Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G6C5j7mfi3waD4TQ2hYs8EByirU.roa
File: G6C5j7mfi3waD4TQ2hYs8EByirU.roa (raw, json)
Hash identifier: Mcx1OumAB0ACe15uOiMrSbzAcKsHNLskpzyH1iXbJcQ=
Subject key identifier: 1B:A0:B9:8F:B9:9F:8B:7C:1A:0F:84:D0:DA:16:2C:F0:40:72:8A:B5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FFF990DB3FA1AFBD146F9CB3D9D71045E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G6C5j7mfi3waD4TQ2hYs8EByirU.roa
Signing time: Fri 14 Aug 2026 09:27:28 +0000
ROA not before: Fri 14 Aug 2026 09:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.105.200.0/22 maxlen: 22
62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.118.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.198.0/24 maxlen: 24
217.8.202.0/24 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:99:0d:b3:fa:1a:fb:d1:46:f9:cb:3d:9d:71:04:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 14 09:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ba0b98fb99f8b7c1a0f84d0da162cf040728ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:d7:2b:f5:d3:53:c3:81:0d:e9:d8:1d:12:
4f:e9:ba:b6:fb:7c:68:86:f7:99:55:b0:88:39:2c:
1a:08:bb:87:c7:e8:e2:a0:84:35:de:09:93:49:55:
5d:b7:dd:27:61:73:d7:81:27:c9:75:14:80:7b:e1:
3d:25:e9:30:cf:31:f1:d3:37:05:a3:ab:bf:d3:7c:
6d:cc:e3:ce:23:3a:65:31:e2:28:b5:f0:3d:e7:9c:
89:df:8b:28:d3:70:2b:0d:b6:2b:72:9e:5a:a4:08:
8e:a1:f7:71:54:60:fd:c7:ab:8e:78:42:d1:88:81:
7a:3e:76:e8:f5:57:e8:27:e7:bd:15:b4:03:4b:2c:
c9:32:d1:ac:44:4c:7d:62:03:78:53:bb:c7:ff:e5:
0c:28:36:3a:2e:8c:2a:f0:28:14:0f:00:12:fa:d0:
4e:7d:b0:bd:37:14:64:28:ab:92:c6:8d:d4:52:d8:
e2:2d:48:73:45:fe:22:a7:48:71:ea:28:66:7b:80:
5d:63:cb:74:21:00:83:0d:b9:d7:65:3a:13:7b:e1:
8e:e4:87:2c:f0:9f:29:39:9d:ac:3b:6a:9b:14:ab:
0e:ce:1b:a1:4d:5a:78:e9:60:8e:f5:e0:8f:cf:20:
92:98:e7:20:05:ce:56:d8:e9:8b:13:95:97:9e:47:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:B9:8F:B9:9F:8B:7C:1A:0F:84:D0:DA:16:2C:F0:40:72:8A:B5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G6C5j7mfi3waD4TQ2hYs8EByirU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.200.0/22
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
212.189.118.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.198.0/24
217.8.202.0/24
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
38:fe:76:ab:e0:53:98:6b:9f:26:db:3f:fb:01:55:9c:d8:89:
0f:a9:a4:0f:db:bd:8a:4a:85:04:cf:f1:d6:94:e5:ce:cf:40:
99:4b:50:ff:16:15:d0:d5:ab:eb:1e:05:42:29:d5:79:87:60:
a0:ca:a2:e6:a1:2b:4d:85:ef:87:3b:b5:4b:56:3d:db:42:07:
c7:84:bb:a1:05:92:b9:98:43:80:30:15:72:11:d4:d4:29:4b:
d7:78:d3:51:24:3c:f3:3d:1b:7b:68:bc:6f:ed:a8:91:19:42:
71:13:d2:2d:46:a1:b5:f1:f7:58:ff:ea:97:04:cd:75:8a:6d:
98:98:40:09:98:c3:e8:31:2a:5b:f5:f9:f6:fa:c6:22:0a:4c:
65:72:78:0f:a2:9c:ee:35:72:ba:74:1b:66:a1:17:1e:77:36:
ce:3b:ac:be:82:5b:70:a8:e8:53:2f:30:e1:30:1b:0b:8a:dc:
55:c9:2a:5a:70:b2:90:1a:fc:d8:dc:e3:11:08:8c:c1:7c:85:
b3:a4:95:12:ae:7a:e6:58:c2:4c:0a:fb:1d:be:d6:f9:fc:e7:
d4:fb:37:3b:bd:42:d0:74:4d:22:df:4c:b9:b0:b2:02:ed:6d:
f7:fb:cb:a0:7c:e8:58:e7:bd:2f:ca:e1:83:2c:2f:7a:fd:6a:
58:ea:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:05 2026 by rpki-client