Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AlPusrBKxbOQsioAZIVutED3GjM.roa
File: AlPusrBKxbOQsioAZIVutED3GjM.roa (raw, json)
Hash identifier: ODCiVc+SPLgell1Qtn/Fid1uI4acf05+Sy1yf54lvdk=
Subject key identifier: 02:53:EE:B2:B0:4A:C5:B3:90:B2:2A:00:64:85:6E:B4:40:F7:1A:33
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FF8725AA9BE6FDA210326EDF433D14237
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AlPusrBKxbOQsioAZIVutED3GjM.roa
Signing time: Thu 13 Aug 2026 00:07:51 +0000
ROA not before: Thu 13 Aug 2026 00:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.24.0/24 maxlen: 24
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
77.67.6.0/24 maxlen: 24
77.67.58.0/24 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.4.0/24 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.70.0/24 maxlen: 24
194.77.186.0/24 maxlen: 24
194.77.187.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.84.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.99.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
217.117.162.0/24 maxlen: 24
217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:72:5a:a9:be:6f:da:21:03:26:ed:f4:33:d1:42:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 13 00:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0253eeb2b04ac5b390b22a0064856eb440f71a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:bd:b0:df:99:3a:f8:a5:83:5b:06:40:84:
e1:0a:77:57:71:ad:73:dc:d5:19:55:ea:ed:37:04:
81:f5:ae:c5:33:e1:ad:d3:ec:b7:31:24:d6:a5:74:
fe:a7:3f:2d:f9:af:a3:3c:40:b5:cd:32:9e:7a:2e:
e3:6f:d2:7e:47:3d:c0:76:b5:f6:f9:be:2f:d1:19:
92:45:0d:d2:77:72:67:9d:fc:1c:01:c7:e1:6f:6b:
a8:e5:07:9d:5d:59:62:56:ab:3a:cb:30:f0:e2:31:
fe:5f:f0:73:14:25:be:2b:75:86:c9:c3:50:79:32:
8d:37:9d:e0:c1:f2:32:6f:12:cc:34:bf:0d:17:37:
1c:f8:cc:66:59:8b:d6:4a:f2:74:cc:ff:84:b1:25:
04:1c:3a:ef:db:24:b4:eb:fb:d8:f3:9c:34:cc:5b:
58:e3:f6:c2:b1:e2:65:a6:1f:65:cd:0d:c3:63:eb:
aa:a7:6d:63:b5:92:9c:a4:8f:7b:a2:3a:33:35:ac:
64:05:e8:08:0a:4e:bf:04:d1:d4:b2:9e:1f:6e:29:
86:ca:04:78:ad:9e:50:57:90:cb:8d:f6:88:72:e7:
86:02:bc:76:5d:22:21:0c:57:65:00:97:bb:44:7e:
bb:05:7b:30:7f:2b:72:47:5d:98:3f:2b:e0:91:94:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:EE:B2:B0:4A:C5:B3:90:B2:2A:00:64:85:6E:B4:40:F7:1A:33
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AlPusrBKxbOQsioAZIVutED3GjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
62.41.32.0/24
62.41.37.0/24
77.67.6.0/24
77.67.58.0/24
193.141.2.0/24
194.45.47.0/24
194.77.4.0/24
194.77.62.0/24
194.77.70.0/24
194.77.186.0/23
194.77.192.0/24
194.122.78.0/24
194.122.84.0/24
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.151.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.144.0/24
195.21.146.0/24
212.189.26.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.85.0/24
212.189.88.0/22
212.189.95.0-212.189.99.255
212.189.103.0-212.189.104.255
212.189.110.0/24
212.189.115.0/24
212.189.121.0/24
212.222.168.0/24
212.222.170.0/24
217.8.200.0/24
217.8.203.0/24
217.117.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:e2:e9:6e:a2:ec:c6:ef:1d:35:87:92:6e:bb:ec:ec:ae:89:
eb:4d:48:e0:f9:57:dc:a3:5b:0d:61:f7:fb:f1:95:90:16:f0:
d3:00:eb:20:53:76:fb:33:38:e8:ed:77:c1:9a:7c:f7:79:91:
3b:b9:ee:bc:33:d7:37:f3:33:b6:66:c4:57:21:b0:d2:82:c7:
a6:08:39:37:98:1d:f4:25:81:3f:86:e8:90:57:2d:78:4d:f5:
cd:fd:ca:f0:50:9b:26:33:c6:34:74:44:e8:8e:5b:8f:db:dd:
c0:d4:95:b3:96:f5:bd:26:22:dd:8d:5c:16:8f:bf:ca:46:58:
2c:03:c1:91:e8:75:ca:f2:1e:a5:2d:b7:5a:7b:3d:54:f6:fc:
72:b0:db:dd:9c:5d:d4:a5:76:b8:9a:07:4a:93:bd:0c:9d:7a:
88:b4:2c:2d:80:5f:a0:21:66:37:0d:a6:02:07:cc:c5:91:64:
ac:68:ed:df:bb:e6:e5:22:e3:62:d6:2b:7c:2b:d3:5e:9a:47:
46:86:b7:cf:6e:4b:08:e9:7f:03:8e:8a:3f:e6:de:47:b9:27:
f4:ec:b2:17:7c:f9:39:8d:4c:9b:c7:b2:91:0b:d2:28:3e:f3:
15:0f:9a:f8:a9:45:f5:0a:42:53:5f:93:bc:0f:3d:94:45:65:
76:dc:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:06 2026 by rpki-client