Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uw9ve3aJ8Bjhdxhhac47VepVJaY.roa
File: uw9ve3aJ8Bjhdxhhac47VepVJaY.roa (raw, json)
Hash identifier: zcxWDErlN4XByxMtPnHBcvEp4jo6nnCLf8ymBxYqPgk=
Subject key identifier: BB:0F:6F:7B:76:89:F0:18:E1:77:18:61:69:CE:3B:55:EA:55:25:A6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A022E9E3A06599194BCE47CAE2848D2FD2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uw9ve3aJ8Bjhdxhhac47VepVJaY.roa
Signing time: Fri 21 Aug 2026 06:02:28 +0000
ROA not before: Fri 21 Aug 2026 06:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 193.141.2.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
195.21.133.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:e9:e3:a0:65:99:19:4b:ce:47:ca:e2:84:8d:2f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 21 06:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb0f6f7b7689f018e177186169ce3b55ea5525a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:e2:ac:8f:b2:11:ed:6a:09:18:83:e7:65:
de:e1:c5:8c:fd:fa:18:60:4d:92:75:eb:d7:29:53:
93:f6:d3:9e:32:3d:9a:4a:5b:85:a3:0e:26:4d:06:
fc:e2:0a:69:8b:3c:fb:81:cf:b9:78:68:83:cf:2c:
cc:64:9c:98:11:4f:31:7f:40:b1:fe:5e:c0:a4:e1:
13:28:d1:43:cd:7d:84:70:e0:f5:ca:78:4c:e4:fb:
5d:b2:54:a2:f8:ca:36:bb:ce:78:aa:99:c8:19:e1:
df:9d:5a:01:7c:ed:f8:5b:64:00:6d:35:4b:b2:a3:
c3:b6:23:92:5a:d8:49:00:72:89:48:c0:01:5f:a3:
c4:18:6a:d1:07:0c:d4:7b:a4:e6:a6:dd:37:62:a6:
e6:03:67:c3:e9:2e:8e:b0:f2:a3:cb:95:55:02:84:
2e:93:2c:a4:cb:32:02:f0:d5:c3:85:5b:cf:56:33:
26:fc:3a:a9:3c:44:e5:12:5a:a3:d6:aa:68:a3:3d:
ca:f4:04:5d:fa:6a:e7:68:a3:b0:56:36:c2:11:6a:
df:2d:e6:e4:42:5a:2e:bc:99:87:73:ce:d5:96:80:
b9:6e:e3:a9:31:c0:e8:f9:7d:27:da:54:d8:99:d7:
f3:44:f3:65:b1:f7:0c:85:a5:38:a1:f1:47:f0:3a:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:6F:7B:76:89:F0:18:E1:77:18:61:69:CE:3B:55:EA:55:25:A6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uw9ve3aJ8Bjhdxhhac47VepVJaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.2.0/24
194.77.6.0/24
195.21.133.0/24
195.21.145.0/24
217.8.197.0/24
217.8.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:24:f9:9a:58:a2:29:7a:da:77:fa:a1:f6:78:81:64:e8:27:
9d:35:dc:45:ad:ff:3e:cb:cb:39:2a:77:0f:36:62:62:53:1d:
f0:ec:a3:95:2d:be:9e:46:33:db:02:62:26:80:8e:4b:0c:1c:
93:66:51:60:6b:59:b2:e3:bc:f8:e6:fb:6b:85:28:81:dc:cf:
47:41:d5:27:d5:59:ab:f4:b2:e8:e9:f7:e6:7f:c6:19:d1:c4:
80:f9:42:fb:a4:e3:9b:1a:d0:35:1c:9d:61:51:59:f9:7f:d5:
34:61:a0:59:e0:dd:81:2f:fa:bc:ea:87:df:db:f3:01:d2:86:
c7:05:6d:19:52:25:51:c7:23:b5:2a:61:16:71:a9:8e:5c:63:
25:d7:a3:52:ea:32:23:42:53:10:ba:be:e3:ea:c9:10:db:04:
c3:f5:4d:7f:ec:6f:dc:8e:ce:99:6c:25:81:97:5c:30:ef:3c:
45:5b:8e:b9:7e:ea:b4:68:55:82:c5:73:60:7e:56:68:b8:0d:
54:73:e7:0f:95:e1:8f:43:6e:0d:97:d8:cb:07:0a:d4:32:1e:
da:1f:9c:53:44:54:18:48:60:11:8b:99:6e:9b:9d:8e:45:cb:
c4:91:9a:85:a8:f0:f9:6f:df:64:85:ea:12:f3:e0:a9:47:5c:
b0:ae:ef:30
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaAi6eOgZZkZS85HyuKEjS/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwODIxMDYwMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjBmNmY3Yjc2ODlmMDE4ZTE3NzE4NjE2OWNlM2I1NWVhNTUyNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHjirI+yEe1qCRiD52Xe4cWM/foY
YE2SdevXKVOT9tOeMj2aSluFow4mTQb84gppizz7gc+5eGiDzyzMZJyYEU8xf0Cx
/l7ApOETKNFDzX2EcOD1ynhM5PtdslSi+Mo2u854qpnIGeHfnVoBfO34W2QAbTVL
sqPDtiOSWthJAHKJSMABX6PEGGrRBwzUe6Tmpt03YqbmA2fD6S6OsPKjy5VVAoQu
kyykyzIC8NXDhVvPVjMm/DqpPETlElqj1qpooz3K9ARd+mrnaKOwVjbCEWrfLebk
QlouvJmHc87VloC5buOpMcDo+X0n2lTYmdfzRPNlsfcMhaU4ofFH8DqI8QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLsPb3t2ifAY4XcYYWnOO1XqVSWmMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvdXc5dmUzYUo4QmpoZHhoaGFjNDdWZXBWSmFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwY0CAwQA
wk0GAwQAwxWFAwQAwxWRAwQA2QjFAwQA2QjHMA0GCSqGSIb3DQEBCwUAA4IBAQBP
JPmaWKIpetp3+qH2eIFk6CedNdxFrf8+y8s5KncPNmJiUx3w7KOVLb6eRjPbAmIm
gI5LDByTZlFga1my47z45vtrhSiB3M9HQdUn1Vmr9LLo6ffmf8YZ0cSA+UL7pOOb
GtA1HJ1hUVn5f9U0YaBZ4N2BL/q86off2/MB0obHBW0ZUiVRxyO1KmEWcamOXGMl
16NS6jIjQlMQur7j6skQ2wTD9U1/7G/cjs6ZbCWBl1ww7zxFW465fuq0aFWCxXNg
flZouA1Uc+cPleGPQ24Nl9jLBwrUMh7aH5xTRFQYSGARi5lum52ORcvEkZqFqPD5
b99kheoS8+CpR1ywru8w
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:56:59 2026 by rpki-client