Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G-A6H98c6zgz6WRxOQyRiAUl4JM.roa
File: G-A6H98c6zgz6WRxOQyRiAUl4JM.roa (raw, json)
Hash identifier: BCnBjFt0edIrHH7zNaRiacB/14Vgxz/KE03TnZPyB+Q=
Subject key identifier: 1B:E0:3A:1F:DF:1C:EB:38:33:E9:64:71:39:0C:91:88:05:25:E0:93
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A146EF5E656C171BD39A7ED7599BA68051
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G-A6H98c6zgz6WRxOQyRiAUl4JM.roa
Signing time: Fri 16 Oct 2026 22:57:34 +0000
ROA not before: Fri 16 Oct 2026 22:57:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 62.105.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:ef:5e:65:6c:17:1b:d3:9a:7e:d7:59:9b:a6:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 16 22:57:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1be03a1fdf1ceb3833e96471390c91880525e093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:9b:1a:8d:77:cb:3f:b0:e7:de:10:f1:a9:
65:23:bf:71:bd:83:9a:48:be:e4:2f:b7:97:8f:c8:
07:be:48:8a:4f:2c:4e:c6:55:80:9a:3b:12:00:b9:
6c:bd:1d:f7:eb:1b:87:bf:d5:38:06:90:a6:ee:85:
c2:6b:fb:d9:09:e8:98:6f:81:64:00:27:af:4f:c5:
34:a9:60:a6:dd:05:fc:a0:7c:84:cd:5e:72:89:76:
64:f1:e5:96:ac:29:c1:99:93:14:15:34:37:6b:cd:
b5:47:85:7f:40:b0:4b:19:36:6a:7c:18:a3:1f:3c:
f5:6b:16:64:ae:e7:bb:22:2f:55:6f:ed:3c:ba:93:
20:e2:fa:6a:0d:14:3d:ea:ed:88:ea:5e:b6:35:d7:
e7:c7:9d:62:d1:f2:ef:7f:1e:40:3b:34:6a:f4:10:
86:fb:c8:ff:94:ad:04:a7:24:e2:ac:8c:50:b5:a0:
66:db:34:71:36:7d:c8:8f:e1:a1:df:5a:49:2e:cb:
fb:59:a2:dc:63:9c:11:9f:68:5e:de:30:9b:6f:51:
e2:68:fd:c7:1c:c0:f3:77:1e:21:eb:c8:fa:19:e0:
cb:6b:4f:e7:9c:8c:41:f8:a8:8a:57:1c:6a:6b:05:
d0:c8:ca:36:aa:aa:1e:24:79:ca:8c:8e:75:58:41:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:3A:1F:DF:1C:EB:38:33:E9:64:71:39:0C:91:88:05:25:E0:93
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G-A6H98c6zgz6WRxOQyRiAUl4JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.196.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:cb:80:87:2f:e3:d4:67:80:8f:a8:98:30:07:6b:b4:1f:19:
7b:56:e8:a7:fe:c5:f2:dc:a2:96:d0:b8:b2:84:4c:df:de:dc:
1b:b7:e8:ca:52:2e:22:90:39:25:f6:e1:be:c9:f1:ad:2f:2a:
3f:d7:60:57:06:2b:d2:9b:48:37:0f:79:f5:cf:e7:e3:ad:05:
73:77:1f:dc:1a:1a:62:10:0b:d5:1e:01:66:92:1a:68:e8:24:
0c:aa:fa:2c:05:52:15:7a:c5:de:09:0a:e8:d0:d1:5c:48:f5:
28:56:f6:f9:51:1b:d5:94:e0:4a:e4:46:d1:57:35:32:49:a3:
ce:b0:5b:7c:6c:c5:f7:2f:3d:5b:58:9c:9f:2d:aa:dd:6a:38:
9f:30:49:bd:38:5a:1b:fe:51:50:db:38:24:0a:9a:45:77:60:
8d:c2:5b:44:91:02:37:ab:5c:46:6f:1a:55:e2:0f:62:a0:b4:
e5:10:9c:d9:56:8f:e2:e0:d8:a4:5d:ae:55:d6:61:80:64:40:
a9:81:b3:5e:20:a6:80:a2:27:1d:f0:ac:8b:9d:10:94:db:00:
52:78:8b:97:df:55:31:02:9d:fd:4f:38:1d:7e:04:23:73:4d:
fc:38:0a:e2:b9:1b:92:8c:9c:eb:93:ce:73:6c:c3:91:eb:3c:
77:e2:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:06:04 2026 by rpki-client