Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8ixWX7Pob5z50Ew_oMwveoa0OqE.roa
File: 8ixWX7Pob5z50Ew_oMwveoa0OqE.roa (raw, json)
Hash identifier: JGVLFGtt7p98BNOZvJxrqc0RNmIUBQExFWjlNJULkqs=
Subject key identifier: F2:2C:56:5F:B3:E8:6F:9C:F9:D0:4C:3F:A0:CC:2F:7A:86:B4:3A:A1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A06B52C6A97B0168BC050057E9BC291358
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8ixWX7Pob5z50Ew_oMwveoa0OqE.roa
Signing time: Fri 04 Sep 2026 07:29:41 +0000
ROA not before: Fri 04 Sep 2026 07:29:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 62.105.219.0/24 maxlen: 24
195.21.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:52:c6:a9:7b:01:68:bc:05:00:57:e9:bc:29:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 4 07:29:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22c565fb3e86f9cf9d04c3fa0cc2f7a86b43aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:60:a7:f4:b8:de:9e:31:3e:0a:18:40:60:
ab:67:0b:1d:82:f7:f9:9e:9a:72:1c:f5:7d:df:95:
6f:78:9b:28:ec:4f:05:10:e9:14:1b:e5:46:4b:4f:
77:f5:81:04:29:5b:35:84:82:8f:75:ef:92:f9:36:
05:f0:28:5a:9b:22:a1:6b:18:6d:66:66:06:d5:e8:
45:a2:4c:84:0d:05:e2:f2:12:e8:65:14:f0:b7:4c:
c1:25:d0:0b:38:40:15:28:e6:87:3d:d7:fe:26:07:
f9:af:b8:a4:40:6d:94:ee:df:e0:0c:aa:9d:1e:d2:
ba:ec:ce:5c:87:55:0b:2f:c7:53:a6:00:c7:39:0f:
60:bf:f6:55:b7:8d:49:09:f0:e3:ae:a0:a0:b3:d7:
65:f5:92:bb:de:88:a8:ed:f5:7c:df:18:6b:a9:f5:
6c:ae:ad:3e:13:01:9c:a7:0b:1a:bb:4b:e3:75:68:
9c:74:e5:4c:4f:68:3d:17:79:d3:03:c7:60:de:1b:
d3:00:63:f1:af:b7:56:ab:53:ad:9a:8e:07:0b:db:
a8:f9:e8:1a:b9:33:52:36:1b:74:e3:fd:cc:7a:d6:
e9:ff:84:3a:3b:36:df:ce:18:8b:be:e4:be:37:f6:
82:e4:3d:ec:d3:25:65:2d:4d:d1:30:1d:a3:4d:83:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:56:5F:B3:E8:6F:9C:F9:D0:4C:3F:A0:CC:2F:7A:86:B4:3A:A1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8ixWX7Pob5z50Ew_oMwveoa0OqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.219.0/24
195.21.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d6:64:bc:43:ff:4d:0b:01:c8:4a:94:2a:aa:85:a9:aa:4f:
de:a7:a0:c1:a6:b4:3c:fa:1c:45:d5:04:6f:b9:7f:f2:e1:5b:
20:5f:be:63:eb:56:d1:16:e1:09:ff:f6:70:c6:87:2c:5a:b0:
6c:d7:47:25:4d:fc:b1:12:b1:db:8a:d4:f6:da:e9:fd:1c:bf:
de:aa:3c:2b:09:4d:39:b2:69:e5:7d:1a:2c:09:27:4d:3e:0e:
0b:3d:bf:e8:c8:0c:2c:c7:8f:7a:87:0e:8e:fc:50:4c:31:67:
26:11:02:76:93:31:70:6a:b7:1f:9e:04:79:f3:21:bd:b3:98:
5e:72:8a:5f:04:47:3d:8b:c1:11:54:1c:b2:cb:5b:60:95:13:
5d:7d:31:f5:d7:36:b3:e9:53:73:7c:59:2a:93:de:9e:26:a2:
dd:68:5f:8b:f5:98:d1:7f:41:38:c1:3d:ab:41:d0:27:d4:b3:
cd:d3:a1:07:85:ec:33:37:50:d7:d5:a8:2b:35:0c:ef:d8:69:
55:d1:99:64:de:cd:fb:6a:e2:e3:91:58:18:e7:1a:ed:ce:d3:
7c:b4:45:7f:69:5f:ce:cb:08:4c:b2:26:38:5a:f7:a2:ac:15:
50:46:56:42:97:3e:26:e0:67:8d:36:74:98:b3:bf:16:22:86:
c9:d7:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:05 2026 by rpki-client