Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tM8fPzU_QQEuuBh4MCmufwWk-io.roa
File: tM8fPzU_QQEuuBh4MCmufwWk-io.roa (raw, json)
Hash identifier: xmVw+HvB9B7DzgcpsDf4t7MSlkwoZpEZzjJc/QiSy54=
Subject key identifier: B4:CF:1F:3F:35:3F:41:01:2E:B8:18:78:30:29:AE:7F:05:A4:FA:2A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16B3744690A235E0B59A9394AEADA939D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tM8fPzU_QQEuuBh4MCmufwWk-io.roa
Signing time: Sat 24 Oct 2026 00:02:26 +0000
ROA not before: Sat 24 Oct 2026 00:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 212.189.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:37:44:69:0a:23:5e:0b:59:a9:39:4a:ea:da:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 24 00:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4cf1f3f353f41012eb818783029ae7f05a4fa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d6:97:7e:99:ca:5b:f5:8f:3f:5d:2b:1d:36:
cb:dd:5c:c9:21:b5:13:69:c5:d9:02:2a:90:0f:ec:
b1:a9:e1:63:be:c1:e0:f3:f5:5c:d2:4a:23:48:34:
76:92:1d:2f:6e:2e:65:2b:c9:1a:0d:a8:63:09:95:
bf:19:19:0b:56:26:77:e2:3c:4f:e3:43:0e:c8:1c:
8d:6f:9f:29:35:d3:1b:0f:fc:eb:e2:69:2f:8b:cb:
da:dd:81:24:30:76:6f:6f:20:d8:c7:88:1f:19:4b:
d1:cc:56:9e:cc:2c:81:97:9d:1c:3e:2f:c6:16:1e:
d9:b6:92:50:a6:9e:a3:ac:26:a0:04:35:e9:86:c9:
73:80:22:c1:07:77:cf:90:f5:2c:3a:ea:1b:78:b9:
2f:39:1e:be:ad:4b:3d:04:29:40:80:b8:04:f9:ff:
e2:66:6a:99:54:ab:fa:35:4c:4f:d1:f4:07:f7:2e:
c1:b2:cf:d0:4d:e3:f4:58:11:3a:30:68:80:f0:76:
ac:26:6e:64:64:1a:9b:6f:5e:fd:c3:61:63:1a:8c:
3b:af:99:6f:2e:05:6c:69:9f:a6:82:31:b9:29:16:
8d:b6:ad:fa:8b:d0:88:80:ec:37:94:2a:39:f6:a7:
00:bc:e6:d4:12:04:26:6e:1a:0b:74:86:49:1e:4a:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CF:1F:3F:35:3F:41:01:2E:B8:18:78:30:29:AE:7F:05:A4:FA:2A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tM8fPzU_QQEuuBh4MCmufwWk-io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:94:6e:31:23:44:35:8c:76:f3:8f:c7:85:2b:51:c4:2c:4a:
73:24:1f:80:10:65:16:db:48:e6:10:2b:e3:39:56:f2:a6:aa:
77:e9:51:b5:20:26:7a:d3:a3:3b:73:f2:f6:28:0a:9b:d0:d9:
8b:61:9b:7c:c7:f3:65:7a:e4:5a:3c:a7:46:4d:5a:5a:7c:95:
87:be:be:64:b8:21:6d:49:2a:e0:4c:b6:7f:4b:03:80:8c:e3:
ed:19:54:6d:bb:c7:75:fd:58:a7:0b:19:e4:e0:15:53:8b:53:
d9:1b:46:79:41:51:cd:02:72:a0:ab:7e:99:df:71:36:fd:a9:
54:ac:2e:5d:33:f7:ec:b3:dd:02:28:ac:25:aa:48:8d:75:29:
1c:dc:79:99:e8:73:2e:8b:8b:c3:28:00:42:8a:fe:62:c5:3f:
3f:da:49:79:fd:35:3b:62:40:bc:fa:ce:a4:eb:e7:a9:e2:1d:
2c:04:30:71:ca:3c:9d:4c:3d:70:2c:51:7b:19:46:bc:9c:be:
57:38:56:c0:13:78:db:51:a6:65:b6:89:98:4e:77:ab:8a:83:
85:0b:15:e8:00:12:56:da:fe:8e:4b:37:80:aa:58:87:48:ad:
60:c6:68:b1:92:db:fd:41:e9:99:5c:36:9c:d1:d8:56:9b:24:
d0:fe:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:27 2026 by rpki-client