Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l42DqAp75tS_LGaPyE18RKJvJgk.roa
File: l42DqAp75tS_LGaPyE18RKJvJgk.roa (raw, json)
Hash identifier: z+Q0MgsAu6v0JtaLVpSDB70pSIKQeXric+/wKcMwirU=
Subject key identifier: 97:8D:83:A8:0A:7B:E6:D4:BF:2C:66:8F:C8:4D:7C:44:A2:6F:26:09
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EB1762C143E4C96BD7CA061F6459C4DB8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l42DqAp75tS_LGaPyE18RKJvJgk.roa
Signing time: Wed 10 Jun 2026 12:16:12 +0000
ROA not before: Wed 10 Jun 2026 12:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 194.231.214.0/24 maxlen: 24
194.231.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:76:2c:14:3e:4c:96:bd:7c:a0:61:f6:45:9c:4d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 10 12:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=978d83a80a7be6d4bf2c668fc84d7c44a26f2609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:92:e2:e1:80:eb:12:64:31:74:59:11:bf:
1a:f8:0f:c5:64:d3:10:4d:bb:22:f8:e4:d7:c7:2c:
a8:83:38:80:dc:c5:83:ce:bd:23:6b:71:05:4a:1f:
7e:01:fa:c8:47:51:69:34:5f:fe:f2:c7:69:23:59:
16:4e:a1:1a:73:76:89:3a:93:ac:a9:77:45:2f:00:
13:bd:47:24:67:eb:74:c3:74:b1:40:2f:cb:2f:04:
32:79:7f:f5:33:30:79:54:9b:6a:8c:4d:c5:f4:e9:
6e:ad:db:42:96:dd:3a:c3:75:09:ec:51:70:49:7e:
cc:8b:f2:65:7d:b5:70:73:2e:7e:21:2f:3f:fc:4a:
59:c7:2f:3d:68:98:cc:19:2f:03:3a:78:22:39:d4:
f5:80:0a:ac:b2:7a:f8:ea:f1:ba:9b:ed:7e:bc:be:
97:24:f9:11:f5:d9:42:de:2f:48:14:ac:7b:df:32:
62:5d:54:e7:07:41:97:a9:af:28:40:43:76:0d:a7:
79:64:73:41:3d:31:b4:c7:c0:90:b4:ef:5a:a5:27:
ca:a5:91:e8:1a:d5:85:b3:ad:1c:1c:86:37:13:57:
65:8a:f9:4b:14:65:15:9a:29:20:26:08:c9:79:5d:
70:ac:a0:85:ef:21:79:3d:c4:34:92:4f:2c:bf:d1:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:83:A8:0A:7B:E6:D4:BF:2C:66:8F:C8:4D:7C:44:A2:6F:26:09
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/l42DqAp75tS_LGaPyE18RKJvJgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.214.0/24
194.231.218.0/24
Signature Algorithm: sha256WithRSAEncryption
93:db:a0:22:15:26:81:12:ed:6e:f6:c5:23:41:4a:4d:14:9d:
6e:ae:b4:ae:0e:85:43:56:2b:b2:0f:b7:1e:dd:f1:f7:9b:cc:
ca:e3:cb:4f:d3:7b:dc:2d:37:ec:e8:40:18:f5:05:2f:d0:1b:
d2:61:d5:1c:34:4f:7f:38:8a:01:6a:25:d0:03:90:38:cc:46:
f7:21:81:be:f7:ad:6b:64:57:d2:f0:25:5e:f5:4e:34:2b:4c:
00:cf:45:54:fc:d3:42:26:c0:0e:d9:69:b7:d0:01:d3:f5:c9:
8d:66:86:73:b6:ef:09:9d:94:0f:bb:b5:e1:bd:3c:4f:00:a8:
43:a7:03:67:40:8c:a7:56:e8:e5:69:1e:7e:f6:4b:90:2a:f5:
e4:c5:ce:26:0a:ed:57:13:40:3f:1f:23:de:c8:c4:87:b3:9f:
60:a3:64:96:00:dd:42:3d:9b:93:39:6b:09:62:75:a3:f1:1b:
0e:57:7a:85:94:f3:ed:95:1e:eb:fb:d0:37:6e:19:24:f9:e3:
aa:37:53:34:65:38:30:12:c7:73:55:76:7c:be:9a:96:fa:2b:
93:2b:2c:31:36:c2:7f:dc:41:d0:5c:9d:09:4b:88:4e:bd:5b:
52:14:26:36:cf:a1:66:d2:8d:b7:66:ff:33:9f:5e:a7:ae:d4:
05:56:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:33 2026 by rpki-client