Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OdyCxEK4kAinCq1EdtMYaxruuFE.roa
File: OdyCxEK4kAinCq1EdtMYaxruuFE.roa (raw, json)
Hash identifier: K1byMOwf6otAoW9KsYxiHbiolmWQw60ZJ1gzjHLlEPY=
Subject key identifier: 39:DC:82:C4:42:B8:90:08:A7:0A:AD:44:76:D3:18:6B:1A:EE:B8:51
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EAC03D22760415589A90515214ED3FE15
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OdyCxEK4kAinCq1EdtMYaxruuFE.roa
Signing time: Tue 09 Jun 2026 10:53:11 +0000
ROA not before: Tue 09 Jun 2026 10:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.105.200.0/22 maxlen: 22
62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.118.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:03:d2:27:60:41:55:89:a9:05:15:21:4e:d3:fe:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 9 10:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39dc82c442b89008a70aad4476d3186b1aeeb851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:ec:1f:06:20:6b:80:c0:a4:98:32:fd:e4:
48:6a:b0:e5:5e:93:d4:25:f3:89:c3:12:d4:4e:0f:
00:c0:66:b6:06:51:0d:24:b6:ca:3d:3b:11:d8:c0:
0b:2f:88:88:12:c2:18:9d:c1:d5:ba:d1:a7:df:68:
6d:2f:05:f0:7f:d7:3d:06:2d:70:50:e4:a3:5e:1b:
74:10:d3:54:cd:a1:51:f9:40:52:e6:60:e0:82:77:
34:16:7d:13:a9:70:bf:c6:51:3c:01:5b:8e:a7:a4:
ed:af:9b:a2:54:e0:29:28:76:c5:18:72:d4:6d:3d:
47:4f:65:67:c7:ab:8d:54:da:b6:2a:c1:b4:ba:75:
ec:82:25:1f:30:f1:c0:57:24:fb:95:8c:c6:44:ac:
ff:25:59:9e:45:66:11:0c:bd:72:6b:bb:00:65:b6:
a9:0b:8d:eb:85:73:a8:2c:09:c3:05:eb:94:0e:24:
78:3b:ce:07:3f:d4:70:b5:15:d1:0c:ab:9b:ee:1f:
d0:fe:13:7d:e3:80:7b:be:47:3d:cd:6d:1c:f4:01:
24:d6:91:6e:ac:ec:0e:78:de:95:ca:4f:70:de:4e:
e5:e0:81:d2:19:6e:5d:dd:dc:52:d0:f0:dd:18:e3:
98:99:5c:71:c0:69:26:99:c1:cb:33:f8:ce:c0:59:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:82:C4:42:B8:90:08:A7:0A:AD:44:76:D3:18:6B:1A:EE:B8:51
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OdyCxEK4kAinCq1EdtMYaxruuFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.200.0/22
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
212.189.118.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
23:f3:7a:d2:79:c1:50:e0:8a:6f:56:91:ec:88:0c:a1:64:c0:
50:4b:f6:eb:ff:03:ee:b5:c6:a6:b3:ce:3c:11:81:2d:1e:20:
e1:20:bc:84:56:60:2f:96:d6:73:33:98:2d:21:12:55:c2:e1:
1d:04:4e:87:75:87:80:e7:f0:c3:44:9d:ee:ed:80:0d:f7:f6:
03:ba:4b:20:24:29:85:59:83:99:12:c3:76:1a:b0:34:6f:1d:
c9:3b:34:8c:84:7b:55:57:b0:11:e6:1c:5b:6d:5e:dd:17:ef:
8e:b6:c1:56:4d:80:3d:b8:f8:0a:49:ce:36:18:ad:ea:0e:04:
55:a2:91:36:0e:bf:2b:9b:5a:f1:b8:fc:eb:d3:7c:88:cb:d0:
34:8c:56:ae:4b:aa:c8:1d:c0:f9:7e:ed:9a:fb:46:8b:21:b9:
f4:25:45:c3:80:58:0a:c0:e2:8d:0b:71:f8:50:65:ba:25:fd:
39:89:94:18:10:0d:a7:da:82:6e:9f:74:df:be:e5:2d:10:d5:
45:cb:ea:b1:a1:e5:0e:0f:83:79:19:fc:13:e7:1e:74:32:49:
76:f3:12:a7:52:87:71:05:59:74:ba:ee:b7:a2:8c:92:52:cd:
7b:41:5b:bf:05:bc:83:ef:9d:a9:f5:03:a6:a2:25:b3:a6:75:
21:2d:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:30 2026 by rpki-client