Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rd3KbLWCwJ774xyjej4ZosYCJw4.roa
File: rd3KbLWCwJ774xyjej4ZosYCJw4.roa (raw, json)
Hash identifier: cSOhm1ueVDmsCWTnjtdl46vgqHDjnJ/sBCqD6PD+ylE=
Subject key identifier: AD:DD:CA:6C:B5:82:C0:9E:FB:E3:1C:A3:7A:3E:19:A2:C6:02:27:0E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A153BC699F342BEAB8F24D788671D2BF8B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rd3KbLWCwJ774xyjej4ZosYCJw4.roa
Signing time: Mon 19 Oct 2026 10:36:59 +0000
ROA not before: Mon 19 Oct 2026 10:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 194.77.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:bc:69:9f:34:2b:ea:b8:f2:4d:78:86:71:d2:bf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 19 10:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adddca6cb582c09efbe31ca37a3e19a2c602270e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:a7:e0:01:f0:03:8e:75:be:42:59:f7:4a:
c0:59:38:f6:8b:8f:bc:56:ee:48:84:87:3b:cc:ea:
9e:d7:c3:aa:d1:ba:8a:e0:9f:f9:2c:aa:84:21:8e:
b7:63:6d:a6:8a:fa:4b:19:00:3d:54:fc:73:d9:f7:
08:da:34:8d:bc:72:3b:92:7a:ca:66:48:a7:09:79:
2e:e5:29:45:d7:b4:4d:c6:7e:b2:5d:bf:83:d4:c9:
7e:a6:54:47:e2:59:28:76:e8:64:f9:e2:8d:56:a0:
1a:53:15:0c:cf:81:0c:a1:18:ec:3d:dd:48:7e:f6:
fb:41:a4:5b:1a:fc:8d:21:f8:47:9c:70:74:ca:0a:
a5:c3:5b:a1:60:13:43:f7:de:6e:99:96:f2:15:7c:
20:8f:3f:a9:aa:43:a6:26:e5:75:0e:66:aa:ce:60:
5e:4f:04:26:f2:4a:aa:d1:ea:50:f5:a6:eb:de:a0:
6d:62:27:5b:6e:7a:4e:0c:74:4c:aa:81:d3:b6:29:
08:2f:c3:0f:a1:9f:84:32:3d:1f:ca:29:f0:05:62:
95:fc:eb:5e:96:df:a6:ec:d5:6d:6f:a2:61:99:9a:
7a:ed:8b:aa:fc:0c:96:f3:2a:a0:dc:36:52:47:cc:
77:75:b0:09:48:21:5a:9d:07:50:e7:8b:67:d8:8e:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:CA:6C:B5:82:C0:9E:FB:E3:1C:A3:7A:3E:19:A2:C6:02:27:0E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rd3KbLWCwJ774xyjej4ZosYCJw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:83:a2:ff:b1:cf:21:2c:4b:71:b8:72:d3:09:ec:70:e6:36:
02:b1:7c:ec:36:56:30:7c:59:1b:e6:fc:6e:37:f0:9d:fc:4b:
ba:ac:bb:ae:9f:82:f3:e5:70:3f:8a:f1:f6:f1:17:51:60:7a:
1c:d4:ab:12:38:98:32:a6:85:58:85:32:1c:a0:b9:fe:88:bf:
57:13:57:41:d4:4a:10:cb:94:e5:27:4b:57:52:cf:15:74:19:
a3:12:99:f6:50:b7:c4:c3:91:4c:ff:eb:29:8f:9c:cd:0c:3a:
68:5c:75:56:cf:c8:bc:84:85:e4:2f:77:9e:1f:c4:28:81:ba:
c5:27:1a:8e:9d:12:c0:9b:14:2d:88:79:24:93:2f:f5:59:36:
48:2b:92:df:5b:19:2f:52:c0:b8:41:ae:ef:67:2f:d9:47:02:
fd:4b:a6:4b:42:ad:83:90:13:3b:4a:7d:02:5e:78:dd:0b:00:
64:fa:f4:b6:ff:b5:37:78:bb:bc:ec:be:bd:3c:b1:1d:b6:6c:
be:05:32:ba:bc:11:c2:4d:c7:de:05:70:f0:8e:bd:8e:60:d8:
3c:d1:36:2a:3a:00:39:e1:c9:64:ca:d6:e0:92:e3:fe:0b:2b:
f3:96:27:61:d4:d6:b8:65:58:de:74:e9:9e:66:53:56:cc:60:
d8:53:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:04 2026 by rpki-client