Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pxiDQIGhdwwhrlxqHVw0iYItsNs.roa
File: pxiDQIGhdwwhrlxqHVw0iYItsNs.roa (raw, json)
Hash identifier: gz4PMJGJDyBxsX08s3XrSDAMPS5Ljhjp9sZOSheP8t4=
Subject key identifier: A7:18:83:40:81:A1:77:0C:21:AE:5C:6A:1D:5C:34:89:82:2D:B0:DB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A07A87954D176C48F6A4F63E0997749DE0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pxiDQIGhdwwhrlxqHVw0iYItsNs.roa
Signing time: Mon 07 Sep 2026 06:21:41 +0000
ROA not before: Mon 07 Sep 2026 06:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218862
IP address blocks: 194.231.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:87:95:4d:17:6c:48:f6:a4:f6:3e:09:97:74:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 7 06:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a718834081a1770c21ae5c6a1d5c3489822db0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:e5:1f:91:ec:f0:bb:5c:f3:91:aa:f9:e1:
9d:cc:36:40:82:ed:0e:07:53:d2:7d:39:02:0c:04:
82:bf:b6:87:0f:45:c4:05:46:27:c6:9d:27:f9:46:
2a:dd:42:1c:2a:4c:05:57:08:2a:25:06:7c:b8:af:
bb:ae:62:a7:ca:6b:29:3a:a9:07:74:3d:75:7b:92:
9b:8c:48:b0:6f:20:67:15:88:d3:c2:80:c0:3c:03:
2f:b5:21:50:a3:03:a2:90:c9:f5:5c:b6:fd:7b:cc:
d8:bc:7e:af:5b:0f:32:d2:29:5f:f9:bf:f5:ed:31:
65:70:7e:98:4f:a6:6e:9a:1e:71:11:5d:c6:06:fa:
76:e3:36:b9:82:73:21:4b:0a:55:b1:75:a6:24:cf:
31:6a:fa:53:98:e9:e0:a9:2b:64:f7:8d:fe:a6:4f:
bf:45:18:c1:58:d5:73:57:f8:0f:a4:63:37:11:35:
28:9b:dd:5d:cb:4d:ce:e9:52:8c:98:fb:73:a9:92:
07:3b:ed:11:69:52:10:dd:20:49:e0:ad:01:6f:5f:
21:fc:c6:fa:bf:01:c4:10:7e:f4:13:11:f3:e6:ed:
b6:7f:c1:24:a5:9c:b0:01:e4:f1:20:78:5d:4b:95:
67:34:f3:b0:f5:02:f4:cc:d1:3b:96:ce:31:00:86:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:18:83:40:81:A1:77:0C:21:AE:5C:6A:1D:5C:34:89:82:2D:B0:DB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pxiDQIGhdwwhrlxqHVw0iYItsNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.202.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ee:88:7d:3b:c4:cb:b6:e0:55:68:7a:b8:bc:27:6a:f3:dd:
15:a9:b2:cf:d3:0e:05:d0:f2:50:a4:26:5c:49:9c:9c:e5:58:
3a:f9:69:44:bf:6a:d4:50:61:bb:43:72:e7:17:04:9f:a4:fe:
0f:a5:a6:84:2a:a6:46:23:f9:39:2c:e6:0c:5b:64:03:87:de:
22:be:a3:47:aa:a6:c3:80:83:ce:56:8c:0b:24:8e:80:f6:12:
51:9e:7f:29:d5:c7:0b:50:92:80:e0:93:20:2e:ba:c5:4b:53:
ce:4d:a3:43:5e:24:19:cd:70:26:f9:2f:55:57:21:3c:f9:62:
5d:bd:f5:69:4d:2b:ee:b8:cc:1d:64:30:22:bd:e6:9a:0b:be:
54:86:e5:f3:d5:1f:ff:84:49:81:a6:dc:0d:10:52:ea:c6:ec:
f5:dd:5a:e4:46:81:eb:8b:59:ae:44:5f:dc:ed:97:81:5e:e4:
0b:eb:3a:2a:24:c6:93:3a:02:64:da:ae:d3:18:60:c3:3f:93:
ae:89:84:30:8a:40:30:3c:f3:f9:bc:31:d5:48:3a:a2:cf:d4:
ca:9f:61:33:47:ee:32:20:bf:97:5b:11:82:b3:6d:58:95:01:
0c:80:d1:77:b4:f2:89:67:8c:ea:78:85:08:d4:aa:8d:13:08:
e1:07:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:08 2026 by rpki-client