Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E1L1xOk59Ytvj8VtveKmUiegjXQ.roa
File: E1L1xOk59Ytvj8VtveKmUiegjXQ.roa (raw, json)
Hash identifier: Bf36ZKP1LmeS35fxWtpN4Clbg3OWGdTH3IPsXgKv20A=
Subject key identifier: 13:52:F5:C4:E9:39:F5:8B:6F:8F:C5:6D:BD:E2:A6:52:27:A0:8D:74
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F998F06A4C0213CC35BF3E3FC83AC68FF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E1L1xOk59Ytvj8VtveKmUiegjXQ.roa
Signing time: Sat 25 Jul 2026 13:55:15 +0000
ROA not before: Sat 25 Jul 2026 13:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.24.0/24 maxlen: 24
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.192.0/24 maxlen: 24
62.105.194.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.132.2.0/24 maxlen: 24
77.67.6.0/24 maxlen: 24
77.67.18.0/24 maxlen: 24
77.67.26.0/24 maxlen: 24
77.67.49.0/24 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.4.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.70.0/24 maxlen: 24
194.77.78.0/24 maxlen: 24
194.77.186.0/24 maxlen: 24
194.77.187.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.122.83.0/24 maxlen: 24
194.122.84.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.21.132.0/24 maxlen: 24
195.21.134.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.8.0/24 maxlen: 24
212.189.18.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
212.189.36.0/24 maxlen: 24
212.189.54.0/24 maxlen: 24
212.189.58.0/24 maxlen: 24
212.189.61.0/24 maxlen: 24
212.189.69.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.189.116.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.117.162.0/24 maxlen: 24
217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:8f:06:a4:c0:21:3c:c3:5b:f3:e3:fc:83:ac:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 25 13:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1352f5c4e939f58b6f8fc56dbde2a65227a08d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:83:91:cf:12:a7:da:cb:69:ae:69:b5:1c:
66:e7:47:95:bb:d1:fd:9f:ba:1b:a6:19:7f:d1:2d:
51:8b:14:61:eb:0d:ba:b8:9f:75:59:cc:f8:91:68:
1a:4a:1e:58:9b:5d:a6:9c:0f:54:1b:36:71:d5:e4:
11:da:72:b2:ee:3e:b3:1a:85:81:f2:01:fb:11:01:
b8:e2:ac:43:7c:a8:7c:f8:a1:a3:e6:96:7b:62:98:
42:f3:82:c9:79:bf:9f:aa:45:cc:03:e2:10:fb:21:
f3:03:3a:bf:c7:dc:47:07:97:ce:ea:bb:6f:67:83:
b3:42:17:6b:e2:0b:29:cf:93:2a:3f:11:0a:df:38:
04:5c:41:09:b9:e4:20:55:9a:06:82:21:9b:bd:70:
54:98:11:b5:5b:38:c1:03:c7:1d:57:55:22:1a:64:
1e:fe:6d:9f:31:50:1d:bb:2c:a7:49:4d:39:30:fc:
9a:c1:46:2a:85:ac:8c:f5:5d:62:0c:0e:0c:c2:f7:
fb:ab:6f:0c:4a:6b:90:14:fc:87:e7:be:ef:e9:b5:
44:c3:0b:bb:cb:a9:4b:9f:08:3e:c5:19:95:a6:87:
5e:0b:3c:76:b7:16:42:46:05:a0:b2:1c:04:a8:9d:
93:68:73:38:92:72:f0:84:d6:a2:01:e4:fa:48:c6:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:F5:C4:E9:39:F5:8B:6F:8F:C5:6D:BD:E2:A6:52:27:A0:8D:74
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E1L1xOk59Ytvj8VtveKmUiegjXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
62.41.32.0/24
62.41.37.0/24
62.105.192.0/24
62.105.194.0/23
62.132.2.0/24
77.67.6.0/24
77.67.18.0/24
77.67.26.0/24
77.67.49.0/24
193.141.2.0/24
194.45.47.0/24
194.77.4.0/24
194.77.6.0/24
194.77.62.0/24
194.77.70.0/24
194.77.78.0/24
194.77.186.0/23
194.77.192.0/24
194.122.78.0/24
194.122.80.0/24
194.122.83.0-194.122.85.255
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.132.0/24
195.21.134.0/24
195.21.144.0-195.21.146.255
212.189.8.0/24
212.189.18.0/24
212.189.26.0/24
212.189.36.0/24
212.189.54.0/24
212.189.58.0/24
212.189.61.0/24
212.189.69.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.85.0/24
212.189.88.0-212.189.90.255
212.189.95.0-212.189.98.255
212.189.103.0-212.189.104.255
212.189.110.0/24
212.189.115.0-212.189.116.255
212.189.121.0/24
212.222.168.0/24
212.222.170.0/23
217.117.162.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:1a:c2:90:22:af:b2:b8:8b:81:65:f0:0c:fb:62:93:a1:b8:
e7:09:a0:b4:f3:51:f7:3a:f0:c3:70:e7:59:b6:20:50:f8:cf:
4f:26:2e:06:d9:86:95:37:a8:bc:e9:75:8d:d6:7d:92:c4:0d:
13:4b:3e:39:a2:62:21:69:9f:61:25:7f:9a:9a:02:e5:95:7a:
bc:bc:e8:1e:4e:59:8e:d2:94:5d:70:f7:04:c7:ec:e7:fd:51:
98:9c:53:09:ab:67:d6:42:c3:6d:13:d4:d8:46:21:66:e8:79:
94:80:56:5d:37:fc:98:57:8e:25:d5:50:fd:7c:89:f3:b7:57:
b4:c0:06:76:e6:49:de:54:01:21:96:eb:a8:e5:7b:53:fe:ef:
53:eb:a3:97:7e:c3:21:e2:3d:f3:4f:5d:90:35:31:8b:c7:13:
d4:19:60:09:63:ce:6d:5d:fc:a1:de:5d:d1:0d:1d:70:b0:33:
03:5e:0c:86:e4:ed:db:f8:ec:ee:48:80:58:c2:a4:dc:6d:e3:
76:19:11:c4:86:bb:bd:d5:2c:bc:85:ed:f2:64:18:38:54:e3:
8c:e0:ad:eb:11:25:1a:75:92:64:3b:a4:e9:7a:09:44:86:cc:
b5:4b:89:fd:7c:8d:15:16:a4:64:7d:b9:57:c0:62:70:69:c6:
10:20:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:56:04 2026 by rpki-client