Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/muIGeMV8j91bhGE-VUU6M_wH6f0.roa
File: muIGeMV8j91bhGE-VUU6M_wH6f0.roa (raw, json)
Hash identifier: /wOTIt7dsuwwYUePYLedO8dgFFDJvE4SiPNfk+FEpZs=
Subject key identifier: 9A:E2:06:78:C5:7C:8F:DD:5B:84:61:3E:55:45:3A:33:FC:07:E9:FD
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A04EEFCB6324A02D059E87ADC0BA44927A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/muIGeMV8j91bhGE-VUU6M_wH6f0.roa
Signing time: Sat 29 Aug 2026 19:12:13 +0000
ROA not before: Sat 29 Aug 2026 19:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 194.231.139.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.208.0/24 maxlen: 24
194.231.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:ef:cb:63:24:a0:2d:05:9e:87:ad:c0:ba:44:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 29 19:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ae20678c57c8fdd5b84613e55453a33fc07e9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:51:1e:51:b6:93:cd:bf:22:8c:7c:44:d5:
0f:d1:ab:32:3e:d7:1c:8f:28:4e:d4:b9:35:ea:9c:
74:bd:01:7b:02:19:95:9a:4c:de:bb:d5:65:cb:18:
00:b8:7c:ea:0a:9d:60:7f:10:80:18:c3:cc:21:e4:
0b:ac:c4:e6:9a:9e:8d:6e:6d:1c:2d:f4:1f:c1:62:
31:98:e5:7f:08:08:34:5a:b9:21:9e:68:65:9f:19:
b8:02:1a:c3:3d:2e:b8:61:ec:35:65:0e:59:51:56:
cc:da:72:36:40:0d:97:23:4b:14:46:21:7e:49:ff:
44:5e:4d:b4:98:0b:f3:38:28:a0:b9:8f:1f:41:28:
55:91:b3:28:58:db:f6:46:1a:f2:f4:59:c4:67:2f:
cc:a9:cb:b0:4c:c1:76:92:bd:e0:fa:18:fd:79:33:
9c:cb:45:54:4d:10:3c:c5:09:2d:bb:ef:6d:da:d1:
0d:0e:5b:23:15:c5:db:85:a5:40:bc:06:51:77:ff:
bb:65:7d:09:35:9b:39:69:07:ce:4d:a0:cf:46:f6:
6c:9e:46:87:e0:55:da:74:5b:a7:14:d9:1d:24:58:
68:b0:72:e3:0d:13:f5:71:dc:cb:61:29:cb:5d:03:
36:7a:4a:6c:a9:e0:dc:b8:ee:21:3d:0f:5d:a5:4e:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:06:78:C5:7C:8F:DD:5B:84:61:3E:55:45:3A:33:FC:07:E9:FD
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/muIGeMV8j91bhGE-VUU6M_wH6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.139.0/24
194.231.158.0/24
194.231.208.0/24
194.231.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:8f:ba:96:2d:6c:2d:11:5e:39:0c:94:70:16:17:6a:c3:c1:
a1:0a:10:52:c8:10:8b:51:73:36:29:90:08:c6:91:9c:6a:0d:
f7:ba:e3:82:49:c3:27:b3:92:c7:9c:30:7e:d9:d7:be:a0:89:
26:fd:d5:73:ad:2f:c2:21:2c:cd:6f:50:57:d2:9e:82:cc:c6:
ca:ea:cc:62:a1:85:be:41:e5:28:9b:c3:24:df:f5:51:78:f6:
f5:20:ee:4b:c2:39:93:bc:9d:91:f1:bc:b1:3f:84:86:1c:13:
2a:1c:80:7e:f8:f9:94:ef:97:88:4c:46:30:d4:81:81:1d:21:
14:e4:1f:a6:2b:ae:ba:b9:62:0b:11:5f:03:4b:de:f8:a9:bd:
77:2b:1d:e7:4c:03:1c:78:60:e4:8c:6a:de:09:32:e7:c2:ef:
eb:b6:ff:ea:69:38:58:51:0f:1f:70:a4:e6:67:6a:e7:14:4a:
32:7e:e8:cd:6a:1f:be:8d:88:ef:a0:d5:22:b8:d3:05:d3:32:
9e:63:d2:47:30:45:0f:1c:07:52:36:a7:25:c6:15:25:e4:f8:
44:79:17:5d:d2:e3:71:c7:28:85:e9:c4:93:fa:d1:7c:8d:bd:
a6:d7:1a:84:76:30:66:46:37:78:da:48:e3:79:a4:01:fa:bf:
8a:c2:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:56 2026 by rpki-client