Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-N3apCLHqyqSwbnlYGTHCf2dQ_I.roa
File: 1-N3apCLHqyqSwbnlYGTHCf2dQ_I.roa (raw, json)
Hash identifier: hSKXrWYwLTWlUNE5R8w42WT7TyRs0C+I3wrM149THl8=
Subject key identifier: F8:DD:DA:A4:22:C7:AB:2A:92:C1:B9:E5:60:64:C7:09:FD:9D:43:F2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A03309158A277C444FA3AEAC72CA66BFEB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-N3apCLHqyqSwbnlYGTHCf2dQ_I.roa
Signing time: Mon 24 Aug 2026 09:10:28 +0000
ROA not before: Mon 24 Aug 2026 09:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.105.193.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.192.110.0/24 maxlen: 24
77.67.27.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
77.67.92.0/24 maxlen: 24
81.94.104.0/21 maxlen: 24
194.77.3.0/24 maxlen: 24
194.77.92.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
195.162.248.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
212.189.48.0/24 maxlen: 24
212.189.113.0/24 maxlen: 24
217.8.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:09:15:8a:27:7c:44:4f:a3:ae:ac:72:ca:66:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 24 09:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8dddaa422c7ab2a92c1b9e56064c709fd9d43f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:c7:a4:96:16:dd:70:8e:a1:d6:cb:1c:a1:
21:69:8f:94:68:a6:cb:bc:f6:f9:ed:cc:b7:a5:f2:
65:cd:95:3d:71:a3:f6:99:a1:d7:96:a3:f4:70:03:
2b:99:ef:9d:4f:5b:a6:df:6a:ee:9f:89:43:71:8e:
5e:9b:95:4d:a7:5e:2c:d8:e9:e8:4c:8b:c5:78:95:
14:04:c4:b8:6a:b8:a2:27:97:3e:13:9a:c4:54:a9:
0a:28:1a:55:9c:35:a7:fc:bd:69:e6:ca:15:8a:e8:
12:04:a5:38:6c:b9:61:8b:a8:9b:8f:3e:26:c9:9c:
8a:aa:ff:22:29:6c:81:ae:8c:49:8d:da:fa:c8:1b:
97:10:4a:65:5f:44:1d:1a:b5:3e:eb:85:73:c3:53:
d3:fd:b4:82:26:1c:81:03:f8:48:e2:1f:db:b2:6c:
c1:48:62:2a:d0:6d:5b:56:f9:a5:e2:9a:59:00:e9:
75:19:92:81:5c:8f:a6:6d:4f:d9:29:33:45:98:e3:
51:dd:46:bf:33:35:67:42:05:76:24:04:d9:79:fe:
e5:fd:76:18:af:76:c0:b0:b6:54:cf:06:67:4b:5b:
1f:05:ee:a5:df:99:6d:6d:37:30:b7:97:6b:64:4f:
d2:5d:e3:2e:a2:ce:40:af:bb:d6:0d:d5:72:94:c5:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:DA:A4:22:C7:AB:2A:92:C1:B9:E5:60:64:C7:09:FD:9D:43:F2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-N3apCLHqyqSwbnlYGTHCf2dQ_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.193.0/24
62.105.195.0/24
62.192.110.0/24
77.67.27.0/24
77.67.31.0/24
77.67.92.0/24
81.94.104.0/21
194.77.3.0/24
194.77.92.0/24
194.122.78.0/24
194.122.80.0/24
195.21.129.0/24
195.21.144.0/24
195.21.146.0/24
195.162.248.0/24
212.189.24.0/24
212.189.48.0/24
212.189.113.0/24
217.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ea:3d:1c:34:81:b7:e7:bd:e3:d4:a7:4d:8e:12:1e:9d:83:
8e:d3:00:59:e4:20:79:ff:d8:50:10:40:bd:71:18:20:e7:99:
b4:b8:cf:37:2e:1e:a9:09:b7:ce:ec:d8:ae:3e:36:bf:8c:cf:
8c:a2:f1:c9:d5:29:8f:5f:ab:e6:0c:28:f8:b2:78:a6:a6:4a:
36:df:8c:9d:39:9f:72:b4:25:3b:6a:d0:e4:6e:ee:f2:66:49:
cb:85:14:82:ac:27:c1:d6:2b:86:73:8b:22:4b:a6:f0:19:fd:
39:5e:94:8c:2f:47:92:9b:b7:5d:82:91:58:d3:2d:8b:5b:1b:
ce:bb:be:9e:5c:5c:a0:2d:9e:4a:c8:73:8a:5f:12:66:67:04:
2c:fa:9b:04:eb:14:89:99:05:75:6c:08:f2:72:8f:5e:7e:1b:
d0:0a:dd:ef:c1:6d:9d:0f:b7:25:e2:a9:7b:a2:8f:38:19:fa:
b9:c2:4e:80:dc:46:75:ff:c6:32:06:20:1f:bb:7e:21:e5:d0:
17:5b:40:2c:9c:39:2e:39:37:e8:a1:82:4a:fb:bf:9e:f0:75:
b8:b3:57:85:9c:6c:15:c7:0e:a8:e0:2e:ad:81:20:48:a7:52:
d3:17:c6:d4:9d:a5:5b:3d:05:2b:b6:20:95:7f:5d:74:9d:3f:
c9:ea:3f:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:41 2026 by rpki-client