Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5zqpWTCd-Uz7Befs3JqmbrekhhI.roa
File: 5zqpWTCd-Uz7Befs3JqmbrekhhI.roa (raw, json)
Hash identifier: VDsWb3QHKH1Ng1Jrjin52O8F3TRl8m7aUbwB1Dq0EwU=
Subject key identifier: E7:3A:A9:59:30:9D:F9:4C:FB:05:E7:EC:DC:9A:A6:6E:B7:A4:86:12
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F756C893F7257B78B634505A6E72AC076
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5zqpWTCd-Uz7Befs3JqmbrekhhI.roa
Signing time: Sat 18 Jul 2026 13:31:15 +0000
ROA not before: Sat 18 Jul 2026 13:31:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 62.105.192.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
194.122.83.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:6c:89:3f:72:57:b7:8b:63:45:05:a6:e7:2a:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 18 13:31:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e73aa959309df94cfb05e7ecdc9aa66eb7a48612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:47:36:b3:57:e8:db:84:c6:61:a9:62:34:
03:f3:1f:b3:f2:5d:c6:cd:90:74:ea:3c:ac:82:11:
b8:7c:26:75:bb:3f:fe:4c:7c:69:2f:a2:bb:4d:44:
15:00:d0:d4:84:f6:a2:4d:c9:fe:fa:01:04:fd:70:
07:63:e7:53:ca:19:ba:3c:6a:79:a2:cf:b5:f8:1e:
1c:86:9f:dd:99:f3:12:90:5f:9b:49:71:25:c1:2c:
dd:17:29:91:1c:b9:61:49:c4:8b:b4:43:42:fd:ae:
f5:15:a1:8a:d4:b9:9f:2f:9f:36:42:1d:ac:62:c1:
b1:09:b8:ee:40:91:d1:78:eb:47:62:c7:a0:66:c2:
43:fa:5f:74:94:f5:c1:57:4d:4f:18:50:99:3b:34:
5b:59:bc:7f:30:a3:38:ec:d3:33:64:0e:e6:74:07:
c1:92:e3:78:3c:83:a5:0d:f9:93:90:c0:b9:2c:25:
fd:b2:35:d7:68:95:e0:80:db:73:dc:25:3b:00:78:
14:1d:95:df:94:ff:e7:f8:19:d2:31:db:5f:2f:2a:
f8:dc:51:1d:03:0f:91:3b:38:9a:2a:06:2b:17:06:
17:e0:cb:e1:79:b1:35:e2:27:5d:86:31:fa:95:8e:
51:c6:6a:9e:44:0b:5f:4e:47:47:d1:3f:16:a8:d4:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:A9:59:30:9D:F9:4C:FB:05:E7:EC:DC:9A:A6:6E:B7:A4:86:12
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5zqpWTCd-Uz7Befs3JqmbrekhhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.192.0/24
77.67.31.0/24
194.122.83.0/24
194.122.85.0/24
195.21.145.0/24
212.222.171.0/24
217.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c2:00:ea:d1:c4:e2:65:74:d5:f8:18:d4:9b:06:47:24:f8:
f5:b0:d0:92:33:96:75:bf:be:97:2a:62:f8:08:d6:a8:34:30:
98:cf:45:ee:31:53:fa:dc:73:8d:0a:33:65:30:34:47:10:23:
4b:a0:a7:e4:83:42:4b:45:e3:e2:96:30:be:37:a3:89:6d:fd:
6e:12:f5:7e:3f:7e:93:cd:85:b0:64:f9:b5:b0:87:92:a1:15:
00:0b:e2:f3:b0:b0:f3:d1:c3:5e:01:c6:10:d6:39:3a:1e:f2:
9e:87:01:8b:61:e1:82:d5:cf:37:12:03:e5:51:9e:0e:ac:b5:
71:76:12:41:58:55:72:00:ca:2a:dd:63:8b:1b:80:88:d5:b6:
13:08:4d:a7:e9:63:d1:ed:f9:94:19:8d:57:e6:10:52:1b:df:
16:d4:0c:4b:05:20:61:89:5f:7e:73:94:37:a5:70:63:82:e2:
c2:7d:3e:ec:37:85:fb:f0:d2:80:f2:cd:83:90:b6:d6:93:8e:
c3:4a:ef:68:b6:33:fa:94:84:d2:1b:38:d7:b7:26:65:05:91:
c9:ce:8f:28:ba:62:d9:80:7f:23:3d:7f:cb:65:63:25:81:11:
75:31:70:69:60:49:ab:6b:07:e0:1c:3e:84:f0:4a:fe:af:7e:
25:40:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:25 2026 by rpki-client