Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ItJwVni_yESlAU0R_VRhaAO39C0.roa
File: ItJwVni_yESlAU0R_VRhaAO39C0.roa (raw, json)
Hash identifier: UW4mu8+WEPWDSrxWYmjddNoi0yTSS1MiNOhms9pECRk=
Subject key identifier: 22:D2:70:56:78:BF:C8:44:A5:01:4D:11:FD:54:61:68:03:B7:F4:2D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A07F2587E4FFDAD43CF58FDB6E8D792A12
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ItJwVni_yESlAU0R_VRhaAO39C0.roa
Signing time: Tue 08 Sep 2026 03:52:41 +0000
ROA not before: Tue 08 Sep 2026 03:52:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 62.105.218.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
194.77.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:25:87:e4:ff:da:d4:3c:f5:8f:db:6e:8d:79:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 8 03:52:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d2705678bfc844a5014d11fd54616803b7f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:4d:fc:70:45:6c:7f:7a:b9:3c:74:94:6b:
66:d6:b3:55:53:cf:86:61:74:5e:97:99:c6:4c:79:
6f:ef:b3:e4:6e:bc:97:9f:62:0a:60:a6:94:89:0b:
fe:45:b8:b8:f4:01:50:94:ca:de:39:70:c9:f1:73:
46:71:43:cc:d9:5b:c5:2c:37:cf:1e:80:3f:e9:6e:
ec:c4:ad:f4:e1:60:4b:08:ff:88:b0:69:7c:49:99:
bd:c6:36:be:d9:25:b8:21:16:80:b0:d0:cc:10:d9:
40:35:c7:c1:33:bc:af:a8:e0:33:d2:ac:35:72:4a:
7e:0b:74:db:bf:62:e3:db:bb:f2:56:40:69:ff:7a:
e9:e7:a6:4c:b6:f3:39:d6:cb:40:cb:c8:11:69:d2:
f4:36:49:9b:b4:f5:80:f5:2b:40:1c:c7:fa:f7:21:
26:89:c8:0e:2c:f3:77:50:e2:07:e1:56:a2:3f:d8:
13:d2:2c:bd:13:0e:35:0c:79:79:cd:3a:39:1b:2d:
f2:56:ae:77:60:89:cb:f1:1e:28:1b:d6:4e:da:da:
e1:72:06:c8:5f:6a:1e:69:7e:b6:fc:8a:fc:be:e1:
c2:f6:4f:32:34:00:6a:88:3b:79:ec:4c:30:dc:cf:
6b:97:48:44:90:f9:72:3b:4e:d6:bb:d6:1b:fd:b2:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:70:56:78:BF:C8:44:A5:01:4D:11:FD:54:61:68:03:B7:F4:2D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ItJwVni_yESlAU0R_VRhaAO39C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.218.0/24
194.77.26.0/24
194.77.228.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:3d:44:63:92:da:ff:7b:12:1c:09:59:92:84:3b:e3:f5:4b:
2b:a0:41:83:8a:eb:d0:ea:00:b2:fc:55:f9:0a:92:50:6a:31:
92:6c:85:b6:3e:56:8a:47:83:f9:5f:75:41:61:4b:68:82:84:
55:52:76:9c:2a:9b:74:91:d1:2d:15:ed:2d:0b:25:40:a2:5a:
05:98:57:61:9f:41:28:aa:65:09:3a:e7:b0:02:9d:e4:0e:9c:
72:2d:f3:a3:c3:87:3d:cd:11:43:4f:f7:61:af:77:96:04:68:
70:16:93:b1:47:70:73:ec:52:76:3a:58:81:44:00:6c:05:26:
10:66:bb:ec:49:a7:4e:f4:30:36:f1:11:f8:d9:d4:1f:17:fe:
d1:44:3e:f6:66:a2:7d:75:3c:3a:19:a2:d6:67:c7:99:49:d2:
91:9c:eb:33:56:46:ac:86:e2:5c:42:3f:58:6e:f8:27:83:45:
55:c3:a7:bc:7d:b3:b0:dc:b0:bf:80:7e:c7:36:6a:19:05:5d:
ae:12:80:db:a5:8a:ab:8b:94:99:ab:46:9e:15:a9:5f:00:df:
78:af:8f:00:56:3c:d2:2c:ea:af:76:8f:cd:37:ff:ac:5a:ab:
9e:1a:e8:7f:3a:d6:de:2c:38:46:38:8f:a2:a9:a8:9f:07:a1:
ae:d5:85:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB/JYfk/9rUPPWP226NeSoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTA4MDM1MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQyNzA1Njc4YmZjODQ0YTUwMTRkMTFmZDU0NjE2ODAzYjdmNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslRN/HBFbH96uTx0lGtm1rNVU8+G
YXRel5nGTHlv77PkbryXn2IKYKaUiQv+Rbi49AFQlMreOXDJ8XNGcUPM2VvFLDfP
HoA/6W7sxK304WBLCP+IsGl8SZm9xja+2SW4IRaAsNDMENlANcfBM7yvqOAz0qw1
ckp+C3Tbv2Lj27vyVkBp/3rp56ZMtvM51stAy8gRadL0NkmbtPWA9StAHMf69yEm
icgOLPN3UOIH4VaiP9gT0iy9Ew41DHl5zTo5Gy3yVq53YInL8R4oG9ZO2trhcgbI
X2oeaX62/Ir8vuHC9k8yNABqiDt57Eww3M9rl0hEkPlyO07Wu9Yb/bKOIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCLScFZ4v8hEpQFNEf1UYWgDt/QtMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSXRKd1ZuaV95RVNsQVUwUl9WUmhhQU8zOUMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPmnaAwQA
wk0aAwQBwk3kMA0GCSqGSIb3DQEBCwUAA4IBAQDcPURjktr/exIcCVmShDvj9Usr
oEGDiuvQ6gCy/FX5CpJQajGSbIW2PlaKR4P5X3VBYUtogoRVUnacKpt0kdEtFe0t
CyVAoloFmFdhn0EoqmUJOuewAp3kDpxyLfOjw4c9zRFDT/dhr3eWBGhwFpOxR3Bz
7FJ2OliBRABsBSYQZrvsSadO9DA28RH42dQfF/7RRD72ZqJ9dTw6GaLWZ8eZSdKR
nOszVkashuJcQj9Ybvgng0VVw6e8fbOw3LC/gH7HNmoZBV2uEoDbpYqri5SZq0ae
FalfAN94r48AVjzSLOqvdo/NN/+sWqueGuh/OtbeLDhGOI+iqaifB6Gu1YWJ
-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:00 2026 by rpki-client