:d1:8a:44:af:40:93:3e:47:
ac:fb:99:92:f0:a1:a4:7a:e6:0c:c4:fe:5e:6f:49:95:41:6f:
84:f8:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:21 2026 by rpki-client