Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DwhduTl2tThHYaXUB-qL9UvsH_8.roa
File: DwhduTl2tThHYaXUB-qL9UvsH_8.roa (raw, json)
Hash identifier: fARbZN2lN4b3BKxE3bpQMWHAKljwmkR3VKYxRD3dw18=
Subject key identifier: 0F:08:5D:B9:39:76:B5:38:47:61:A5:D4:07:EA:8B:F5:4B:EC:1F:FF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F464DFE7FCD6A32DCBC9769DDEBA3D241
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DwhduTl2tThHYaXUB-qL9UvsH_8.roa
Signing time: Thu 09 Jul 2026 09:55:44 +0000
ROA not before: Thu 09 Jul 2026 09:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 62.105.210.0/23 maxlen: 23
62.105.212.0/23 maxlen: 23
62.132.1.0/24 maxlen: 24
62.192.98.0/23 maxlen: 23
62.192.104.0/23 maxlen: 23
62.192.116.0/23 maxlen: 23
62.192.118.0/23 maxlen: 23
89.202.177.0/24 maxlen: 24
89.202.188.0/24 maxlen: 24
89.202.204.0/24 maxlen: 24
89.202.209.0/24 maxlen: 24
89.202.214.0/24 maxlen: 24
89.202.222.0/24 maxlen: 24
89.202.227.0/24 maxlen: 24
89.202.244.0/24 maxlen: 24
89.202.247.0/24 maxlen: 24
89.202.248.0/24 maxlen: 24
89.202.250.0/24 maxlen: 24
135.196.6.0/24 maxlen: 24
135.196.9.0/24 maxlen: 24
135.196.23.0/24 maxlen: 24
135.196.27.0/24 maxlen: 24
135.196.31.0/24 maxlen: 24
135.196.35.0/24 maxlen: 24
135.196.98.0/24 maxlen: 24
135.196.105.0/24 maxlen: 24
135.196.116.0/24 maxlen: 24
135.196.186.0/23 maxlen: 23
195.162.244.0/24 maxlen: 24
213.169.208.0/22 maxlen: 22
213.169.212.0/22 maxlen: 22
213.169.216.0/23 maxlen: 23
213.169.224.0/23 maxlen: 23
213.169.228.0/23 maxlen: 23
213.169.230.0/23 maxlen: 23
213.169.246.0/23 maxlen: 23
213.169.250.0/23 maxlen: 23
213.169.252.0/23 maxlen: 23
217.117.160.0/24 maxlen: 24
217.117.164.0/22 maxlen: 22
217.117.168.0/22 maxlen: 22
217.117.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:4d:fe:7f:cd:6a:32:dc:bc:97:69:dd:eb:a3:d2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 9 09:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f085db93976b5384761a5d407ea8bf54bec1fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:6a:ff:36:b1:19:15:8d:a4:ca:ee:9d:a7:
c8:68:81:0a:42:dc:b1:36:8b:6b:d9:23:5b:7a:0e:
5d:1c:dc:ed:ab:70:16:4b:5b:ac:cd:98:39:3f:82:
8d:c0:f1:76:e4:90:4d:8f:e5:fa:03:ad:12:88:59:
ef:7c:65:9a:5f:ca:7a:8d:45:5d:e8:8a:80:55:22:
56:9b:55:0d:e9:85:93:31:90:00:64:ed:13:4d:e3:
18:a5:62:62:77:24:d2:d8:47:b4:3c:53:cc:fd:07:
89:53:a2:27:05:76:6a:66:d2:1c:c1:88:29:04:b2:
31:1a:22:6c:d5:40:62:c9:f9:58:33:42:ef:44:67:
77:aa:a6:9d:c7:39:61:49:ef:08:ff:4f:62:89:82:
e1:cc:84:60:fe:69:1a:29:c4:f8:f4:18:81:47:85:
45:82:6c:87:f8:f1:7b:b2:8e:ed:13:2d:72:04:a0:
f3:e9:51:da:c1:92:0c:d1:6b:c9:79:c8:a8:97:3d:
4d:f1:64:d9:e6:0d:16:f6:3a:dc:c6:b3:c0:d4:fd:
a9:e1:2b:ba:54:b9:3d:4c:0a:90:b7:b4:d7:3b:85:
34:0b:b0:eb:3e:1d:d8:38:db:d1:aa:1b:13:61:c3:
d3:80:74:02:2d:b1:9d:e2:2f:a0:ea:c0:a5:5e:db:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:08:5D:B9:39:76:B5:38:47:61:A5:D4:07:EA:8B:F5:4B:EC:1F:FF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DwhduTl2tThHYaXUB-qL9UvsH_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.210.0-62.105.213.255
62.132.1.0/24
62.192.98.0/23
62.192.104.0/23
62.192.116.0/22
89.202.177.0/24
89.202.188.0/24
89.202.204.0/24
89.202.209.0/24
89.202.214.0/24
89.202.222.0/24
89.202.227.0/24
89.202.244.0/24
89.202.247.0-89.202.248.255
89.202.250.0/24
135.196.6.0/24
135.196.9.0/24
135.196.23.0/24
135.196.27.0/24
135.196.31.0/24
135.196.35.0/24
135.196.98.0/24
135.196.105.0/24
135.196.116.0/24
135.196.186.0/23
195.162.244.0/24
213.169.208.0-213.169.217.255
213.169.224.0/23
213.169.228.0/22
213.169.246.0/23
213.169.250.0-213.169.253.255
217.117.160.0/24
217.117.164.0-217.117.175.255
Signature Algorithm: sha256WithRSAEncryption
16:0b:a1:bf:35:8e:7e:ff:4b:75:f4:1d:e9:bc:55:82:e4:40:
b6:d9:b4:90:96:37:ac:56:15:3a:22:c4:18:4e:91:37:a3:61:
2f:d3:32:7f:ba:7e:bd:8a:3e:00:3d:2d:1e:65:37:02:d9:82:
1c:59:90:78:9e:e1:6c:fd:1b:32:ea:a1:b8:7b:04:a6:7c:4c:
f9:e4:ad:39:69:43:92:ff:d3:f5:61:33:62:df:aa:69:c1:ff:
79:1f:f0:85:f8:1b:da:1d:31:eb:4a:c9:91:ec:f7:d8:bb:6d:
22:39:85:c1:c4:9c:45:3c:d7:83:b5:31:75:c5:ed:fe:fd:fd:
71:e8:84:7c:af:c3:66:dc:9f:46:72:d1:01:a8:f4:e7:13:bd:
e2:e9:32:84:fa:c6:23:4c:60:b3:83:81:5d:0c:8d:d6:09:fc:
65:b0:25:15:9f:92:72:4f:ab:3f:0c:58:1e:b3:1c:1d:f0:7b:
b9:af:43:bc:3b:8b:d7:32:18:8d:77:8d:d0:0a:33:f4:0b:c0:
25:63:3d:45:fc:50:84:9c:98:22:0a:2d:79:17:56:70:ed:0b:
2a:fa:04:a0:41:c2:6e:75:52:4d:2e:01:fb:4d:bf:cc:fe:0e:
f8:2d:10:84:26:9b:0b:2c:2a:e8:57:3d:38:68:7f:a2:53:98:
17:fd:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client