Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qyw2SzbY7OqdiDKMnSlAwZof9y8.roa
File: Qyw2SzbY7OqdiDKMnSlAwZof9y8.roa (raw, json)
Hash identifier: 0kpcYLgzeBahH52M+Zpx7+kphPO6S4p8UYV2ZL7Bfq4=
Subject key identifier: 43:2C:36:4B:36:D8:EC:EA:9D:88:32:8C:9D:29:40:C1:9A:1F:F7:2F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A147297A781EBAB598A475CD9B1D7333FC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qyw2SzbY7OqdiDKMnSlAwZof9y8.roa
Signing time: Sat 17 Oct 2026 00:01:02 +0000
ROA not before: Sat 17 Oct 2026 00:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 62.132.2.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.11.0/24 maxlen: 24
77.67.27.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.70.0/24 maxlen: 24
194.77.186.0/24 maxlen: 24
194.122.79.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
212.189.48.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:7a:78:1e:ba:b5:98:a4:75:cd:9b:1d:73:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 17 00:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=432c364b36d8ecea9d88328c9d2940c19a1ff72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:75:ba:d7:0b:4f:f5:13:35:22:e3:06:b3:
1f:cf:6c:2d:96:c4:1c:79:a3:65:45:c4:ff:b7:8d:
64:70:7e:51:88:30:32:0f:ac:c8:8d:fa:70:b1:ef:
97:e8:9a:22:64:7a:a9:f0:18:76:c3:11:97:ac:89:
c6:cc:1a:77:ca:40:a3:d0:cc:6e:80:29:d1:3b:df:
ce:c6:a9:82:4d:41:69:63:64:5a:69:6f:19:c8:7f:
8c:6a:fe:32:70:5c:90:0b:74:05:d7:6c:25:df:32:
70:eb:55:1b:7c:db:48:81:3a:a1:52:fc:79:32:93:
27:76:6e:59:87:61:00:f9:5d:4e:61:66:54:e1:57:
fc:bc:e1:e4:7c:1a:50:fb:8c:22:51:0e:f2:0c:8a:
88:29:8a:6a:62:3e:67:4e:c2:77:59:dd:0a:02:10:
8e:7a:d3:dc:e2:7e:d3:da:01:38:f9:c4:2f:02:c0:
dc:0c:63:96:c8:bf:4a:57:f1:a6:ce:34:a5:65:cd:
f5:67:d6:f0:33:47:86:4a:5f:10:d8:b6:e5:de:da:
49:11:66:f5:88:3f:87:5f:8f:48:0f:3c:dc:ba:6f:
f4:bd:67:0c:bb:58:9b:83:c0:c9:25:6a:7f:5b:b2:
bc:50:b2:ed:9f:a5:42:b7:43:21:34:ce:d8:fe:8d:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:36:4B:36:D8:EC:EA:9D:88:32:8C:9D:29:40:C1:9A:1F:F7:2F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qyw2SzbY7OqdiDKMnSlAwZof9y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.2.0/24
62.132.116.0/24
77.67.11.0/24
77.67.27.0/24
77.67.31.0/24
194.77.26.0/24
194.77.70.0/24
194.77.186.0/24
194.122.79.0/24
195.21.129.0/24
195.21.144.0/24
195.21.146.0/24
212.189.24.0/24
212.189.48.0/24
212.189.88.0/24
212.222.112.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:62:40:ef:45:f6:e8:fe:cd:a3:7a:53:4b:1c:e9:d2:da:e0:
08:e0:88:ab:2c:56:e4:9e:fa:b5:9c:38:65:74:86:0c:a3:94:
dc:0e:ab:b8:be:e5:55:7f:3d:29:1a:9f:26:c2:a2:86:34:75:
8e:27:f5:bc:9c:a5:84:66:b9:20:f3:01:18:66:92:c4:1f:66:
f9:13:ed:c2:38:bf:20:12:50:ba:c7:36:41:28:e0:b1:8a:48:
9a:39:cd:98:74:56:60:14:1e:b7:c4:13:ea:e9:19:f6:49:32:
99:80:f7:20:49:c8:73:81:58:4f:4c:9f:62:2f:a3:eb:e1:16:
40:6d:3c:56:44:9f:d0:11:90:62:91:1d:c9:2f:df:31:e9:67:
84:99:0b:05:64:fc:6c:47:59:74:32:ff:ae:f3:81:1a:fe:eb:
04:be:7d:30:05:b3:10:7f:0b:38:9b:49:c1:b7:4c:7a:61:13:
9f:04:62:dd:19:07:eb:54:aa:1e:83:17:7f:06:e6:fa:5e:71:
1b:66:70:f3:cc:13:a3:d8:cf:7f:13:8c:12:9d:76:07:3f:1f:
79:96:79:75:55:3d:96:3d:23:f9:a9:5f:1f:a3:f4:9d:32:be:
75:c8:58:60:7d:9e:e9:96:70:73:90:11:f6:bf:2a:c3:09:2d:
a3:87:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:39 2026 by rpki-client