Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dy4daKMri621LMA1yiLoEoB5i1k.roa
File: Dy4daKMri621LMA1yiLoEoB5i1k.roa (raw, json)
Hash identifier: dhWvdegL8yPBDN22E4jBsokom69+Aecy70l4Lw6hdbQ=
Subject key identifier: 0F:2E:1D:68:A3:2B:8B:AD:B5:2C:C0:35:CA:22:E8:12:80:79:8B:59
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A075A8A2DDC62A03056A0D612F41C52DEB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dy4daKMri621LMA1yiLoEoB5i1k.roa
Signing time: Sun 06 Sep 2026 07:39:41 +0000
ROA not before: Sun 06 Sep 2026 07:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 62.192.124.0/23 maxlen: 23
195.21.133.0/24 maxlen: 24
213.169.196.0/23 maxlen: 23
213.169.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a8:a2:dd:c6:2a:03:05:6a:0d:61:2f:41:c5:2d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 6 07:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f2e1d68a32b8badb52cc035ca22e81280798b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:62:68:ec:0c:6f:a2:c3:ee:e4:f1:9c:c9:
5b:e0:af:a8:42:36:ed:24:70:28:16:26:56:27:2a:
ac:82:79:26:7d:e2:b1:6d:c2:7b:60:3c:26:94:78:
69:85:9a:37:4c:54:fb:4a:58:b3:df:64:f7:83:2b:
cf:d5:92:72:8e:ab:22:0c:f9:a6:87:64:9d:3a:8b:
b1:7f:cf:a0:5f:c0:28:0f:70:c8:5c:e5:5e:bb:4c:
9b:7c:62:9e:6d:34:c2:31:5b:6c:69:01:49:a6:f6:
9a:dc:63:c7:02:7a:77:f3:a9:da:02:16:7c:14:a0:
b0:c6:b0:0d:bc:c8:71:cf:d4:fa:59:75:39:3b:20:
2e:49:86:96:27:bc:f0:8c:f3:a2:52:e3:ad:95:a4:
07:14:a7:58:fb:68:da:b2:eb:35:5b:a9:bf:30:01:
50:66:c7:cc:3d:ca:74:dd:8a:b0:43:5a:3a:fb:14:
6e:44:1f:8e:c7:44:54:7a:67:84:eb:31:cb:65:79:
c7:57:5d:8f:49:c4:a7:c1:f5:f8:4c:4e:19:10:49:
5f:13:37:c7:52:db:74:24:f3:46:72:99:64:6c:7f:
bb:7f:c5:db:f5:f8:69:57:b0:98:f1:bb:bd:b5:a3:
25:72:3f:2e:0a:57:33:dd:ca:61:92:63:33:01:da:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:1D:68:A3:2B:8B:AD:B5:2C:C0:35:CA:22:E8:12:80:79:8B:59
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Dy4daKMri621LMA1yiLoEoB5i1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.124.0/23
195.21.133.0/24
213.169.196.0/23
213.169.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:c9:97:2d:0e:93:6d:90:1d:32:9a:f0:b2:e9:58:4d:11:3c:
95:3e:f4:4f:fa:6f:d3:88:b4:56:17:95:42:e5:0a:ef:7f:3a:
55:11:92:d5:28:78:de:86:83:e5:f4:6b:4f:11:5a:83:b8:cf:
a7:ff:19:72:1a:90:f7:d1:52:4e:b5:af:2d:14:53:f6:14:94:
bf:af:f3:d4:f2:81:73:2d:78:7d:18:4d:ea:bc:48:83:0e:56:
95:6f:fb:6c:5a:37:ff:45:c6:db:06:5e:55:cc:36:44:96:a1:
28:2c:fc:e6:b2:19:7e:b9:ed:cc:da:11:ba:80:3f:09:19:6b:
8b:6a:51:89:a0:4f:35:61:c1:54:ff:d8:b0:92:63:37:cc:4d:
04:d9:ac:59:68:95:68:4d:75:cb:9f:63:3c:6c:3f:57:a3:fe:
0f:eb:7e:ab:c1:85:3c:97:71:b7:0f:ec:89:4c:d9:42:7b:2d:
9a:f6:96:8b:35:1b:62:33:8a:28:7a:ca:17:da:ae:a9:db:de:
95:df:67:52:59:a6:8c:64:1e:5c:54:62:85:f1:6a:d8:90:03:
44:6e:37:8b:60:32:27:68:74:3c:f2:bc:0f:ea:6f:8e:8c:5a:
5b:2b:84:ba:8f:dc:61:f6:fa:87:7d:15:17:e2:2b:83:59:a4:
f3:0b:0b:88
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaB1qKLdxioDBWoNYS9BxS3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTA2MDczOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjJlMWQ2OGEzMmI4YmFkYjUyY2MwMzVjYTIyZTgxMjgwNzk4YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4liaOwMb6LD7uTxnMlb4K+oQjbt
JHAoFiZWJyqsgnkmfeKxbcJ7YDwmlHhphZo3TFT7Sliz32T3gyvP1ZJyjqsiDPmm
h2SdOouxf8+gX8AoD3DIXOVeu0ybfGKebTTCMVtsaQFJpvaa3GPHAnp386naAhZ8
FKCwxrANvMhxz9T6WXU5OyAuSYaWJ7zwjPOiUuOtlaQHFKdY+2jasus1W6m/MAFQ
ZsfMPcp03YqwQ1o6+xRuRB+Ox0RUemeE6zHLZXnHV12PScSnwfX4TE4ZEElfEzfH
Utt0JPNGcplkbH+7f8Xb9fhpV7CY8bu9taMlcj8uClcz3cphkmMzAdoZGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFA8uHWijK4uttSzANcoi6BKAeYtZMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvRHk0ZGFLTXJpNjIxTE1BMXlpTG9Fb0I1aTFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBPsB8AwQA
wxWFAwQB1anEAwQB1anKMA0GCSqGSIb3DQEBCwUAA4IBAQBcyZctDpNtkB0ymvCy
6VhNETyVPvRP+m/TiLRWF5VC5QrvfzpVEZLVKHjehoPl9GtPEVqDuM+n/xlyGpD3
0VJOta8tFFP2FJS/r/PU8oFzLXh9GE3qvEiDDlaVb/tsWjf/RcbbBl5VzDZElqEo
LPzmshl+ue3M2hG6gD8JGWuLalGJoE81YcFU/9iwkmM3zE0E2axZaJVoTXXLn2M8
bD9Xo/4P636rwYU8l3G3D+yJTNlCey2a9paLNRtiM4ooesoX2q6p296V32dSWaaM
ZB5cVGKF8WrYkANEbjeLYDInaHQ88rwP6m+OjFpbK4S6j9xh9vqHfRUX4iuDWaTz
CwuI
-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:20 2026 by rpki-client