Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JxnXdZzNB0tVbD7YXOJM3KmBPBM.roa
File: JxnXdZzNB0tVbD7YXOJM3KmBPBM.roa (raw, json)
Hash identifier: 8fcNo5Lx1x/orhT7Y7V/jU1RwEHiQxMTapyI/n36u0I=
Subject key identifier: 27:19:D7:75:9C:CD:07:4B:55:6C:3E:D8:5C:E2:4C:DC:A9:81:3C:13
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F49C5231F6CEF28004F968699AC4D13E2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JxnXdZzNB0tVbD7YXOJM3KmBPBM.roa
Signing time: Fri 10 Jul 2026 02:04:44 +0000
ROA not before: Fri 10 Jul 2026 02:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 62.132.116.0/24 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.69.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
217.117.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:49:c5:23:1f:6c:ef:28:00:4f:96:86:99:ac:4d:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 10 02:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2719d7759ccd074b556c3ed85ce24cdca9813c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:78:bc:f7:dc:b3:bb:ab:cc:c8:9e:e0:b6:
57:f4:e5:ba:57:c1:47:82:56:f9:46:99:e3:03:35:
58:ea:2b:cd:58:cd:39:d2:33:69:bb:db:9a:a1:66:
26:63:17:20:a6:01:6b:89:e0:17:40:d3:f1:ec:b6:
b6:4e:b8:e2:30:19:3b:d2:32:b8:cb:20:16:8d:20:
b0:99:57:ef:19:8d:bb:9c:5e:f0:af:10:a7:aa:96:
45:d1:e5:56:5f:3f:0b:9c:25:85:24:59:56:e2:09:
cd:45:13:0b:2c:83:c4:2d:82:b9:07:83:99:7d:70:
70:d6:d0:ff:14:5f:93:65:a0:39:56:9b:40:67:8b:
3d:81:9e:a5:30:99:97:1b:a1:27:a6:52:fc:a3:39:
4b:03:a6:16:51:a3:c7:b8:d2:11:48:ed:5e:73:63:
29:30:10:41:5f:43:30:b7:47:9c:29:71:af:36:ab:
e9:52:0c:49:f1:d5:be:a4:ef:5a:04:e6:bd:b0:65:
c2:41:6d:14:ea:24:f3:cf:9c:a4:4a:8a:ba:ed:0f:
e3:1e:7a:2a:ff:84:eb:d7:71:49:18:4b:38:70:8c:
2e:e7:28:ec:73:d5:db:94:40:7e:83:50:58:85:a2:
21:81:4c:8c:87:9c:60:95:fa:c8:04:24:d4:33:3f:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:D7:75:9C:CD:07:4B:55:6C:3E:D8:5C:E2:4C:DC:A9:81:3C:13
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JxnXdZzNB0tVbD7YXOJM3KmBPBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.116.0/24
194.77.62.0/24
194.77.69.0/24
217.8.200.0/24
217.8.203.0/24
217.117.162.0/24
Signature Algorithm: sha256WithRSAEncryption
01:87:ff:35:75:64:4e:a1:9d:c0:53:ab:46:55:37:4e:d3:f8:
7b:0a:a7:e8:96:6c:98:3e:58:2c:cd:d9:0a:d5:6f:a6:33:97:
f2:50:5b:f7:e7:b0:f4:a4:84:41:b3:df:fc:02:f1:f4:f9:bc:
69:37:12:c6:cf:15:f4:91:e3:64:81:7e:74:08:a6:fe:ae:c4:
2d:21:8e:30:0b:48:ea:39:57:76:2d:92:a2:2e:98:3d:49:de:
15:5c:d3:2e:b8:17:ee:e8:bb:90:7f:f9:6c:74:a5:df:04:1f:
0d:a8:d3:95:ca:7c:fa:f7:48:3d:3c:62:7e:a1:7f:50:00:42:
af:fa:1e:f1:36:f3:94:9a:d2:04:2c:f3:8f:fe:e5:93:0c:f0:
94:a3:f9:7d:ef:1d:5b:4c:47:0b:7d:cc:ed:84:9a:72:0c:4c:
01:b0:f1:ff:9e:90:4f:2e:a5:1c:72:ca:b2:94:77:d0:d8:61:
ba:ae:5b:74:3b:99:14:cd:36:33:e7:98:71:f9:63:91:bd:43:
16:a4:5e:a9:90:2a:d1:ec:89:82:df:e2:73:ef:e9:30:83:6d:
ef:4c:ee:48:77:c5:a6:f4:70:a9:2a:cc:2f:06:03:c8:44:40:
8d:aa:9d:e6:5b:40:54:61:79:c5:a5:d4:b2:c9:ff:77:ee:a8:
20:2f:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:16 2026 by rpki-client