Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yjgcSukvPbYAWdw7XwBVpOEN5qM.roa
File: yjgcSukvPbYAWdw7XwBVpOEN5qM.roa (raw, json)
Hash identifier: 4aD8zfinR126Xo7t+x/Lr6QJ9XbMJHD+7NH4labHph4=
Subject key identifier: CA:38:1C:4A:E9:2F:3D:B6:00:59:DC:3B:5F:00:55:A4:E1:0D:E6:A3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DC4565BC98E15BC79363D18BD314E9DDB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yjgcSukvPbYAWdw7XwBVpOEN5qM.roa
Signing time: Sat 25 Apr 2026 11:11:27 +0000
ROA not before: Sat 25 Apr 2026 11:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.137.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.152.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.202.0/23 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:56:5b:c9:8e:15:bc:79:36:3d:18:bd:31:4e:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 25 11:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca381c4ae92f3db60059dc3b5f0055a4e10de6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:2e:92:af:a1:d9:12:fe:84:71:1f:35:50:
6c:33:9e:b7:cc:cb:d8:53:4f:6a:8a:c9:a6:ca:04:
04:f1:a0:cf:d7:cc:d2:fc:7d:5c:8e:aa:7e:c7:16:
0b:cc:07:12:4d:5f:e8:3e:0f:f8:57:e4:e5:a8:5f:
8a:f9:29:c3:6d:f8:2f:e6:38:f1:79:13:e5:0a:cf:
ce:c6:cb:06:f1:bf:36:ee:e2:03:26:fc:d6:da:f7:
3e:46:db:a4:7d:9f:00:0b:c3:2a:1d:5d:26:37:09:
73:52:d7:ec:5e:84:99:af:be:84:2f:f8:42:68:ff:
05:56:84:98:fa:9d:f8:cf:d4:45:f0:38:0b:a1:66:
e5:58:fe:49:24:dc:84:b4:11:9e:50:b7:64:6b:28:
19:da:ca:f8:b3:ff:ee:81:8d:1c:b2:7e:fd:da:8e:
9c:2a:6e:f3:af:a5:5f:d4:b8:40:1d:98:80:79:49:
92:f5:20:3a:1a:a7:86:c6:1d:6b:60:33:c8:e7:27:
bf:6c:7f:dd:fa:6e:15:4b:a8:ab:a7:be:6c:03:3d:
62:57:16:ba:d6:e8:fc:2d:32:16:ed:83:6e:fa:e6:
8a:85:ba:3f:c6:dd:a7:ce:01:d5:ed:2b:4b:9c:64:
37:98:7c:7c:09:37:7c:95:e2:6f:2f:81:8a:0a:e3:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:1C:4A:E9:2F:3D:B6:00:59:DC:3B:5F:00:55:A4:E1:0D:E6:A3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yjgcSukvPbYAWdw7XwBVpOEN5qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.152.0/22
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
Signature Algorithm: sha256WithRSAEncryption
d8:e0:9e:65:82:d9:68:8b:cc:c1:e8:ba:64:e4:84:5b:d8:ea:
c9:d8:48:c4:20:30:a2:13:8f:cf:5e:69:7f:b0:b3:1a:0a:23:
fe:1f:96:c5:ed:1c:1f:76:46:5c:9f:12:c3:24:27:48:40:40:
1b:89:70:8b:47:d8:4f:82:2f:f7:3e:27:d7:d5:1f:93:a6:7d:
7b:62:5b:2e:a8:75:ff:8c:6e:88:15:ca:d7:ab:7b:d1:ca:3f:
c1:b2:00:42:28:00:2b:89:ae:c2:9a:ad:53:3c:79:52:44:e0:
b5:04:45:76:5a:4c:1e:86:76:bf:3a:f7:74:a3:7d:25:12:06:
65:fc:a3:02:5f:96:3e:89:43:3b:86:ea:f3:78:ce:9b:c2:f2:
81:25:fb:a7:54:f4:99:40:6c:84:54:21:eb:3f:95:a7:25:19:
79:27:7d:37:d3:09:a0:ff:8d:b7:c8:b0:2c:ba:18:78:90:90:
8e:6a:a6:b7:33:35:6e:0e:68:c0:7d:af:70:55:6e:77:0a:54:
24:ea:8e:a8:49:96:3d:d6:09:0a:eb:de:29:6c:73:b2:52:a1:
4c:92:c7:08:bc:a3:ef:6e:b8:7e:3f:af:a6:57:bd:b6:7b:79:
0e:54:80:8d:57:5e:a8:3c:3f:8d:04:49:fa:cd:06:e2:c9:de:
fb:e2:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:20:48 2026 by rpki-client