Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-Grindkp4znSBdOSFaONYookL-4.roa
File: 1-Grindkp4znSBdOSFaONYookL-4.roa (raw, json)
Hash identifier: 0nY3e97kUTt3/DVVkyeaDKwFspnygsujdJG3dpukB94=
Subject key identifier: F8:6A:E2:9D:D9:29:E3:39:D2:05:D3:92:15:A3:8D:62:8A:24:2F:EE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FB2D402FD2741A6828B5104F7E5C6DA98
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-Grindkp4znSBdOSFaONYookL-4.roa
Signing time: Thu 30 Jul 2026 11:41:06 +0000
ROA not before: Thu 30 Jul 2026 11:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39600
IP address blocks: 62.132.17.0/24 maxlen: 24
62.132.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:d4:02:fd:27:41:a6:82:8b:51:04:f7:e5:c6:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 30 11:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f86ae29dd929e339d205d39215a38d628a242fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:fa:44:9f:ae:a3:22:2f:87:a4:56:8e:5e:
72:16:51:2a:29:7b:ec:77:ac:75:4c:d6:d7:08:9b:
45:68:fd:15:d5:06:26:b0:3e:b6:00:e7:79:4d:47:
b6:23:4e:f9:2d:30:65:e9:68:3a:3c:9d:70:53:41:
49:12:b0:87:f6:69:8e:f1:be:cb:c1:e4:60:0d:45:
d9:4a:3c:db:5a:93:94:98:e0:07:28:24:39:7b:cf:
42:b3:48:9b:1e:b6:b4:93:e0:d1:2e:4d:d2:ec:19:
a3:42:35:43:c7:2f:91:1c:ff:b5:05:7c:65:49:00:
3b:62:ff:8b:c9:13:5f:22:1e:19:41:c4:cb:6c:4a:
69:ad:30:3a:a7:ce:ec:44:ca:7d:5e:98:92:2e:e0:
1d:0e:8a:11:5d:fe:db:d5:b4:d1:9d:0e:4b:98:07:
d8:27:f6:6a:3a:11:7e:3e:f2:09:30:d3:1d:0a:61:
80:9e:43:5f:6d:5b:67:c1:20:89:6c:12:72:e0:08:
ab:df:fc:4f:f6:e0:3f:1f:b0:59:5a:64:8c:77:ef:
a3:23:8e:37:ec:c5:75:df:20:66:02:27:75:2c:0b:
b3:95:70:c4:c6:6c:29:69:ed:4a:b3:93:0f:de:b8:
34:54:64:81:00:e7:25:94:4d:ee:4b:ab:28:ec:c6:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:E2:9D:D9:29:E3:39:D2:05:D3:92:15:A3:8D:62:8A:24:2F:EE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-Grindkp4znSBdOSFaONYookL-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.17.0-62.132.18.255
Signature Algorithm: sha256WithRSAEncryption
37:fa:3e:0d:c1:c2:d8:8d:53:93:20:27:96:d3:89:2c:99:3c:
04:ec:97:36:e6:4c:0c:59:eb:62:7c:ce:74:d7:e3:a4:e7:b7:
08:e8:5d:a6:c6:56:41:b2:6d:6b:c4:5a:52:15:7c:3a:46:1c:
d5:05:44:bb:f4:9a:78:55:71:b3:19:c6:a3:00:23:23:2d:75:
5b:4c:3b:f1:c3:dd:f6:1e:82:a7:4b:a4:14:18:05:1d:ea:4f:
7c:9c:db:b6:15:34:14:17:73:5c:ca:b1:6a:62:05:7a:15:da:
92:94:fd:13:57:cd:15:a0:7f:fc:91:01:06:3d:a5:1b:ab:1f:
0b:31:bc:db:5e:11:f5:34:a1:35:12:d6:1b:b5:4b:0a:22:7a:
5e:1e:2a:9a:f4:d4:39:ee:4c:16:e6:13:66:99:3d:8f:a8:49:
5f:77:aa:3c:79:b2:91:1f:2e:3d:30:be:6c:5e:53:67:3c:2d:
a8:4a:74:c1:8e:92:fe:29:95:df:bf:35:66:78:28:ec:95:c9:
98:db:6f:93:3d:68:4d:36:56:c4:02:1f:3c:49:aa:38:2e:b1:
24:eb:fc:14:03:38:53:28:a9:8e:12:2f:05:fd:4a:71:33:9f:
59:ed:a6:ed:69:4b:07:8f:d9:28:6f:96:3d:a0:03:b3:af:d0:
77:4f:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:14:12 2026 by rpki-client