Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cJb_f_u4x7uhgqaWVw9HR042YKw.roa
File: cJb_f_u4x7uhgqaWVw9HR042YKw.roa (raw, json)
Hash identifier: p9RQcMpefAFDa1V/BagZZtmp2lEVOgqR4N98k6kwvgI=
Subject key identifier: 70:96:FF:7F:FB:B8:C7:BB:A1:82:A6:96:57:0F:47:47:4E:36:60:AC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EB1E31D5F20D429F0294D68D5CA8374C9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cJb_f_u4x7uhgqaWVw9HR042YKw.roa
Signing time: Wed 10 Jun 2026 14:15:11 +0000
ROA not before: Wed 10 Jun 2026 14:15:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 212.189.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:e3:1d:5f:20:d4:29:f0:29:4d:68:d5:ca:83:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 10 14:15:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7096ff7ffbb8c7bba182a696570f47474e3660ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:4b:e5:94:e0:86:6e:1f:8c:36:6c:3e:92:
d6:ca:c6:f0:cd:63:3c:1a:93:a5:56:a8:c4:f0:79:
4a:8e:7d:30:00:bc:ea:f9:fc:c5:bf:94:c9:73:72:
55:76:a8:b6:07:97:3c:8a:9b:58:ea:ad:af:09:ab:
10:68:79:0a:08:40:32:b4:0c:c4:a6:ed:f1:18:83:
96:09:ac:27:b9:1f:54:3f:f4:b8:69:52:1c:e6:21:
d3:3b:57:9c:7c:ce:86:fe:bc:0b:7b:51:eb:19:11:
b2:f5:cd:ba:b5:9a:9c:35:e8:45:24:3f:d7:70:3f:
f2:01:4d:03:39:27:c2:e1:cb:d3:b1:4c:aa:40:27:
80:4f:aa:f9:ae:bc:a0:e0:96:05:1a:bf:3a:98:62:
73:da:31:4f:74:61:a0:4c:55:2a:7a:d1:60:51:01:
54:c0:77:7d:d0:b2:22:a9:23:26:31:d9:2b:62:e8:
46:07:22:ec:1d:15:8c:36:f8:93:50:1d:97:e5:fa:
42:94:33:2b:e9:48:35:f5:ae:4f:0a:0a:6a:aa:03:
9c:f5:88:74:04:9b:b2:d5:9d:19:ff:d7:d2:72:1f:
88:88:ae:a7:7a:0a:bf:a9:a8:47:73:e7:5a:35:d2:
38:77:ab:15:d3:4c:ec:29:d8:99:e1:c0:fc:ed:d2:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:FF:7F:FB:B8:C7:BB:A1:82:A6:96:57:0F:47:47:4E:36:60:AC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cJb_f_u4x7uhgqaWVw9HR042YKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2a:27:46:48:50:d5:69:f9:ea:23:3b:60:63:10:5e:ce:6f:
ab:35:0b:ba:2e:85:8c:dc:f2:4e:62:c7:8d:a0:e5:65:e8:00:
30:60:8c:98:54:52:7a:84:ed:15:98:32:4b:75:62:35:a9:0e:
d4:42:60:ee:0c:0a:fb:5d:8e:2e:e1:41:c7:fc:30:7e:1e:38:
48:d5:e0:6e:b5:8e:74:24:90:de:35:12:f0:e8:fb:31:3d:52:
40:b6:60:1f:99:1d:82:0a:79:9e:a7:24:18:cd:28:b8:7a:59:
31:d6:54:3e:ed:24:d7:9e:8d:74:27:16:26:64:7f:3a:97:19:
53:cc:ec:2b:6b:e2:bf:4c:ac:b8:fb:94:9b:87:2c:8e:cf:a2:
60:19:88:be:a9:cb:7a:93:22:74:4b:9a:5d:e7:fd:0b:f1:9a:
2e:ef:3d:78:8f:f6:44:2b:96:27:42:dc:4b:8c:2f:54:4c:83:
af:9c:99:6c:54:7e:18:98:33:ce:66:83:fa:fd:f2:a4:f9:0d:
4f:46:10:5a:f1:c3:6b:4f:fb:c3:e3:2c:22:c8:ae:e5:eb:11:
45:1a:f3:0a:d0:2e:1e:48:96:40:8c:5e:f5:47:a8:16:43:44:
cc:fb:bd:12:38:d4:30:af:2c:60:eb:9f:c3:fd:33:96:09:fb:
30:97:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:30 2026 by rpki-client