Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9PWJE-xFDXznMnGEVsPVJ3sHFs.roa
File: H9PWJE-xFDXznMnGEVsPVJ3sHFs.roa (raw, json)
Hash identifier: d3B1ao2i4oJ7BXcYuieh3M5Y58bCQOjF2EBD/A8QOfU=
Subject key identifier: 1F:D3:D6:24:4F:B1:14:35:F3:9C:C9:C6:11:5B:0F:54:9D:EC:1C:5B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EABDB8965166D811CE1EC92713D7229DD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9PWJE-xFDXznMnGEVsPVJ3sHFs.roa
Signing time: Tue 09 Jun 2026 10:09:11 +0000
ROA not before: Tue 09 Jun 2026 10:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 62.105.210.0/23 maxlen: 23
62.105.212.0/23 maxlen: 23
62.192.98.0/23 maxlen: 23
62.192.104.0/23 maxlen: 23
62.192.116.0/23 maxlen: 23
62.192.118.0/23 maxlen: 23
135.196.6.0/24 maxlen: 24
135.196.9.0/24 maxlen: 24
135.196.23.0/24 maxlen: 24
135.196.27.0/24 maxlen: 24
135.196.31.0/24 maxlen: 24
135.196.35.0/24 maxlen: 24
135.196.98.0/24 maxlen: 24
135.196.105.0/24 maxlen: 24
135.196.116.0/24 maxlen: 24
135.196.186.0/23 maxlen: 23
195.162.244.0/24 maxlen: 24
212.189.117.0/24 maxlen: 24
213.169.208.0/22 maxlen: 22
213.169.212.0/22 maxlen: 22
213.169.216.0/23 maxlen: 23
213.169.224.0/23 maxlen: 23
213.169.228.0/23 maxlen: 23
213.169.230.0/23 maxlen: 23
213.169.246.0/23 maxlen: 23
213.169.250.0/23 maxlen: 23
213.169.252.0/23 maxlen: 23
217.117.160.0/24 maxlen: 24
217.117.164.0/22 maxlen: 22
217.117.168.0/22 maxlen: 22
217.117.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:db:89:65:16:6d:81:1c:e1:ec:92:71:3d:72:29:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 9 10:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd3d6244fb11435f39cc9c6115b0f549dec1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:38:d9:6c:90:75:18:b5:f8:5d:17:80:90:
d4:13:42:74:9f:1b:8a:72:00:21:f8:45:42:c8:08:
34:89:d5:5f:02:d0:aa:ea:f4:32:3e:76:25:07:97:
57:60:64:fe:f0:f0:6b:07:0d:f0:4f:f9:e1:fa:3a:
01:e3:ff:ee:23:d7:80:e4:5c:8c:4b:a8:d5:95:02:
d2:33:14:41:85:7a:51:c3:ae:08:57:69:53:77:a7:
5c:9a:1f:f2:ea:42:ce:58:6d:66:a0:99:f4:5c:87:
cc:09:de:5c:a7:ac:c6:0d:2d:97:bc:be:45:e9:4d:
2b:94:ae:cb:63:67:78:69:67:16:5a:77:30:ff:b7:
64:4b:ba:96:88:3a:d2:25:b4:33:d0:4b:91:1c:4e:
a4:a5:dc:e0:6e:51:6f:cd:f9:41:80:e8:8d:03:a4:
ed:6d:8c:b3:b1:bc:ea:24:81:a7:67:b9:ea:01:0c:
46:0c:4e:68:ed:8f:cf:7e:ad:f4:82:4c:35:70:0d:
72:5b:e3:78:06:d4:4b:e3:bc:23:dc:98:4a:9c:f7:
8f:b0:01:32:f4:cf:75:42:18:b6:1a:6a:86:c2:39:
26:45:9f:8b:5a:a7:17:09:ed:ce:a1:46:97:1a:cf:
fb:24:9f:6e:1e:de:f0:b4:aa:4e:91:7c:5e:11:39:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:D6:24:4F:B1:14:35:F3:9C:C9:C6:11:5B:0F:54:9D:EC:1C:5B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/H9PWJE-xFDXznMnGEVsPVJ3sHFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.210.0-62.105.213.255
62.192.98.0/23
