Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ojbRBpS2E3yE-HK8w_yzlQPJPCg.roa
File: ojbRBpS2E3yE-HK8w_yzlQPJPCg.roa (raw, json)
Hash identifier: 5hEmeo2vxfP0y4c68hZzLTHRKsfSkXAFOA0vb1Ig31Q=
Subject key identifier: A2:36:D1:06:94:B6:13:7C:84:F8:72:BC:C3:FC:B3:95:03:C9:3C:28
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0345DA85C8E669D2465407E97206267FB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ojbRBpS2E3yE-HK8w_yzlQPJPCg.roa
Signing time: Mon 24 Aug 2026 15:22:28 +0000
ROA not before: Mon 24 Aug 2026 15:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60982
IP address blocks: 194.77.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:5d:a8:5c:8e:66:9d:24:65:40:7e:97:20:62:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 24 15:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a236d10694b6137c84f872bcc3fcb39503c93c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:c4:4d:e8:42:47:16:94:c9:e6:3f:0e:6c:
83:7b:f2:73:9a:33:91:0a:d3:29:15:52:f6:c3:7b:
06:a2:c0:5b:bc:9c:07:10:9f:69:9f:90:ec:68:a4:
a1:18:63:e6:13:28:16:16:1b:35:ed:52:6a:6e:40:
ab:c1:9e:ec:3a:71:bd:4a:f6:8f:a7:65:0a:ed:c8:
2a:1e:be:90:f9:7e:64:1f:1d:71:15:b7:f7:9d:c4:
70:f2:07:bc:90:67:b3:e7:fb:bf:cf:52:1b:8a:c5:
cf:e9:55:45:6f:09:01:8f:96:8d:03:5d:c8:de:30:
9d:b4:c4:fe:ef:3e:47:bf:3d:23:f6:05:88:3f:d1:
f8:d3:b4:4a:94:1d:4d:fb:fd:1b:b4:b6:dc:20:96:
ac:62:a8:c2:16:42:57:40:e5:ff:79:b8:e2:b9:a1:
6c:71:e0:22:d7:a0:5d:2a:d2:86:51:dc:27:94:46:
3b:52:03:91:9c:a2:ef:35:c0:d6:f7:52:ab:70:0b:
a8:2c:90:53:90:88:8d:92:7f:71:76:10:cb:85:c2:
7d:1f:36:d5:da:f6:c4:9b:42:b5:78:4c:51:be:53:
d2:31:7a:8e:78:3f:71:4d:37:e1:ce:e6:0b:b7:94:
b5:9e:94:ec:7f:93:e1:54:ee:a0:18:52:4a:cb:d7:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:D1:06:94:B6:13:7C:84:F8:72:BC:C3:FC:B3:95:03:C9:3C:28
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ojbRBpS2E3yE-HK8w_yzlQPJPCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.69.0/24
Signature Algorithm: sha256WithRSAEncryption
12:47:de:5c:da:c1:42:c1:ea:b4:aa:90:a8:eb:02:e8:44:8f:
1a:bc:a8:5c:8b:97:15:57:67:2f:77:b1:0b:dc:c5:3a:4d:a2:
7b:1e:23:43:9f:c2:6a:8e:0a:05:a6:02:18:d9:14:17:93:3e:
c9:ae:04:94:47:ea:79:c6:eb:66:32:45:27:3d:13:f3:5d:57:
d1:39:05:d6:8b:2c:76:82:35:71:a9:a0:3d:0c:bc:26:f8:7f:
af:8b:68:21:ef:ec:f7:13:ae:0b:38:52:48:f4:62:54:9b:88:
4e:89:a0:36:12:10:ae:32:08:ed:e1:0f:03:a3:80:fa:e0:9f:
b7:50:59:32:5b:fc:5c:ce:d1:db:b2:b5:e7:36:53:d0:64:21:
e6:bf:4c:25:8d:87:8c:1e:73:74:ea:f7:2b:e7:75:78:28:1e:
c2:d4:3a:ba:75:da:bd:a5:38:32:c7:41:52:77:01:e9:e3:8a:
37:78:e8:48:97:20:b2:5e:8e:15:ae:82:52:21:3b:ef:bb:1a:
d6:3d:a6:b4:f7:62:c5:ce:ec:21:97:e5:39:d0:0b:9b:2e:0e:
4f:49:39:1b:26:4a:b8:7f:21:0a:31:0c:ef:bb:23:1a:ba:06:
68:bb:c0:b0:51:09:5b:d8:dd:ba:80:16:d4:7e:cf:79:31:84:
e6:87:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:18 2026 by rpki-client