Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rh6lL9jUl9hBwH2B1MUvY5ZsgiY.roa
File: rh6lL9jUl9hBwH2B1MUvY5ZsgiY.roa (raw, json)
Hash identifier: R44QfZ1oMKlCHSygsTicGmbEgwS9KYOFqEdgoisnVZw=
Subject key identifier: AE:1E:A5:2F:D8:D4:97:D8:41:C0:7D:81:D4:C5:2F:63:96:6C:82:26
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EB13C5BE5CE1935759407A76801118A6F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rh6lL9jUl9hBwH2B1MUvY5ZsgiY.roa
Signing time: Wed 10 Jun 2026 11:13:03 +0000
ROA not before: Wed 10 Jun 2026 11:13:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215904
IP address blocks: 212.189.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:3c:5b:e5:ce:19:35:75:94:07:a7:68:01:11:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 10 11:13:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae1ea52fd8d497d841c07d81d4c52f63966c8226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:4c:14:2b:4b:59:fa:08:96:14:1f:b6:99:
94:74:8f:ba:cf:c1:54:76:9b:ca:eb:d4:f3:1d:04:
85:2d:5d:91:04:8e:f8:7b:0a:8b:5d:c3:37:c8:b3:
04:a3:af:bf:80:5b:6b:61:2c:4e:38:21:be:bc:72:
c8:2f:d8:43:8f:dc:72:70:72:cf:60:b1:47:37:a8:
8b:05:b1:95:cc:48:b3:66:25:c7:2d:80:de:0f:eb:
4e:b9:10:21:ee:7d:e1:c2:a0:5a:d6:c2:a1:cd:37:
08:58:5d:06:cd:f5:d1:9d:01:39:43:ed:29:6a:72:
c0:7c:57:e5:be:4d:f1:02:e7:6e:a5:94:13:36:43:
8b:e1:a5:51:c2:0e:53:9e:1d:a7:d9:e2:49:0b:a6:
4c:92:99:e7:d9:dc:b7:97:82:1c:e9:b3:fb:89:bf:
15:a6:63:62:b1:e6:c7:57:38:fd:15:d6:72:86:57:
d5:40:a1:90:d5:ec:f5:15:68:3b:a5:5c:2c:24:1f:
eb:7a:44:60:b6:d0:76:f4:c3:62:82:ff:3e:c0:f5:
44:5e:7a:2e:29:9a:12:6d:e7:ea:8c:e8:8e:d5:26:
ed:9c:1b:75:12:4a:37:f5:8b:93:6d:ed:05:f0:5a:
11:e9:83:cf:89:28:f5:ac:68:ad:99:ed:01:96:76:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:A5:2F:D8:D4:97:D8:41:C0:7D:81:D4:C5:2F:63:96:6C:82:26
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rh6lL9jUl9hBwH2B1MUvY5ZsgiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.99.0/24
Signature Algorithm: sha256WithRSAEncryption
97:05:7e:0b:96:64:40:98:c1:f3:fc:d5:a1:5c:71:89:69:32:
69:a1:d6:7b:e8:65:32:df:e7:d2:81:f7:65:8d:70:50:9f:2b:
46:8b:99:a0:7e:00:0f:38:7f:29:a2:c3:77:fa:43:a5:ce:c3:
c0:f4:be:07:eb:48:a0:cf:3c:4c:10:95:ae:54:c1:c5:51:06:
78:d0:67:ec:ba:8b:01:f8:3d:43:dd:c5:67:ea:23:97:0b:ac:
1e:92:77:18:8b:c6:06:63:38:e3:d1:c7:54:a9:4e:4b:7c:67:
e4:01:71:9b:88:b4:f4:30:5e:5f:f9:77:c1:a9:7f:5b:d7:f0:
f9:7d:b9:63:a1:70:4b:66:04:a3:96:f4:9d:f1:2b:24:4e:d4:
0f:ab:1c:7c:30:9b:5b:d1:f5:cc:87:0f:74:32:78:10:f0:16:
f8:e3:41:ad:41:8f:7f:7e:49:a2:25:d0:df:77:97:64:8a:78:
56:c3:2a:32:42:30:a0:40:b0:88:90:9f:95:7f:79:26:4d:a7:
88:7b:a0:20:7a:13:9a:28:28:30:c2:94:80:2f:f7:83:0b:10:
fd:0d:76:25:c9:db:f4:60:d6:51:4f:0d:c5:33:28:34:4e:5d:
85:0c:6f:40:2b:c9:d3:3f:0f:aa:f1:e6:ba:f6:c9:9d:2b:42:
ea:be:ca:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6xPFvlzhk1dZQHp2gBEYpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNjEwMTExMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTFlYTUyZmQ4ZDQ5N2Q4NDFjMDdkODFkNGM1MmY2Mzk2NmM4MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MRMFCtLWfoIlhQftpmUdI+6z8FU
dpvK69TzHQSFLV2RBI74ewqLXcM3yLMEo6+/gFtrYSxOOCG+vHLIL9hDj9xycHLP
YLFHN6iLBbGVzEizZiXHLYDeD+tOuRAh7n3hwqBa1sKhzTcIWF0GzfXRnQE5Q+0p
anLAfFflvk3xAudupZQTNkOL4aVRwg5Tnh2n2eJJC6ZMkpnn2dy3l4Ic6bP7ib8V
pmNisebHVzj9FdZyhlfVQKGQ1ez1FWg7pVwsJB/rekRgttB29MNigv8+wPVEXnou
KZoSbefqjOiO1SbtnBt1Eko39YuTbe0F8FoR6YPPiSj1rGitme0Blnaw1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK4epS/Y1JfYQcB9gdTFL2OWbIImMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvcmg2bEw5alVsOWhCd0gyQjFNVXZZNVpzZ2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1L1jMA0G
CSqGSIb3DQEBCwUAA4IBAQCXBX4LlmRAmMHz/NWhXHGJaTJpodZ76GUy3+fSgfdl
jXBQnytGi5mgfgAPOH8posN3+kOlzsPA9L4H60igzzxMEJWuVMHFUQZ40GfsuosB
+D1D3cVn6iOXC6wekncYi8YGYzjj0cdUqU5LfGfkAXGbiLT0MF5f+XfBqX9b1/D5
fbljoXBLZgSjlvSd8SskTtQPqxx8MJtb0fXMhw90MngQ8Bb440GtQY9/fkmiJdDf
d5dkinhWwyoyQjCgQLCIkJ+Vf3kmTaeIe6AgehOaKCgwwpSAL/eDCxD9DXYlydv0
YNZRTw3FMyg0Tl2FDG9AK8nTPw+q8ea69smdK0LqvspG
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:29 2026 by rpki-client