Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j2xdjXUhe_GgPw9OJNq1T1M0n6k.roa
File: j2xdjXUhe_GgPw9OJNq1T1M0n6k.roa (raw, json)
Hash identifier: 2MiV0LlW1DP8d971f1WHLqaKeZJj+/+csgz+ZSRannQ=
Subject key identifier: 8F:6C:5D:8D:75:21:7B:F1:A0:3F:0F:4E:24:DA:B5:4F:53:34:9F:A9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A00F95763624AFDCC27462EEE23C215D78
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j2xdjXUhe_GgPw9OJNq1T1M0n6k.roa
Signing time: Mon 17 Aug 2026 11:57:28 +0000
ROA not before: Mon 17 Aug 2026 11:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215787
IP address blocks: 194.77.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:95:76:36:24:af:dc:c2:74:62:ee:e2:3c:21:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 17 11:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f6c5d8d75217bf1a03f0f4e24dab54f53349fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:34:c0:a6:78:f1:a9:c7:97:2d:d9:11:35:
36:9e:9b:e2:d8:79:2f:ec:b9:20:78:36:27:cc:db:
c3:0b:b2:96:78:8b:18:a6:fe:c3:4e:fd:83:93:5a:
ee:64:2d:de:c4:21:b8:8d:c0:be:52:b9:0c:51:c7:
0a:12:35:67:6f:54:91:70:a3:8b:48:89:bd:d5:68:
79:1d:ee:bb:de:e0:b0:71:ba:00:7d:b2:c4:89:90:
0d:0f:1c:a8:7b:a0:35:97:aa:ab:d4:43:76:61:a0:
a2:b7:87:c2:dc:5d:75:a7:5d:84:70:ad:a8:b7:59:
b1:44:7a:30:5a:a4:a5:03:74:6a:fa:5d:2d:78:41:
03:a7:bd:d0:fd:42:cb:55:08:16:83:f4:f1:be:ee:
37:16:ea:4b:cd:08:08:88:18:9f:1d:04:ea:7d:9b:
40:b5:cc:33:61:08:7a:8e:7a:c7:c3:1b:26:df:d4:
d5:87:ed:94:76:d6:20:55:9f:1f:42:50:9e:71:f7:
02:61:01:f4:cf:fe:30:18:36:15:24:7d:e4:8b:7a:
84:e6:ef:b4:a4:93:01:d5:36:69:8a:c8:7a:22:13:
10:2e:2b:cf:5e:88:a2:7b:c7:6a:df:1f:1e:ee:93:
61:67:c9:06:d7:16:ff:34:55:da:ab:e1:0a:76:73:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:5D:8D:75:21:7B:F1:A0:3F:0F:4E:24:DA:B5:4F:53:34:9F:A9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/j2xdjXUhe_GgPw9OJNq1T1M0n6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:24:42:d2:f4:12:f2:a3:d5:91:3f:7f:5b:75:39:eb:3c:75:
28:0f:d5:fa:9a:a0:f3:1e:1c:ec:7e:10:a2:2d:5a:5f:a0:13:
dd:63:12:aa:f3:dd:da:63:f1:ca:bc:56:c7:9b:08:83:b3:83:
d5:a1:e9:7f:99:f8:08:f5:df:99:f1:b0:9e:a7:3d:45:48:93:
55:3f:7d:d0:2d:57:c7:25:cc:52:9c:d8:a5:2d:bf:67:3c:c2:
f0:21:97:fc:da:11:64:a2:d2:cf:7a:17:91:f2:31:04:39:69:
b1:be:64:06:fa:c3:b3:b2:58:81:9d:d3:c7:7b:b5:02:48:4b:
a1:c3:2d:4d:f6:a0:ba:b6:97:49:9a:77:96:06:24:05:1f:f5:
b0:40:fb:82:af:bc:66:25:76:eb:22:b8:3f:53:25:7d:22:fb:
79:d3:0b:d9:fb:fc:f1:8f:02:a2:af:b8:82:4a:f8:72:dc:59:
dc:7a:2f:6c:1a:85:61:2c:e8:9f:f0:08:ce:bd:d5:27:54:8c:
76:d8:3e:25:d7:23:44:70:36:c1:96:f8:3c:9a:dd:c5:de:ee:
10:18:d8:e8:06:01:81:ea:f1:52:e5:7e:84:5e:27:14:30:54:
31:61:96:30:0f:64:cb:4e:ab:b3:4d:2b:e9:9f:1e:a0:73:93:
6f:53:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:10:09 2026 by rpki-client