Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lr53yIqRnE2vs5CkRU4f41O5gZ0.roa
File: lr53yIqRnE2vs5CkRU4f41O5gZ0.roa (raw, json)
Hash identifier: GkPGAjUxXimrhylROgnmEhUfCgDNyaR6Eyh0v0MabPc=
Subject key identifier: 96:BE:77:C8:8A:91:9C:4D:AF:B3:90:A4:45:4E:1F:E3:53:B9:81:9D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F98E6907453B0DEA0E33B308DBF0D177C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lr53yIqRnE2vs5CkRU4f41O5gZ0.roa
Signing time: Sat 25 Jul 2026 10:51:14 +0000
ROA not before: Sat 25 Jul 2026 10:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 212.189.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:e6:90:74:53:b0:de:a0:e3:3b:30:8d:bf:0d:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 25 10:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96be77c88a919c4dafb390a4454e1fe353b9819d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:32:37:2d:af:8c:94:76:9e:2e:03:29:33:
51:13:4a:03:37:e0:dd:66:e3:30:a2:48:14:e6:28:
c1:cc:ee:fe:0a:cc:19:ff:7c:a5:64:b2:1d:14:0a:
87:f3:8b:1b:b6:84:5d:cc:96:86:3e:21:ff:89:3c:
94:22:dd:7f:0d:99:39:0c:db:67:83:9a:1a:1b:8b:
06:93:0c:9f:74:ba:56:df:60:a7:72:1f:45:bd:ea:
11:41:03:e1:97:a1:f7:3f:42:57:fc:9b:d4:5d:bc:
d2:f8:89:2a:1b:9c:c9:8d:36:17:0c:e5:a4:da:ac:
bc:f1:3a:9e:66:cf:bd:3b:92:c4:7c:1b:43:51:3c:
95:ef:33:53:dd:99:ba:0c:10:59:b5:c0:08:ce:bb:
60:65:3c:3f:bb:77:33:12:f5:71:cf:33:d7:bf:40:
33:53:df:3d:b7:93:70:cf:93:83:ce:6b:56:2a:02:
59:d3:35:a8:76:e4:e2:f3:89:3a:f8:98:5f:81:43:
7b:2e:1e:7a:19:52:c3:67:4a:56:6b:7c:f2:de:01:
42:3c:c5:ba:9e:6b:f2:ca:2d:0c:94:0a:ff:86:5e:
b7:7a:6d:15:6c:85:0a:52:b3:30:d6:87:3b:98:8d:
6a:9e:cb:f9:2f:f1:b7:f8:bb:46:08:f4:15:4d:00:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:77:C8:8A:91:9C:4D:AF:B3:90:A4:45:4E:1F:E3:53:B9:81:9D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/lr53yIqRnE2vs5CkRU4f41O5gZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.39.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:b0:a6:81:40:37:5e:51:02:8d:35:c1:93:ba:c3:61:ca:b6:
1d:a6:ac:4c:48:60:e8:f9:41:77:29:6e:e2:f6:df:5e:64:59:
b2:b0:f4:0c:3c:00:37:7b:e8:f0:f9:b9:d5:97:3a:44:f6:54:
49:84:52:b5:2d:52:ef:19:8a:2b:39:3d:90:73:86:e4:dd:97:
f2:df:f4:0f:43:8e:42:d8:83:e1:98:16:88:77:6f:8b:42:12:
e2:e6:0c:21:ac:0e:ad:84:e6:48:87:2d:1d:a0:b9:63:c7:ba:
fc:b1:b5:e1:fc:5f:42:62:fa:f8:22:b9:53:8a:c5:a1:88:2a:
3b:4d:b1:6d:29:b6:0e:0c:12:e5:f9:bb:e6:af:c3:a5:c9:8d:
36:d4:63:5d:7d:4b:6d:e2:79:28:39:cc:36:b4:ae:51:6d:cd:
2e:5f:80:8a:49:92:9e:4d:a3:75:58:77:21:dc:38:a6:bb:0e:
0d:96:d3:6e:74:4b:62:0d:a6:ae:fd:40:ed:d7:5a:51:68:6c:
db:c8:11:9c:09:39:39:b8:a6:c6:3d:0b:c2:18:26:72:87:74:
8e:06:fc:18:8a:f6:20:1e:a1:86:fd:e5:38:68:07:37:87:21:
e7:40:3b:8e:bb:d2:8c:f1:68:77:6f:8e:9a:e3:0f:77:95:e1:
5d:13:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:56:10 2026 by rpki-client