Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/baQ-TE_bUG8VzexeOz2rWEK6WC8.roa
File: baQ-TE_bUG8VzexeOz2rWEK6WC8.roa (raw, json)
Hash identifier: J8joDit9G7/XEU9rZHHodZA9+eGkfGU014sn5xDNbZc=
Subject key identifier: 6D:A4:3E:4C:4F:DB:50:6F:15:CD:EC:5E:3B:3D:AB:58:42:BA:58:2F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F9955596675C05F45378205F8B556E390
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/baQ-TE_bUG8VzexeOz2rWEK6WC8.roa
Signing time: Sat 25 Jul 2026 12:52:15 +0000
ROA not before: Sat 25 Jul 2026 12:52:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 62.105.196.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
77.67.91.0/24 maxlen: 24
194.77.69.0/24 maxlen: 24
194.120.121.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
217.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:55:59:66:75:c0:5f:45:37:82:05:f8:b5:56:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 25 12:52:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6da43e4c4fdb506f15cdec5e3b3dab5842ba582f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:7a:88:43:c3:00:65:82:bf:56:a3:dd:fb:
30:87:2d:df:68:c9:e7:2e:4f:35:15:39:4b:8f:bd:
08:ef:88:7a:8d:eb:8d:0a:cf:c5:63:57:40:41:da:
87:5f:46:e2:68:3d:94:76:c5:27:53:19:21:38:63:
d4:c6:a3:12:84:ad:07:7e:51:59:f4:94:06:5b:d9:
97:3e:88:9e:97:0e:c5:36:34:f5:fe:ba:6b:6f:58:
fc:0d:43:a0:c9:1b:06:09:b6:ef:61:d2:e3:89:09:
b6:7d:1e:7f:c7:33:99:05:17:8d:3d:57:f8:12:ed:
ab:9b:15:f9:37:1f:46:c4:b2:31:a9:fc:15:dc:d8:
c0:00:f0:41:bb:7a:13:0f:9f:0a:7d:e3:1a:85:15:
0b:1c:4f:ae:f9:19:4e:b6:e6:f9:ff:bc:ad:fe:34:
18:ad:6b:ba:78:17:27:c9:9e:8d:29:24:fc:4f:de:
b6:aa:b8:95:48:2d:a4:af:42:26:3f:65:f9:eb:36:
eb:94:7b:41:c3:36:1e:dc:02:dc:18:06:99:2d:7d:
4b:f8:91:34:09:a4:18:07:84:16:5d:45:b4:3a:df:
31:36:25:06:e5:4b:03:96:24:c7:2b:84:3c:d3:de:
81:2b:4a:e5:6e:9c:24:6f:63:9b:37:bd:03:e5:c7:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:3E:4C:4F:DB:50:6F:15:CD:EC:5E:3B:3D:AB:58:42:BA:58:2F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/baQ-TE_bUG8VzexeOz2rWEK6WC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.196.0/24
62.132.116.0/24
77.67.31.0/24
77.67.91.0/24
194.77.69.0/24
194.120.121.0/24
195.21.129.0/24
212.221.26.0/24
212.222.112.0/24
217.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
76:dc:aa:95:d3:a7:1c:73:b5:54:b8:b0:9b:a1:d7:67:f2:06:
d8:ce:b5:a1:e7:b8:17:f1:90:02:4b:b2:84:55:e7:53:87:38:
17:b4:ba:36:31:71:b3:31:6a:d5:10:9c:fe:e8:f0:38:b4:18:
a6:1b:36:c8:ab:ea:e8:ea:39:20:7c:da:32:c8:d3:ed:80:8e:
17:23:e1:48:2f:e9:6f:e3:e7:7a:56:48:e6:2a:04:86:1d:e4:
f6:5a:fc:0a:98:42:ef:57:c1:fa:ab:9c:5e:dc:f4:2b:a5:05:
2d:ea:f0:e2:a4:cb:72:e6:c2:47:2f:bc:46:23:76:e0:ed:98:
5c:a8:03:73:96:68:61:52:56:3b:f3:4a:11:11:a6:5a:95:1d:
38:76:a4:1e:92:3f:c5:67:f1:d3:7a:ac:55:28:15:21:d1:4d:
0b:ee:9b:4f:7f:c4:65:9d:91:68:76:71:8d:d1:26:ae:db:84:
b6:0d:35:80:ab:9b:00:97:88:65:f6:f5:2f:31:f5:b1:56:38:
20:ea:39:37:7f:07:f8:45:9a:d2:7e:33:54:a0:be:bc:fa:32:
80:5e:57:4c:90:f4:52:d4:f9:49:12:13:ff:99:52:fd:ca:96:
05:49:1d:84:6a:17:5f:38:0e:27:c6:e0:8a:47:fe:ff:53:ac:
cb:40:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:56 2026 by rpki-client