Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EfdwDcABZxBx9pEzFxFoah9Nibw.roa
File: EfdwDcABZxBx9pEzFxFoah9Nibw.roa (raw, json)
Hash identifier: zHVruHjF0wL3jb8pr8e8ueVlo0t/4RTIXS15MN9NFwY=
Subject key identifier: 11:F7:70:0D:C0:01:67:10:71:F6:91:33:17:11:68:6A:1F:4D:89:BC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0846D91ABB1DD4737524DBC1FD185858B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EfdwDcABZxBx9pEzFxFoah9Nibw.roa
Signing time: Wed 09 Sep 2026 04:29:28 +0000
ROA not before: Wed 09 Sep 2026 04:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 62.41.26.0/24 maxlen: 24
77.67.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:6d:91:ab:b1:dd:47:37:52:4d:bc:1f:d1:85:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 9 04:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11f7700dc001671071f691331711686a1f4d89bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:bd:5d:20:71:55:f9:36:99:d8:d1:a4:39:
4a:31:77:23:98:98:e4:22:54:03:62:6a:68:35:77:
20:00:4a:ba:61:0a:cc:00:5c:ea:2b:36:af:8b:6f:
ec:52:06:fd:0a:07:6f:69:04:72:a6:24:cb:c3:c6:
75:4c:63:60:a3:8d:4a:e4:f0:90:2f:2b:ab:55:d5:
0b:a3:ca:a5:37:06:07:b1:d9:87:3e:83:d7:80:ed:
34:82:bc:8b:30:53:2e:96:e7:39:50:6a:6e:a4:44:
56:4a:ee:1a:58:d8:2f:58:60:01:24:7e:0a:21:6d:
27:03:08:85:5f:d5:d9:46:6a:58:ea:1e:7e:18:97:
86:bd:7d:7a:fd:48:59:5b:9c:bb:42:1d:6f:cf:cd:
7b:6a:fd:7d:df:48:38:f6:ca:62:40:9c:ef:85:b9:
86:f8:95:72:c3:a3:b8:0a:a0:47:ba:0f:53:9a:c8:
e8:e6:6e:13:9c:02:25:2a:6a:91:b6:0f:ac:c5:00:
c7:7f:30:3a:16:c9:07:9f:90:fd:f0:d9:13:85:8b:
13:b0:c3:35:dc:fd:99:57:d4:45:30:bc:96:45:68:
e6:4e:aa:19:ea:ff:d7:7c:2d:3c:9c:07:45:53:54:
d3:38:09:e3:81:d6:35:6c:f9:37:c5:0b:dd:1e:cb:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F7:70:0D:C0:01:67:10:71:F6:91:33:17:11:68:6A:1F:4D:89:BC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EfdwDcABZxBx9pEzFxFoah9Nibw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.26.0/24
77.67.58.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c9:59:78:71:80:df:6b:c9:c3:14:b9:b8:64:05:30:62:b9:
ec:2b:81:8c:bd:99:22:b4:2a:e7:0e:1a:0b:fd:48:93:34:3a:
ed:9b:41:81:09:86:f3:ca:87:4f:87:9b:22:6e:34:fd:f3:fb:
71:d6:f7:fd:d3:fd:88:15:e1:51:2c:b1:68:74:cb:05:97:94:
17:91:f6:4a:a6:42:1d:2b:d2:f1:f3:bb:96:0b:aa:87:2c:ab:
80:b8:6a:29:2b:ec:1b:b7:65:99:1f:24:ba:e9:37:bb:c1:80:
bd:81:97:f8:6b:62:f2:58:de:10:27:67:4b:d9:c7:70:a3:01:
c5:e4:99:fd:3a:44:35:ac:88:18:e0:b9:98:21:8e:ba:ee:56:
04:b7:b9:63:6b:bb:f9:80:8a:4c:41:9b:1f:8a:0b:37:0e:ef:
cf:a0:cb:5e:57:52:a7:0b:b2:87:16:69:33:7c:45:7e:38:c3:
a1:b1:ff:0c:f4:e6:b8:63:00:35:b9:83:dc:2e:34:14:c7:87:
37:5b:5c:2c:0d:8a:c9:b6:08:42:56:3d:fe:32:d4:f4:d9:f1:
a6:a7:88:66:1e:24:b5:67:14:86:04:f3:a8:cc:df:a5:4d:f8:
2c:4c:25:af:f0:18:71:56:8c:95:e3:df:1c:4c:fd:2d:a5:8b:
30:33:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:03:59 2026 by rpki-client