Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/vrTWqkJQeGAyHsrKcr6Ar9MbdAM.roa
File: vrTWqkJQeGAyHsrKcr6Ar9MbdAM.roa (raw, json)
Hash identifier: 6n5WFil8NlWS1jKx8r2YhJChMM+j8YhzAsEH3u5fbM0=
Subject key identifier: BE:B4:D6:AA:42:50:78:60:32:1E:CA:CA:72:BE:80:AF:D3:1B:74:03
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1B1E666D7189D091B41B4E95C2C734411
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/vrTWqkJQeGAyHsrKcr6Ar9MbdAM.roa
Signing time: Fri 06 Nov 2026 17:27:09 +0000
ROA not before: Fri 06 Nov 2026 17:27:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218202
IP address blocks: 194.231.142.0/24 maxlen: 24
217.8.204.0/24 maxlen: 24
217.8.205.0/24 maxlen: 24
217.8.206.0/24 maxlen: 24
217.8.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:e6:66:d7:18:9d:09:1b:41:b4:e9:5c:2c:73:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Nov 6 17:27:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beb4d6aa42507860321ecaca72be80afd31b7403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:29:06:81:9f:7a:88:93:31:93:09:9f:ee:
69:35:07:17:cb:f4:94:7a:52:bd:dd:6f:99:49:ca:
92:fd:ba:a3:4d:8e:93:88:a7:e2:c0:91:70:02:8a:
4a:24:84:5c:85:c6:ee:40:0e:1d:27:cd:ac:f0:9b:
40:76:09:8e:a6:11:02:96:f3:7a:0f:36:a7:04:bb:
e6:58:f6:22:9a:cc:f8:0e:80:9c:e1:2b:11:9d:c9:
03:37:0c:20:7e:cc:5f:49:84:c8:a2:6e:a8:68:f0:
31:86:7e:ce:56:83:0b:7a:5d:ec:00:2c:b7:86:18:
71:7a:77:15:97:f5:ac:7d:8e:68:7c:7c:e6:ef:02:
fd:0e:ef:9f:26:1f:9b:fe:73:9e:b1:0b:04:e6:f3:
a7:87:11:75:ea:b5:9d:25:c2:01:84:a8:7b:92:b5:
36:f3:b2:fd:6a:a7:6d:15:18:f6:c1:0d:ec:49:4b:
86:fc:29:9e:b2:7e:c1:84:71:4d:f8:fc:f2:32:57:
e3:fc:fc:44:f9:ca:bf:bd:1f:70:23:50:d9:f8:00:
d2:fa:19:b1:ed:e5:b5:f2:f2:63:cd:33:b7:bb:bc:
69:dd:bc:46:92:d0:51:d8:4a:3b:5a:11:ef:f6:f4:
ca:4f:11:89:cb:43:18:f9:a1:47:bc:80:58:0b:94:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:D6:AA:42:50:78:60:32:1E:CA:CA:72:BE:80:AF:D3:1B:74:03
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/vrTWqkJQeGAyHsrKcr6Ar9MbdAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.142.0/24
217.8.204.0/22
Signature Algorithm: sha256WithRSAEncryption
55:eb:a2:d7:09:09:be:c4:04:04:b1:b2:dd:53:1e:66:a0:82:
a3:3b:2b:3d:11:de:82:fd:2f:5a:56:ee:93:be:dd:7f:8b:f1:
2c:f6:67:72:ea:c6:d6:21:63:d4:c6:93:49:ca:30:ea:91:7b:
44:10:cc:1e:c2:a3:cd:ed:e9:09:d8:3b:20:6c:d3:36:e8:3f:
1e:8a:03:36:a4:9a:b7:c6:2a:b0:4f:e2:ef:99:52:5c:c5:9b:
2f:80:8c:a0:73:67:a6:8f:3a:16:b5:cb:84:bf:95:21:20:c8:
ee:31:2f:9e:ce:bd:68:b2:b5:14:b9:d1:0b:0c:34:d8:89:d3:
78:d6:0f:00:24:1b:b8:89:ad:e8:b8:41:f8:7a:43:2a:ef:f8:
09:1d:8e:5f:14:6b:b5:37:33:bd:e4:1d:a3:08:4f:47:4f:c0:
08:0a:17:26:a0:8c:b8:35:31:b7:42:1d:a8:70:8f:10:f3:2a:
4e:95:ec:70:44:86:8c:dc:63:bf:58:00:a2:1b:02:1b:c2:21:
5a:27:07:47:b8:0f:6a:51:bd:07:29:35:86:72:4a:10:33:a0:
1e:57:8c:72:3b:b1:f5:98:9c:e5:f4:77:70:cb:f5:bf:7a:5f:
9b:38:73:eb:e2:e7:37:fe:fc:9d:32:12:3a:f2:be:59:98:01:
92:64:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:14:55 2026 by rpki-client