Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aIiO9XvueXO-vjQZmYafoQxqtgo.roa
File: aIiO9XvueXO-vjQZmYafoQxqtgo.roa (raw, json)
Hash identifier: EK4gFUuv8pnw2qa0apKRKQuo3Qg/Uss9djqYzERRDTQ=
Subject key identifier: 68:88:8E:F5:7B:EE:79:73:BE:BE:34:19:99:86:9F:A1:0C:6A:B6:0A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F65B71C4E1317376BCC927B84C9B0703A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aIiO9XvueXO-vjQZmYafoQxqtgo.roa
Signing time: Wed 15 Jul 2026 12:18:46 +0000
ROA not before: Wed 15 Jul 2026 12:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198588
IP address blocks: 62.105.195.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:b7:1c:4e:13:17:37:6b:cc:92:7b:84:c9:b0:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 15 12:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68888ef57bee7973bebe341999869fa10c6ab60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:3c:d6:cf:69:84:97:6d:a8:68:5e:04:a1:
4a:3c:8c:ec:ce:2a:7e:7a:f4:0f:ae:75:94:69:fd:
79:db:80:76:28:42:35:97:e1:8f:86:4f:bc:85:18:
dd:b9:a7:ff:28:fc:5e:51:52:6b:aa:d4:09:3d:29:
43:84:9b:42:fb:b2:88:ba:13:d1:59:95:c0:66:44:
91:b6:01:4f:1e:68:ed:08:96:63:de:a5:89:bc:47:
55:8c:bc:ea:c7:5b:d5:71:76:f7:5b:57:1e:81:aa:
fe:4a:19:22:f3:fb:50:6a:e2:df:2d:08:9e:f7:6b:
8d:a3:f6:0e:02:cb:20:d0:76:27:07:95:dc:21:62:
81:0f:a8:3e:84:bb:29:eb:9c:19:b9:4d:cb:16:4c:
ba:4b:58:56:52:cb:17:04:2b:cc:b6:4c:18:63:ef:
8f:a2:98:00:c5:29:00:66:73:06:fa:89:21:72:ad:
41:c3:61:17:22:43:84:60:da:8d:dc:e7:47:22:0d:
1e:62:d2:65:8c:23:6f:0d:73:37:18:c7:2e:4e:df:
be:48:81:88:cb:1d:87:ba:b8:5e:ac:b2:29:3a:46:
03:87:6c:4a:10:89:69:9f:1f:be:37:8f:68:73:1e:
b6:5e:00:4a:47:7f:7b:ee:45:a2:17:11:48:84:99:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:8E:F5:7B:EE:79:73:BE:BE:34:19:99:86:9F:A1:0C:6A:B6:0A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/aIiO9XvueXO-vjQZmYafoQxqtgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.195.0/24
195.21.146.0/24
212.222.168.0/24
217.117.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:78:ec:81:b7:19:a1:6a:8a:be:16:36:52:d3:b9:69:9e:1e:
52:88:55:8a:02:74:4d:d3:10:3e:2d:dc:00:aa:9f:38:14:9e:
d7:bf:79:6d:cc:4c:7a:4b:7d:d7:19:64:79:0e:72:8f:c2:33:
31:c6:05:48:2b:1f:02:e9:a7:74:ce:73:e5:aa:a5:6f:a4:71:
45:57:51:c5:f2:4a:07:ee:f1:f0:54:c2:ec:ce:0c:27:36:44:
21:3f:9e:cb:ce:86:d8:4e:01:1b:c8:d6:64:45:02:78:94:41:
22:3a:3e:57:93:e0:04:ca:0d:fd:ea:da:1c:e5:e9:c1:69:f6:
24:a3:79:e4:58:4e:6d:62:f9:4a:b1:c1:bc:5d:b7:41:3e:f8:
84:1c:fd:d6:1a:1a:3d:a3:2f:21:64:c0:21:09:ba:08:ac:55:
01:0a:2f:77:3f:0b:1f:a7:d7:68:54:a0:7e:29:df:2b:31:da:
94:c8:70:38:40:d6:31:11:bd:6c:c7:95:c3:f0:55:cf:5d:01:
49:5b:60:9b:18:a7:2e:73:fb:86:dc:7e:78:51:8b:ee:87:45:
a4:c4:4c:37:ad:45:37:07:c9:f2:21:80:20:80:74:34:ab:a6:
d5:a3:da:43:b5:f3:a7:c2:04:a2:c5:2d:16:82:3a:fa:45:52:
f0:d6:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:41 2026 by rpki-client