Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pNmKkYTovC6iAX7Fy_ovxrDcStI.roa
File: pNmKkYTovC6iAX7Fy_ovxrDcStI.roa (raw, json)
Hash identifier: br/XL7eCaySWQPj3hCF1pIxnGQyt3r18ZhfcJ3ZbA/g=
Subject key identifier: A4:D9:8A:91:84:E8:BC:2E:A2:01:7E:C5:CB:FA:2F:C6:B0:DC:4A:D2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16482F8C443FAA7F93006A0D20E9EEA6A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pNmKkYTovC6iAX7Fy_ovxrDcStI.roa
Signing time: Thu 22 Oct 2026 16:47:47 +0000
ROA not before: Thu 22 Oct 2026 16:47:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218729
IP address blocks: 194.231.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:82:f8:c4:43:fa:a7:f9:30:06:a0:d2:0e:9e:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 22 16:47:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4d98a9184e8bc2ea2017ec5cbfa2fc6b0dc4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:df:b7:3e:0e:94:69:50:7d:23:53:3b:e4:
f7:b0:2a:3a:e6:30:bd:5d:8b:ad:08:83:42:cf:e6:
ef:3d:da:29:c8:cf:7f:73:fe:fc:66:f7:98:33:1c:
b1:a6:b0:c6:3c:ff:eb:d6:12:56:bd:55:c5:4c:3a:
9f:39:3c:17:bb:bf:ad:de:43:82:3d:9a:7e:d1:09:
fb:f7:a5:2b:32:ff:2b:85:1c:69:c8:6d:1c:27:3d:
e4:1a:18:96:b4:23:77:e6:11:4e:b4:42:de:32:5c:
e7:22:19:48:8d:fe:33:66:d6:a2:3b:69:d8:4d:b1:
69:e1:48:15:80:f5:53:ac:b2:34:9e:94:07:c2:ee:
26:97:61:d3:01:81:19:cf:29:13:9d:62:61:78:3e:
25:b1:20:26:4f:5b:80:8d:0d:71:18:ab:f7:d2:fa:
39:f0:cb:e2:42:2b:a2:56:93:43:84:a5:7d:71:3a:
de:bf:90:fd:06:1a:8e:47:89:4d:fa:53:17:f8:ef:
96:ab:bb:9b:b2:70:6c:24:22:74:25:93:e6:13:c6:
fe:18:ae:df:7f:4b:4f:51:41:1d:8f:ae:af:5a:ac:
47:49:37:90:3e:a5:04:67:de:07:0d:ee:a4:59:f7:
3d:7e:e8:83:91:e7:0b:f1:9f:d3:64:89:14:f0:ab:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:8A:91:84:E8:BC:2E:A2:01:7E:C5:CB:FA:2F:C6:B0:DC:4A:D2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pNmKkYTovC6iAX7Fy_ovxrDcStI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.134.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ad:f0:65:be:6b:2e:3e:c9:80:dd:3b:33:b0:12:6c:a9:b6:
f8:3c:3d:a5:75:1c:80:e2:11:15:2a:14:3b:d4:66:32:e9:d9:
b8:6b:bd:63:03:7e:94:5d:03:16:1a:9d:a9:e5:3a:9e:e7:85:
b0:0d:31:ef:78:fe:70:43:36:0d:f3:ff:32:f0:12:fb:2c:e3:
89:bb:83:ce:fc:4a:b6:60:58:30:5a:23:a1:6c:e6:6c:99:dd:
db:88:e7:9b:4b:70:5a:3b:85:08:35:9b:93:c0:ad:3d:40:79:
f9:49:9c:e1:6d:2c:fd:3f:7e:9a:98:77:cd:88:2b:b3:5a:cf:
d8:02:6d:ee:f1:ba:6c:20:b3:da:a3:81:d9:be:5e:85:76:38:
2a:6f:b2:61:64:0e:06:79:b7:51:a4:6c:22:94:4f:64:7e:69:
c3:d2:7c:25:23:30:23:b0:2b:27:f3:35:cd:ce:f3:c5:6f:ba:
39:3b:77:ac:cc:16:02:fe:22:98:77:93:d1:56:c4:c6:7f:12:
fb:80:b9:16:aa:b3:53:13:68:3c:0e:d6:b0:ef:2a:24:e2:a6:
49:1e:98:5c:6c:24:57:9b:88:39:ef:6e:c7:e7:f5:90:d0:84:
86:0e:0e:67:d0:fa:3a:82:4f:79:3c:7a:42:f8:46:ed:7a:67:
79:93:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:25 2026 by rpki-client