Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f6ClAE_QuuRE_JOkgFgDbsUg2BM.roa
File: f6ClAE_QuuRE_JOkgFgDbsUg2BM.roa (raw, json)
Hash identifier: yCZG929FEI6u8k7gD97vu/KS6ppOlClMi4r7iZRuXME=
Subject key identifier: 7F:A0:A5:00:4F:D0:BA:E4:44:FC:93:A4:80:58:03:6E:C5:20:D8:13
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D2E97498A954F47B04E9D21D454CAADEC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f6ClAE_QuuRE_JOkgFgDbsUg2BM.roa
Signing time: Fri 27 Mar 2026 09:19:19 +0000
ROA not before: Fri 27 Mar 2026 09:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.202.0/23 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:97:49:8a:95:4f:47:b0:4e:9d:21:d4:54:ca:ad:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 27 09:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fa0a5004fd0bae444fc93a48058036ec520d813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:16:28:d9:b5:61:5d:5c:71:72:0c:00:72:
3a:cf:26:c7:23:67:f0:e0:a2:7e:33:8f:fc:12:01:
54:27:8b:01:5c:16:8e:1c:61:f8:d3:83:33:28:f7:
5f:ed:6d:c6:da:b5:2a:35:62:1d:2a:32:b8:cb:e4:
63:62:f5:60:36:1d:fa:42:92:5c:d9:ca:3d:22:9d:
b8:f5:ba:29:61:35:d0:2a:00:75:ff:ee:54:72:ef:
af:ff:b3:cd:97:32:77:52:7a:b6:69:25:b2:4f:55:
86:3f:cf:f1:b6:5b:4d:bc:58:9c:f5:50:07:7b:5c:
fc:05:88:65:85:86:4a:91:0a:08:15:46:81:86:18:
0f:e8:83:3a:9a:e8:bd:29:dd:fe:87:3a:8f:ae:bb:
2e:02:06:7c:84:1c:cd:8d:d9:70:a0:7e:99:bc:44:
fe:b7:0d:58:78:a5:db:2a:c4:ba:d7:60:02:af:23:
07:92:42:3c:ed:67:4a:23:8c:b0:7c:d3:18:1f:14:
15:ef:9e:ea:c4:bb:85:a1:85:c4:d5:60:8e:e9:5b:
e5:21:de:3c:2b:ae:2d:c1:f0:fb:c9:36:09:7c:62:
68:7f:ef:ed:bc:c8:ed:b8:93:cd:72:c1:c5:9b:3f:
a5:6c:25:5d:cd:46:97:c6:73:df:09:82:7e:62:51:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:A5:00:4F:D0:BA:E4:44:FC:93:A4:80:58:03:6E:C5:20:D8:13
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f6ClAE_QuuRE_JOkgFgDbsUg2BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.132.0-194.231.139.255
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:70:e6:5c:30:2a:0f:87:5d:22:9b:99:67:1f:c9:07:39:68:
4e:50:17:b6:b1:cd:e5:90:b4:9b:0f:7f:72:ad:bd:0c:4e:68:
af:a9:95:b6:96:e1:85:9b:74:1d:68:8a:f5:24:fa:b8:97:41:
e6:f8:28:97:4c:75:75:60:4b:cf:04:c0:aa:5d:e4:ae:c1:a9:
51:fd:b8:ab:2c:a8:9b:11:1b:07:d3:60:8c:7f:43:a9:ed:23:
b8:f0:a7:03:3e:98:c9:64:89:3a:b1:4e:ed:56:9a:3f:76:dd:
4b:44:7e:53:5a:9f:d3:a2:75:56:61:cf:19:e9:8f:a3:54:50:
2c:27:ac:57:56:48:3a:ca:51:83:15:0b:a5:80:c3:5f:eb:9b:
b1:19:47:14:8b:b6:b7:40:bb:7c:9b:9d:ba:4e:b7:cb:93:24:
1d:25:81:1d:89:db:99:8e:c6:79:9b:c0:ea:46:16:55:4c:9b:
df:41:9e:2c:97:ac:e6:1b:fe:1e:84:bc:7a:66:66:df:d5:5a:
24:b4:54:09:88:31:40:d9:a0:1d:3d:90:c4:a3:b1:73:99:a5:
14:61:8e:89:15:ac:12:4a:1d:52:af:91:1a:a5:ec:2a:ed:99:
6f:72:34:33:dd:eb:05:7e:ab:94:14:ed:67:55:67:d1:a9:d7:
71:97:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:19:11 2026 by rpki-client