62.192.104.0/23
62.192.116.0/22
135.196.6.0/24
135.196.9.0/24
135.196.23.0/24
135.196.27.0/24
135.196.31.0/24
135.196.35.0/24
135.196.98.0/24
135.196.105.0/24
135.196.116.0/24
135.196.186.0/23
195.162.244.0/24
212.189.117.0/24
213.169.208.0-213.169.217.255
213.169.224.0/23
213.169.228.0/22
213.169.246.0/23
213.169.250.0-213.169.253.255
217.117.160.0/24
217.117.164.0-217.117.175.255
Signature Algorithm: sha256WithRSAEncryption
31:25:56:9e:9c:67:6d:4e:cc:70:7e:34:f4:ce:d6:a5:1b:65:
eb:e9:91:86:3c:cb:a9:63:40:38:ce:72:d9:33:7a:86:0c:24:
1e:4e:d7:1c:60:f7:6c:78:60:84:83:56:31:f5:ef:43:0b:1e:
d1:0f:4c:17:a7:4c:c6:db:d1:33:82:6c:c8:33:6b:f5:74:4c:
a5:48:ba:49:bf:97:1a:37:92:bc:98:ca:1c:80:b6:36:56:20:
d0:24:b6:86:94:76:b2:a6:11:0e:8e:11:ed:d4:48:9f:27:0b:
ca:7b:9f:1d:3f:a9:f0:7c:37:55:32:5b:bf:bf:eb:c4:43:c6:
ea:54:30:75:6c:2c:b7:66:c3:a3:18:11:a0:e5:5f:00:9e:0f:
c1:8c:cf:6e:c7:6b:39:e0:9a:dd:69:51:43:a8:c5:e7:74:a6:
2c:57:d0:66:a1:e2:ba:c6:86:79:33:ff:7b:b3:9d:c5:92:86:
e6:38:73:20:55:ff:92:40:96:db:d5:19:91:a4:6e:c0:19:02:
f2:88:2d:1c:c6:37:5b:e9:20:13:3b:6d:81:01:aa:92:45:9d:
37:d0:9f:57:66:ca:69:87:e9:2d:82:df:fe:f3:9b:35:e7:1a:
35:46:bf:66:1a:83:76:46:0e:dc:bd:90:54:5d:ba:41:50:ad:
cc:72:13:9d
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZ6r24llFm2BHOHsknE9cindMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNjA5MTAwOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmQzZDYyNDRmYjExNDM1ZjM5Y2M5YzYxMTViMGY1NDlkZWMxYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x842WyQdRi1+F0XgJDUE0J0nxuK
cgAh+EVCyAg0idVfAtCq6vQyPnYlB5dXYGT+8PBrBw3wT/nh+joB4//uI9eA5FyM
S6jVlQLSMxRBhXpRw64IV2lTd6dcmh/y6kLOWG1moJn0XIfMCd5cp6zGDS2XvL5F
6U0rlK7LY2d4aWcWWncw/7dkS7qWiDrSJbQz0EuRHE6kpdzgblFvzflBgOiNA6Tt
bYyzsbzqJIGnZ7nqAQxGDE5o7Y/Pfq30gkw1cA1yW+N4BtRL47wj3JhKnPePsAEy
9M91Qhi2GmqGwjkmRZ+LWqcXCe3OoUaXGs/7JJ9uHt7wtKpOkXxeETkLzwIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFB/T1iRPsRQ185zJxhFbD1Sd7BxbMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSDlQV0pFLXhGRFh6bk1uR0VWc1BWSjNzSEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaowDAME
AT5p0gMEAT5p1AMEAT7AYgMEAT7AaAMEAj7AdAMEAIfEBgMEAIfECQMEAIfEFwME
AIfEGwMEAIfEHwMEAIfEIwMEAIfEYgMEAIfEaQMEAIfEdAMEAYfEugMEAMOi9AME
ANS9dTAMAwQE1anQAwQB1anYAwQB1angAwQC1ankAwQB1an2MAwDBAHVqfoDBAHV
qfwDBADZdaAwDAMEAtl1pAMEBNl1oDANBgkqhkiG9w0BAQsFAAOCAQEAMSVWnpxn
bU7McH409M7WpRtl6+mRhjzLqWNAOM5y2TN6hgwkHk7XHGD3bHhghINWMfXvQwse
0Q9MF6dMxtvRM4JsyDNr9XRMpUi6Sb+XGjeSvJjKHIC2NlYg0CS2hpR2sqYRDo4R
7dRInycLynufHT+p8Hw3VTJbv7/rxEPG6lQwdWwst2bDoxgRoOVfAJ4PwYzPbsdr
OeCa3WlRQ6jF53SmLFfQZqHiusaGeTP/e7OdxZKG5jhzIFX/kkCW29UZkaRuwBkC
8ogtHMY3W+kgEzttgQGqkkWdN9CfV2bKaYfpLYLf/vObNecaNUa/ZhqDdkYO3L2Q
VF26QVCtzHITnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:32 2026 by rpki-client