Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pxuzcvERae5iN0o1WEVjHCZ_KeE.roa
File: pxuzcvERae5iN0o1WEVjHCZ_KeE.roa (raw, json)
Hash identifier: BqF+ExWjbnnD3bFhFedb3rJKMokTbU3bQbZlKREWH5A=
Subject key identifier: A7:1B:B3:72:F1:11:69:EE:62:37:4A:35:58:45:63:1C:26:7F:29:E1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F998F072BD9B864441C1CE0657A157439
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pxuzcvERae5iN0o1WEVjHCZ_KeE.roa
Signing time: Sat 25 Jul 2026 13:55:15 +0000
ROA not before: Sat 25 Jul 2026 13:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 195.162.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:8f:07:2b:d9:b8:64:44:1c:1c:e0:65:7a:15:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 25 13:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a71bb372f11169ee62374a355845631c267f29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:58:97:2b:15:d7:dd:98:d1:70:66:da:2d:
da:52:22:92:d8:88:a3:ae:ea:10:5e:a7:b5:dd:c7:
57:18:76:21:fa:14:9c:21:cc:9b:65:22:c0:2e:72:
05:bb:6e:ed:1d:b6:ac:c4:f0:f6:73:b2:48:d8:7d:
ff:fa:06:d6:01:88:84:6f:67:05:48:34:a4:e2:95:
05:35:28:85:b9:f5:1f:12:b8:e9:fc:a0:aa:38:7c:
ce:b6:73:74:c4:26:30:7f:e9:8e:90:ab:9c:2b:4b:
f9:9d:31:96:b8:fb:23:6b:e2:fd:c5:59:95:b0:7c:
2d:e1:b0:6f:98:0f:cc:a8:0a:f4:38:13:32:21:27:
43:73:65:ac:6f:b1:47:6f:e4:c5:87:58:9a:e8:fd:
8a:d8:19:89:18:2a:76:93:a0:4f:ee:4f:e2:25:1d:
83:6c:fe:d9:74:fb:cc:4b:48:20:bb:7a:d9:11:01:
50:0f:31:fe:33:bc:50:97:5b:62:f2:61:b2:86:7a:
67:f5:df:44:cf:c2:e9:f3:a8:b3:41:91:16:49:7c:
09:82:ce:e5:45:e2:b3:e6:49:0d:27:60:72:b6:ac:
e7:59:2b:63:e4:3d:b3:95:eb:06:6d:d2:f5:94:8c:
85:ab:88:12:96:a7:e2:ab:b9:49:64:3e:d7:d3:8e:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:B3:72:F1:11:69:EE:62:37:4A:35:58:45:63:1C:26:7F:29:E1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pxuzcvERae5iN0o1WEVjHCZ_KeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:eb:d5:a9:f2:c3:7b:0b:c2:16:9c:1b:48:d5:ab:ee:8d:a6:
d3:5b:2d:18:94:b5:52:bf:50:c9:88:f1:4d:ea:02:08:6a:e9:
f1:e7:ef:27:ab:53:ab:61:c9:5f:99:2e:99:05:83:46:99:3a:
c9:b7:54:83:e2:3c:9f:0e:e6:e2:46:c1:62:1f:e8:04:30:bc:
09:8b:e5:0a:11:b8:7e:cc:01:9b:8c:0b:63:3a:16:a8:84:28:
ca:14:89:89:42:4c:f2:c8:7d:53:b0:63:7e:7e:51:55:a3:33:
c2:0a:81:6c:fd:67:b6:fd:b2:27:7c:b2:ee:a4:9d:9d:5f:f0:
c4:ce:69:f4:ca:2f:10:de:f7:48:70:1c:58:fe:66:40:b6:51:
2a:9c:ee:05:97:88:f4:3a:5c:27:23:4e:5c:46:6f:47:33:43:
94:4d:1c:61:ac:f6:5f:d9:91:ce:6c:45:57:7b:44:1f:26:2b:
1d:d7:bf:ab:3a:d3:8f:08:75:bc:fa:db:66:39:20:1d:8b:1f:
e2:61:c4:85:00:ab:0f:0f:80:05:ef:52:9f:3b:de:a4:cf:5e:
c6:ce:43:4a:a2:fa:b5:4d:df:c2:76:0d:4b:69:3d:5d:49:1d:
e4:05:78:f3:0c:98:6f:1a:de:93:ed:4f:97:3f:50:f0:98:f1:
e4:ec:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:56:09 2026 by rpki-client