Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dvgb5n3HNAtt5CsaVGQp7hgrCHo.roa
File: Dvgb5n3HNAtt5CsaVGQp7hgrCHo.roa (raw, json)
Hash identifier: iQSFA9vig9wAKNG8Yg2GF7A3snewgm+QAoTZtyonGVg=
Subject key identifier: 0E:F8:1B:E6:7D:C7:34:0B:6D:E4:2B:1A:54:64:29:EE:18:2B:08:7A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1718556C2DEAD0C78E2A2560D18C6A30C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dvgb5n3HNAtt5CsaVGQp7hgrCHo.roa
Signing time: Sun 25 Oct 2026 05:25:26 +0000
ROA not before: Sun 25 Oct 2026 05:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.122.87.0/24 maxlen: 24
195.81.76.0/24 maxlen: 24
195.81.92.0/24 maxlen: 24
195.81.101.0/24 maxlen: 24
195.81.109.0/24 maxlen: 24
195.81.110.0/24 maxlen: 24
195.81.113.0/24 maxlen: 24
195.81.114.0/24 maxlen: 24
195.81.117.0/24 maxlen: 24
195.81.126.0/24 maxlen: 24
195.81.132.0/24 maxlen: 24
195.81.136.0/24 maxlen: 24
195.81.138.0/24 maxlen: 24
195.81.148.0/24 maxlen: 24
195.81.150.0/24 maxlen: 24
195.81.154.0/24 maxlen: 24
195.81.171.0/24 maxlen: 24
195.81.181.0/24 maxlen: 24
195.81.191.0/24 maxlen: 24
195.81.211.0/24 maxlen: 24
195.81.231.0/24 maxlen: 24
195.81.243.0/24 maxlen: 24
195.81.249.0/24 maxlen: 24
195.81.255.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.105.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
217.8.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:85:56:c2:de:ad:0c:78:e2:a2:56:0d:18:c6:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 25 05:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef81be67dc7340b6de42b1a546429ee182b087a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:e2:b5:d8:18:92:ef:63:e7:7d:3b:4b:22:
dd:fa:ef:06:5b:7d:2a:85:03:20:1e:12:e4:76:f8:
c7:44:4f:b9:f1:5f:8b:11:f4:03:ac:25:ef:82:23:
08:22:e1:d3:7b:0c:b8:d0:4f:ad:5b:19:30:05:c4:
71:76:49:60:32:a9:90:d1:cc:f3:8a:ee:59:b1:14:
ad:db:56:d0:a7:26:6c:1b:98:db:39:f6:dc:ed:9e:
f1:12:7c:95:47:c6:17:d0:20:df:6a:dc:e1:6e:8b:
5c:61:02:23:4f:81:16:2b:a0:fb:85:1c:07:88:d3:
e9:60:c6:d2:ed:88:51:60:b2:2c:8f:8c:f9:d3:fd:
dc:e7:5c:9b:e1:b3:90:7d:62:33:c6:0c:5b:c6:9d:
c7:d2:88:4c:a6:4a:1b:0e:87:f8:7f:9e:39:6e:98:
e8:05:f7:2d:af:8e:a0:8c:9b:bc:0b:da:ae:94:07:
be:48:b3:07:4f:ac:c3:09:a5:fb:4d:c1:a7:d4:57:
71:0d:8c:b0:ae:88:24:05:2f:be:f6:2d:f1:7a:1a:
d2:66:69:99:e0:bf:b6:04:ae:ea:f7:0e:43:69:c8:
c4:3f:36:65:83:16:55:1a:d8:92:2e:99:bf:5e:90:
d7:ea:d2:98:03:3c:78:d3:84:9f:e6:f5:f6:6f:09:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:1B:E6:7D:C7:34:0B:6D:E4:2B:1A:54:64:29:EE:18:2B:08:7A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dvgb5n3HNAtt5CsaVGQp7hgrCHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
194.77.192.0/24
194.122.87.0/24
195.81.76.0/24
195.81.92.0/24
195.81.101.0/24
195.81.109.0-195.81.110.255
195.81.113.0-195.81.114.255
195.81.117.0/24
195.81.126.0/24
195.81.132.0/24
195.81.136.0/24
195.81.138.0/24
195.81.148.0/24
195.81.150.0/24
195.81.154.0/24
195.81.171.0/24
195.81.181.0/24
195.81.191.0/24
195.81.211.0/24
195.81.231.0/24
195.81.243.0/24
195.81.249.0/24
195.81.255.0/24
195.86.208.0/24
195.86.223.0/24
212.189.105.0/24
212.222.168.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
217.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f3:50:6d:dc:0e:73:64:8e:c3:ef:8a:ca:9f:bb:74:12:cd:
2f:f6:2f:60:18:72:75:9b:02:95:12:9e:72:d3:1c:e5:16:59:
1e:69:0b:40:a2:7b:12:4f:e7:7d:bc:de:9b:7a:bc:d5:d4:aa:
c3:b3:10:b6:60:36:2b:18:b4:f2:c9:92:86:dc:e1:3c:a8:0e:
83:bb:68:ce:67:4c:08:11:72:1d:35:27:ed:9a:76:7c:a3:0a:
f8:da:f9:f2:00:fd:31:08:c7:dc:9f:47:78:a2:3f:db:e7:38:
71:7f:30:55:87:e0:cb:2b:b2:f3:64:6e:4e:69:e3:54:5f:b2:
8d:2f:27:7f:f5:3e:56:2f:ef:ba:23:97:38:df:80:bb:2c:c3:
1f:53:c2:d3:d0:1e:d9:be:7d:dd:62:c5:e5:10:80:3f:6f:3b:
13:f3:21:ee:24:48:36:8c:ed:df:48:a6:4c:5a:4d:ad:d5:82:
ab:32:43:36:d1:93:1a:c3:52:8f:84:4a:3b:e6:9d:35:9f:d9:
9c:aa:c9:4a:39:c0:1b:2b:ff:d1:a7:e6:e7:cf:46:b2:49:13:
25:e0:b7:8b:cd:26:08:d7:d0:1a:a2:4d:c9:71:b4:87:5b:d3:
26:9b:bc:25:d1:17:37:87:02:0d:4a:22:ff:53:6c:e3:70:a7:
d6:5c:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:10 2026 by rpki-client