Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E4qKWA_7YOpr6qzNYcg_m9enLkg.roa
File: E4qKWA_7YOpr6qzNYcg_m9enLkg.roa (raw, json)
Hash identifier: BYAp5fUJ9CydXxO/QBDhMqzF4W2iCST15094GmDdhFQ=
Subject key identifier: 13:8A:8A:58:0F:FB:60:EA:6B:EA:AC:CD:61:C8:3F:9B:D7:A7:2E:48
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F7DAAD33290143B31FFD7F49D6A4C24CC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E4qKWA_7YOpr6qzNYcg_m9enLkg.roa
Signing time: Mon 20 Jul 2026 03:56:14 +0000
ROA not before: Mon 20 Jul 2026 03:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 62.105.218.0/24 maxlen: 24
194.77.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:aa:d3:32:90:14:3b:31:ff:d7:f4:9d:6a:4c:24:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 20 03:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138a8a580ffb60ea6beaaccd61c83f9bd7a72e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:e9:9c:20:54:07:cd:10:af:83:9e:7f:26:
fc:8f:3d:cf:78:af:03:26:e3:d0:b0:28:ad:73:9b:
18:34:cc:46:93:f8:ae:37:38:70:37:7d:04:f1:cf:
88:3d:86:04:7d:6f:72:01:91:60:99:56:ce:f0:44:
8c:50:db:0a:55:b5:ed:55:9a:56:cd:0d:b9:7e:29:
3d:eb:18:3e:f7:63:bd:72:cc:38:cf:cf:ad:cf:f0:
11:d8:38:dc:17:26:61:0d:c9:31:d6:13:34:de:cc:
11:9c:4f:1e:03:bf:6b:2b:80:cb:14:80:32:ea:54:
53:4e:1f:31:5b:23:a7:18:67:a9:c1:ba:8c:a7:4c:
94:20:14:c6:c3:38:31:13:0f:2f:f2:8e:e2:2a:ca:
71:54:19:24:03:dc:28:08:40:4a:5d:3a:79:35:ab:
ed:88:94:49:8b:ea:e2:e9:ce:7c:f8:1e:ac:de:2e:
bf:dc:7f:fc:c3:e7:4a:4e:4c:fe:c5:c9:2a:e9:c0:
da:24:1f:a5:fa:da:7f:cc:da:be:bb:d1:a9:ae:da:
b1:44:f1:c7:70:dc:78:5b:d5:ee:38:dc:18:86:69:
07:4b:21:5d:8e:53:ae:03:d0:13:79:4c:c6:d3:32:
05:43:6f:61:20:ef:cc:78:cd:67:24:93:8c:22:74:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:8A:58:0F:FB:60:EA:6B:EA:AC:CD:61:C8:3F:9B:D7:A7:2E:48
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E4qKWA_7YOpr6qzNYcg_m9enLkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.218.0/24
194.77.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d9:01:4b:81:af:53:8d:1c:6c:38:58:44:58:cd:4c:74:af:
b0:1d:7a:1f:eb:f8:19:f7:1f:49:9a:46:d1:47:a0:a2:2d:93:
3a:bf:3c:f4:90:95:2a:03:4b:38:01:60:1f:b9:3d:c9:61:19:
e7:34:2d:b3:4f:bd:c2:c3:1b:22:e2:92:9f:7b:b9:14:67:e1:
9e:60:f9:82:8a:78:e0:64:62:01:7c:45:46:e5:f0:99:cf:de:
f1:aa:b4:ec:47:64:47:6a:9e:52:e3:39:d2:54:f0:5e:b7:19:
57:63:06:7e:7e:d5:a1:31:0b:e3:1c:d8:6e:12:e5:b2:8f:ae:
ad:24:48:b9:e0:d2:8c:bc:e6:27:32:72:fa:f9:28:4e:17:47:
30:d8:18:f1:07:12:93:49:a1:8b:74:63:c8:95:87:ae:b0:18:
7d:ea:95:af:2b:69:fa:3d:ca:bd:ad:41:e4:17:4e:08:e8:d2:
30:d4:54:06:5d:f0:22:dd:ac:20:11:b4:23:f9:e3:77:70:0b:
6b:eb:37:9d:a2:87:e8:5c:65:db:c8:d3:e8:40:94:6f:75:be:
12:b6:a6:50:51:e6:d6:93:6c:05:f8:61:20:c4:7f:ba:4f:4c:
22:4b:8b:71:63:9c:1e:57:43:fe:4d:8e:0a:ff:39:d1:7c:24:
c4:c5:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:44:02 2026 by rpki-client