Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/k6D46peSp5F5T1gXmB5f-qsBQc4.roa
File: k6D46peSp5F5T1gXmB5f-qsBQc4.roa (raw, json)
Hash identifier: UyUfppbyaMWCeZEm75KMtgRAgvQDejae638DLMRNn54=
Subject key identifier: 93:A0:F8:EA:97:92:A7:91:79:4F:58:17:98:1E:5F:FA:AB:01:41:CE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A05876C1F5B9BD244138368EBBF191F151
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/k6D46peSp5F5T1gXmB5f-qsBQc4.roa
Signing time: Mon 31 Aug 2026 15:36:12 +0000
ROA not before: Mon 31 Aug 2026 15:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.149.148.0/24 maxlen: 24
194.77.235.0/24 maxlen: 24
212.189.62.0/23 maxlen: 23
217.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:76:c1:f5:b9:bd:24:41:38:36:8e:bb:f1:91:f1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 31 15:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a0f8ea9792a791794f5817981e5ffaab0141ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ff:69:aa:1a:22:6d:32:20:8d:52:bc:0e:af:
98:81:ba:2e:e9:b4:e4:db:63:53:a5:0f:f6:7b:be:
29:41:93:da:b8:8a:32:b0:59:77:2f:4a:4a:1e:c9:
91:7f:3a:a6:3a:76:fd:f0:c2:a8:ec:ae:a3:33:06:
69:5b:7c:d9:61:44:7f:65:67:34:db:a3:55:9f:25:
9b:77:46:0a:ad:dd:f0:6e:9d:f3:2b:fb:de:87:56:
c3:8b:06:42:7b:43:0a:88:de:95:96:cf:e8:50:ac:
2e:9b:62:f2:1b:0c:cd:1a:f8:fd:20:f9:aa:7c:cb:
c3:f3:d6:d3:b9:79:1d:1f:a1:4e:66:92:d2:a2:32:
ce:eb:e7:a7:3c:2c:72:39:71:6a:9a:22:d1:7e:77:
76:d4:75:1c:7a:82:88:d9:23:20:16:2b:b9:32:2a:
1d:ea:d6:b6:79:94:f7:db:d3:82:66:d2:74:dc:95:
4e:57:9a:17:4f:de:3e:91:da:23:2b:bd:35:8d:b9:
d9:2b:1f:54:5b:d0:5f:da:ac:0a:84:f4:78:ad:c8:
0f:2b:27:9b:c4:df:dd:7d:a9:0a:00:5d:94:8b:fa:
6d:73:14:ad:39:e2:98:ff:32:12:37:df:a7:ce:32:
5a:16:28:72:0d:ae:98:d1:a8:6e:9e:11:56:21:a2:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:F8:EA:97:92:A7:91:79:4F:58:17:98:1E:5F:FA:AB:01:41:CE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/k6D46peSp5F5T1gXmB5f-qsBQc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.148.0/24
194.77.235.0/24
212.189.62.0/23
217.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f7:d2:61:33:97:0a:a9:fc:25:cd:37:f4:19:31:c8:23:94:
6d:49:6b:95:c4:d3:0c:f0:09:3b:bc:8d:16:83:27:c3:1e:21:
44:09:78:82:02:24:0b:b6:5b:b2:8f:63:09:39:33:2e:29:00:
40:c4:82:a1:1d:23:14:dc:7a:a9:29:de:22:c3:0e:9e:53:f7:
43:0d:fd:88:e0:ed:af:e4:b5:63:bd:a4:0c:8d:34:f7:a0:8b:
61:65:94:db:72:81:5e:07:25:2d:3d:f7:3c:d6:0e:7d:37:a1:
eb:de:2b:73:a5:7c:2f:ed:4e:59:b0:f7:3c:a6:cf:50:9d:e5:
ec:3d:03:23:cb:d8:0b:d1:4f:94:0b:44:93:c4:b7:76:65:69:
c5:07:34:81:b6:8c:41:92:1a:ea:6b:8f:69:d6:70:e7:4a:c9:
2d:12:c1:86:6e:ab:d9:90:19:53:b9:80:83:13:d2:ff:5a:cb:
fa:25:8f:c7:6a:ab:71:a4:7e:f7:16:c3:49:5a:79:ae:e2:16:
a3:4f:81:71:da:f4:13:d4:ae:f9:9b:65:05:e1:86:44:b2:be:
32:38:2c:17:a6:ce:5b:53:ec:f2:ad:88:0f:c5:c1:af:be:63:
77:36:08:2d:a1:15:66:6d:26:a3:d0:5f:8d:4c:32:e5:2d:48:
5d:7a:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:38 2026 by rpki-client