Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Vdg9yNZ4DbYxF59CvY-gwgFQBsc.roa
File: Vdg9yNZ4DbYxF59CvY-gwgFQBsc.roa (raw, json)
Hash identifier: V1BDPq0vVYHb47GpSTWPFd9Z4zEtJtLMhw8gXQo4mOE=
Subject key identifier: 55:D8:3D:C8:D6:78:0D:B6:31:17:9F:42:BD:8F:A0:C2:01:50:06:C7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019CBD911266C38A504155D7302DD459382A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Vdg9yNZ4DbYxF59CvY-gwgFQBsc.roa
Signing time: Thu 05 Mar 2026 10:35:27 +0000
ROA not before: Thu 05 Mar 2026 10:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 62.192.110.0/24 maxlen: 24
194.231.140.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:91:12:66:c3:8a:50:41:55:d7:30:2d:d4:59:38:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 5 10:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55d83dc8d6780db631179f42bd8fa0c2015006c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:48:76:af:2c:c5:02:e6:b9:0c:a5:14:02:
65:00:e2:9f:4d:a3:83:28:12:b0:ac:52:31:9c:69:
21:fb:70:5d:41:fc:65:ad:d4:e9:e5:79:3d:ce:37:
95:00:2b:f4:95:31:1e:a7:c1:26:37:69:2c:be:fd:
93:31:34:ba:3d:0f:86:ab:17:75:34:94:a1:0b:b3:
80:6b:9b:97:5b:d1:43:5b:79:48:04:29:f0:6a:9f:
2d:3e:5a:97:59:40:a8:25:66:c7:14:8e:3a:e6:94:
04:8f:4a:45:17:27:8d:8d:b3:ab:ef:56:30:f6:bb:
39:35:24:8c:4c:41:a2:02:b0:bf:6e:c6:e3:ef:26:
2c:46:33:dd:53:fe:94:17:ad:64:3a:55:27:7e:3c:
b8:25:67:37:4d:67:69:d3:85:12:21:ea:78:4a:a1:
76:aa:ac:c2:ad:57:bc:ef:3e:3b:15:af:ec:56:18:
1a:ef:3a:0a:fe:11:4b:63:c6:f6:1c:51:33:47:da:
50:33:38:05:49:9b:43:a2:a4:e1:9d:8f:85:05:99:
e8:98:63:cd:56:42:f6:06:cd:92:ac:5a:8e:c5:18:
66:d0:ce:52:52:75:00:60:e6:3d:f4:41:60:fe:c6:
cc:7c:a6:3d:20:ae:d8:1d:bb:bd:0f:f1:2e:6e:b8:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:3D:C8:D6:78:0D:B6:31:17:9F:42:BD:8F:A0:C2:01:50:06:C7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Vdg9yNZ4DbYxF59CvY-gwgFQBsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.110.0/24
194.231.140.0/24
194.231.142.0/24
194.231.148.0/24
194.231.199.0-194.231.200.255
194.231.213.0/24
194.231.222.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:20:6a:4b:0c:b5:a9:2b:05:a0:6a:8b:23:30:7d:e5:e6:18:
30:03:fe:84:5f:85:b6:a5:d4:3c:ad:2d:bb:66:2d:f5:12:68:
1d:02:58:9f:04:89:ba:50:ae:dc:60:0d:45:cb:1b:f8:f0:f7:
dc:fd:3d:8d:15:ab:96:db:78:ea:e9:f4:42:83:ac:f5:28:96:
a7:b3:4e:65:04:f1:2a:2b:44:1a:ac:bc:ee:3d:7d:5e:b0:72:
f9:67:2a:8e:99:70:c2:a9:4a:da:dd:cc:07:a5:39:4e:a9:44:
d1:75:f1:08:db:34:d2:53:e9:58:53:d5:05:1d:4c:75:16:2f:
81:1d:1b:f7:e8:68:45:e5:96:5f:93:82:3f:f2:7c:7d:e6:3a:
45:69:e3:02:60:c6:cc:f2:27:59:4f:74:6b:33:21:e4:bb:71:
57:35:1d:34:16:5f:31:0d:45:23:b1:e6:72:5b:0b:b8:04:8a:
d8:59:99:42:4d:79:41:02:a6:e9:35:8b:c2:7d:45:4f:2f:f9:
1d:79:59:dc:19:36:32:62:4d:b6:2f:08:a5:5f:db:70:82:5e:
e6:ec:cc:b1:92:89:08:83:42:a3:93:f3:73:b8:02:2c:99:6f:
b9:57:76:82:34:69:aa:5d:5c:57:34:3b:a0:d7:d2:d7:b1:c4:
06:56:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:35:14 2026 by rpki-client